californiamemorialstadium.com

Issued by R3

About this certificate

This digital certificate with serial number 04:29:bc:2d:62:49:ed:ce:88:79:fc:dd:83:7a:84:57:30:60 was issued on by Let's Encrypt.

With 54 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=californiamemorialstadium.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:29:bc:2d:62:49:ed:ce:88:79:fc:dd:83:7a:84:57:30:60
Serial Number (int): 362650851280899056491786772667978007130208
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 40:15:87:f2:6c:fe:44:32:65:ce:c4:c6:1b:2c:ff:e5:cc:6b:90:04
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): eb:7c:02:9d:74:5e:bc:21:99:79:dc:06:03:ba:ef:e6:50:0a:98:b4
Fingerprint (sha256): d0:d0:f2:b8:39:10:74:5a:7d:24:b4:db:8c:ec:9e:75:1f:ac:37:0b:30:fe:c6:9e:1a:b1:1b:57:10:32:d2:e7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate californiamemorialstadium.com

54

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for californiamemorialstadium.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

a.ns.christiancentury.org
ac-dc-cas.americancouncils.org
admissions-test.web.arizona.edu
adn-test.nysenate.gov
api-peer.stg.gbci.org
apple.docs.rutgers.edu
bafasmtp.actorsfund.org
blog.nextlevelapparel.com
brazil-pr-250.pantheon-multidev.ufc.com
californiamemorialstadium.com
communitytestsite2.uaf.edu
de.ecoligo-dev.briteweb.com
dev.engie.appcelerator.com
dreamschoolnyc.org
e2aproject.org
egg.nacha.org
energy-business-review.com
error.on.ethics3.pantheon.berkeley.edu
ftp.commonsensemedia.org
inews.appcelerator.com
korea-pr-267.pantheon-multidev.ufc.com
korea-pr-298.pantheon-multidev.ufc.com
kubernetes.earthjustice.org
latin-america-pr-250.pantheon-multidev.ufc.com
latin-america-pr-267.pantheon-multidev.ufc.com
live.staging.reviews.com
marcellino.nysenate.gov
multidev.princeton.edu
nanograv-pire.wvu.edu
neil.myers.connorsstate.edu
nrotc.web.arizona.edu
nsc.rebelcopy.unlv.edu
phd.antioch.edu
pr-123-brazil.pantheon-multidev.ufc.com
pr-140.pantheon-multidev.ufc.com
pr-250.pantheon-multidev.ufc.com
pr-267.pantheon-multidev.ufc.com
pr-298.pantheon-multidev.ufc.com
ramses.ecotrust.org
requestinfo.connorsstate.edu
russia-pr-267.pantheon-multidev.ufc.com
russia-pr-298.pantheon-multidev.ufc.com
soe-msinterviews.ucdavis.edu
staging.reviews.com
test.thedoorway.nh.gov
theoldsite.felician.edu
uafusion.arizona.edu
us-espanol-pr-140.pantheon-multidev.ufc.com
us-espanol-pr-298.pantheon-multidev.ufc.com
vaccinebooster3.mcny.org
validacao.lbv.org
www.alcantara.nysenate.gov
www.efc.sog.unc.edu
www.resnet.rutgers.edu

Other certificates including the domain name californiamemorialstadium.com

(limited to 100 certificates)
5729564890234880-fe4.pantheonsite.io
5729564890234880-fe4.pantheonsite.io
a.ns.christiancentury.org
a.ns.christiancentury.org
5729564890234880-fe4.pantheonsite.io
5729564890234880-fe4.pantheonsite.io
5729564890234880-fe4.pantheonsite.io
5729564890234880-fe4.pantheonsite.io
5729564890234880-fe4.pantheonsite.io
5729564890234880-fe4.pantheonsite.io
5729564890234880-fe4.pantheonsite.io
5729564890234880-fe4.pantheonsite.io
5729564890234880-fe4.pantheonsite.io
5729564890234880-fe4.pantheonsite.io
californiamemorialstadium.com
5729564890234880-fe4.pantheonsite.io
californiamemorialstadium.com
californiamemorialstadium.com
5729564890234880-fe4.pantheonsite.io
californiamemorialstadium.com
californiamemorialstadium.com
californiamemorialstadium.com
5729564890234880-fe4.pantheonsite.io
californiamemorialstadium.com
5729564890234880-fe4.pantheonsite.io
5729564890234880-fe4.pantheonsite.io

Certificate

The complete raw certificate details for californiamemorialstadium.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN15oeaas7UjHG17MrMh
Q0Wh+CPXZQe7WRP47PAWoedjUK9tGOY6MP7G6UG5NMWPd73SGDn2LBnc/U/GcWL3
mGtC5M47KhkZs2HbGImTA7SJiw5JueIw8enznhwgwDzmBleAG0Qg9s/RSFmw0e7y
4CqxOa6flamd0weNup4ktrv5IAFkwb5SNCMlFNWXyu4cJCUtUdnEX0lpTPSIK/uT
6voCDiEdXxnl15TTS2A8OYkhGyhvGxL9hYDS2uvR53Je7hbuCqGkUZaSed2/r42M
IqHw1nN4GC0lGGISh2CQvH9gtOb6LYHTwAD2yty1t4gTMplxLHFDdwPpa2d+RFkn
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 362650851280899056491786772667978007130208
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 19:55:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-23 19:55:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'californiamemorialstadium.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19297435810238244716322818920723853065064000181636968677920963740423679467601771166356730853590795188821373840577059371332747157619118677845787444284776264710750238633761123429788490529324370144620058406544174541958557396000558843607264593798701877777042297312401561008527069122385489941178730955074494395103590191520659337941993973632303456617273170090303164783362414637609442992705096806592110449151380255208978491086244425284950374539928179459907084901982405264983978155263287133961632659384813749624645833985516414570607834761519187920636763888682777225455843864929898099360676518408971116553929404277897094047743
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							401587f26cfe443265cec4c61b2cffe5cc6b9004
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1580 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.ns.christiancentury.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ac-dc-cas.americancouncils.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admissions-test.web.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adn-test.nysenate.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-peer.stg.gbci.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apple.docs.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bafasmtp.actorsfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.nextlevelapparel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brazil-pr-250.pantheon-multidev.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'californiamemorialstadium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communitytestsite2.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de.ecoligo-dev.briteweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.engie.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dreamschoolnyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e2aproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egg.nacha.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energy-business-review.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'error.on.ethics3.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp.commonsensemedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inews.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'korea-pr-267.pantheon-multidev.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'korea-pr-298.pantheon-multidev.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kubernetes.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latin-america-pr-250.pantheon-multidev.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latin-america-pr-267.pantheon-multidev.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.staging.reviews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcellino.nysenate.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multidev.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanograv-pire.wvu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neil.myers.connorsstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrotc.web.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsc.rebelcopy.unlv.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phd.antioch.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr-123-brazil.pantheon-multidev.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr-140.pantheon-multidev.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr-250.pantheon-multidev.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr-267.pantheon-multidev.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr-298.pantheon-multidev.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramses.ecotrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'requestinfo.connorsstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'russia-pr-267.pantheon-multidev.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'russia-pr-298.pantheon-multidev.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soe-msinterviews.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.reviews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.thedoorway.nh.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theoldsite.felician.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uafusion.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-espanol-pr-140.pantheon-multidev.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-espanol-pr-298.pantheon-multidev.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaccinebooster3.mcny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'validacao.lbv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alcantara.nysenate.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.efc.sog.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resnet.rutgers.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f11e454920000040300473045022036633e388ad58380603e801b157212568034b3aaa9cd2107a6ec11c90619c829022100c809db0bff76cee06f74369a7a1f8b0c47f4f5e0e26584e01f0f143a81b9b7f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f11e4548f000004030047304502200e19ec9948e1c81acc5d64b9a6022b71bbbc971f9bfd733ca64938b5d7c85ea5022100b31756f6dca5a44b12a5a63c38643d3972bda92ca27d5ec04bff1dd1f99275ec
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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