jc.edu

Issued by R3

About this certificate

This digital certificate with serial number 04:ac:45:4c:ca:84:ea:f3:88:10:5b:5e:b5:98:0c:8a:67:2d was issued on by Let's Encrypt.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=jc.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:ac:45:4c:ca:84:ea:f3:88:10:5b:5e:b5:98:0c:8a:67:2d
Serial Number (int): 407069826291290381437662414268759773177645
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 40:15:87:f2:6c:fe:44:32:65:ce:c4:c6:1b:2c:ff:e5:cc:6b:90:04
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cb:d7:4b:ec:cc:2b:55:01:58:6a:29:cd:5e:65:2f:54:35:0e:bf:85
Fingerprint (sha256): d7:73:3f:f4:67:7d:ac:ae:2f:93:e2:c5:55:49:e6:9e:02:62:09:0c:91:65:e3:84:62:79:3c:c7:61:4a:83:4b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate jc.edu

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jc.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1.govdelivery.com
252fwww.doctorswithoutborders.org
2d252fcontent.govdelivery.com
a-filer-records.hosting.cornell.edu
accreditation.gatewaycc.edu
afbc-submission.banking.unsw.edu.au
aggievote.ucdavis.edu
arabsinamerica.unc.edu
blog.teachingandlearning.unc.edu
bmeclub.bme.ncsu.edu
bostoto.rockhurst.edu
carolinabond.unc.edu
carolinamxlescholars.unc.edu
catalog.antiochsb.edu
ccblog.ashevillenc.gov
ccli.unc.edu
chilebase.oceana.org
cinemadigitalmedia.ucdavis.edu
commonground.usc.edu
cors.jsums.edu
datacenter.isdi.education
dev.aep.cornell.edu
dev.bog.georgetown.edu
dev.erdf.appcelerator.com
dev.newsbusters.org
dev.ophd.pantheon.berkeley.edu
developers-new.nwea.org
emergingtech.newstatesman.com
fms.umd.edu
food.dev.oceana.org
freeorder.dev.oceana.org
geniuschallenge.ny.gov
geo.nysenate.gov
heal.ucdavis.edu
hooverlab.engineering.asu.edu
hr.ahsc.arizona.edu
hub.uahs.arizona.edu
humantrafficking.unc.edu
instructional-continuity.id.ucsb.edu
intelligence.coronavirus.wa.gov
intldev.oceana.org
jc.edu
jcsu.edu
jobs.rainscapes.com
live-ua-chandler.pantheonsite.io
live.haas-executive.pantheon.berkeley.edu
livecntest.ppld.org
lsee.humboldt.edu
mail.as-coa.org
mediasandbox.cas.msu.edu
meridian-180.eforums.cornell.edu
mrc.vermont.gov
new.atr.org
onlineradiologydegree.adu.edu
onq.kqed.org
pentest.web.arizona.edu
phyloloab.test.franklinresearch.uga.edu
pr-377.pantheon-multidev.ufc.com
psp.sandiegozoowildlifealliance.org
pubsafeweb.rutgers.edu
pubtogel-takingmeasure.blogs.govdelivery.com
qe.uchicago.edu
sbobet.sites.intg.voya.com
sbsm.dev.oceana.org
ssp.dce.harvard.edu
staging.law.georgetown.edu
staging.mrctv.org
telemicroscopy.berkeley.edu
test.engmanagement.cornell.edu
test.ophd.pantheon.berkeley.edu
togeltoto.doctorswithoutborders.org
tt.arizona.edu
vitals.medicine.utoronto.ca
wpp.wustl.edu
www.acupunctureboard.az.gov
www.admission.berkeley.edu
www.apsmuseum.org
www.asc.usc.edu
www.bcf.arl.arizona.edu
www.bis.uga.edu
www.boec.az.gov
www.brand.cce.cornell.edu
www.caldining.berkeley.edu
www.cals-mac.arizona.edu
www.campusrec.arizona.edu
www.circle.berkeley.edu
www.dev.ag.ny.gov
www.fms.umd.edu
www.gfellerwallerlaw.unc.edu
www.global.rutgers.edu
www.hr.ahsc.arizona.edu
www.italianacademy.columbia.edu
www.lrsc.nodak.edu
www.medicalsimulation.virginia.edu
www.meyercancer.weill.cornell.edu
www.ndscs.nodak.edu
www.publichealth.uic.edu

Other certificates including the domain name jc.edu

(limited to 100 certificates)
communityadvancementfirm.com
mail.jc.edu
sts.jc.edu
asikmpo.discoverlosangeles.com
mail.jc.edu
mail.jc.edu
secure.jc.edu
aruba.jc.edu
mail.jc.edu
jc.edu
jc.edu
*.jc.edu
sts.jc.edu
aruba.jc.edu
1.govdelivery.com
secure.jc.edu
www.jc.edu
asikmpo.discoverlosangeles.com
jc.edu
mail.jc.edu
jc.edu
jc.edu
jc.edu
1.govdelivery.com
jc.edu
jc.edu
secure.jc.edu
secure.jc.edu
jc.edu
jc.edu
mail.jc.edu
jc.edu
jc.edu
mail.jc.edu
secure.jc.edu
mail.jc.edu
secure.jc.edu
jc.edu
secure.jc.edu
jc.edu
mail.jc.edu
jc.edu
aruba.jc.edu
mail.jc.edu
mail.jc.edu
jc.edu
mail.jc.edu
sts.jc.edu
sts.jc.edu
mail.jc.edu
secure.jc.edu
jc-ad5.jc.edu
jc.edu
aruba.jc.edu
mail.jc.edu
mail.jc.edu

Certificate

The complete raw certificate details for jc.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN15oeaas7UjHG17MrMh
Q0Wh+CPXZQe7WRP47PAWoedjUK9tGOY6MP7G6UG5NMWPd73SGDn2LBnc/U/GcWL3
mGtC5M47KhkZs2HbGImTA7SJiw5JueIw8enznhwgwDzmBleAG0Qg9s/RSFmw0e7y
4CqxOa6flamd0weNup4ktrv5IAFkwb5SNCMlFNWXyu4cJCUtUdnEX0lpTPSIK/uT
6voCDiEdXxnl15TTS2A8OYkhGyhvGxL9hYDS2uvR53Je7hbuCqGkUZaSed2/r42M
IqHw1nN4GC0lGGISh2CQvH9gtOb6LYHTwAD2yty1t4gTMplxLHFDdwPpa2d+RFkn
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 407069826291290381437662414268759773177645
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-20 13:47:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-19 13:47:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jc.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19297435810238244716322818920723853065064000181636968677920963740423679467601771166356730853590795188821373840577059371332747157619118677845787444284776264710750238633761123429788490529324370144620058406544174541958557396000558843607264593798701877777042297312401561008527069122385489941178730955074494395103590191520659337941993973632303456617273170090303164783362414637609442992705096806592110449151380255208978491086244425284950374539928179459907084901982405264983978155263287133961632659384813749624645833985516414570607834761519187920636763888682777225455843864929898099360676518408971116553929404277897094047743
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							401587f26cfe443265cec4c61b2cffe5cc6b9004
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2453 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '252fwww.doctorswithoutborders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2d252fcontent.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-filer-records.hosting.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accreditation.gatewaycc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afbc-submission.banking.unsw.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aggievote.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arabsinamerica.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.teachingandlearning.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmeclub.bme.ncsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bostoto.rockhurst.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carolinabond.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carolinamxlescholars.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.antiochsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccblog.ashevillenc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccli.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chilebase.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinemadigitalmedia.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commonground.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cors.jsums.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datacenter.isdi.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.aep.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bog.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.erdf.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.newsbusters.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ophd.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developers-new.nwea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emergingtech.newstatesman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fms.umd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'food.dev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeorder.dev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geniuschallenge.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geo.nysenate.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heal.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hooverlab.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hr.ahsc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humantrafficking.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instructional-continuity.id.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intelligence.coronavirus.wa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intldev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.rainscapes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-ua-chandler.pantheonsite.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.haas-executive.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livecntest.ppld.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsee.humboldt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.as-coa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediasandbox.cas.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meridian-180.eforums.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrc.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.atr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlineradiologydegree.adu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onq.kqed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pentest.web.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phyloloab.test.franklinresearch.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr-377.pantheon-multidev.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psp.sandiegozoowildlifealliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pubsafeweb.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pubtogel-takingmeasure.blogs.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qe.uchicago.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbobet.sites.intg.voya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbsm.dev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssp.dce.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.law.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.mrctv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telemicroscopy.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.engmanagement.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ophd.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togeltoto.doctorswithoutborders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tt.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitals.medicine.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpp.wustl.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acupunctureboard.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.admission.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apsmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asc.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcf.arl.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bis.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boec.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brand.cce.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caldining.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cals-mac.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campusrec.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.circle.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.ag.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fms.umd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfellerwallerlaw.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.global.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hr.ahsc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.italianacademy.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lrsc.nodak.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medicalsimulation.virginia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meyercancer.weill.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ndscs.nodak.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.publichealth.uic.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018efbf9d4bb000004030047304502204b893c6df4df7483e2ea030269be3f2f08d16e1f46b1152060c4c1881e9ac542022100f83d7113a8e324d31c75a446abeb3c858ee027acd0529dcd1ebbd96a259fb1410077001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018efbf9d4ed000004030048304602210082b2a38603e63a8b470145704dd1a7473620dd718cc428f48a4a1e549b399124022100c6064c3e9952048f4e17f2a4e1463d40758fa4d68a07f8307e1d6d395a9a6407
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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