ucdavis.boulderinsight.com

Issued by R3

About this certificate

This digital certificate with serial number 04:9b:a7:0e:f6:fa:b9:df:cd:69:f4:c0:da:a3:90:f9:84:b6 was issued on by Let's Encrypt.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ucdavis.boulderinsight.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9b:a7:0e:f6:fa:b9:df:cd:69:f4:c0:da:a3:90:f9:84:b6
Serial Number (int): 401414969376575877275871802410053597234358
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: df:16:9d:b8:fd:f7:33:dd:58:e3:6f:19:78:86:da:25:86:17:9c:61
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ea:14:19:74:f4:2f:9a:f7:a0:ce:3e:4a:b5:0e:77:9d:93:97:0e:db
Fingerprint (sha256): d7:91:72:c3:6c:80:be:8d:2e:95:40:b8:d4:cd:db:f3:dd:74:5f:66:cb:b6:a9:88:f2:76:b0:96:0e:5e:44:41

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ucdavis.boulderinsight.com

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ucdavis.boulderinsight.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

academy.ovaledge.com
app.drbizboom.com
aspectpolo.polo-development.com
beaufort.polo-development.com
binfieldheathpoloclub.polo-development.com
blackbears.polo-development.com
brandywinepolo.polo-development.com
cirencester.polo-development.com
connectstage.wintellplus.com
demo.jillianstreit.com
demo.malcomonline.com
drafting.trubytraining.com
dubaipoloclub.polo-development.com
dukane.foremostmedia.com
emsworth.polo-development.com
ghantootpolo.polo-development.com
grandcounty.academyfortourism.com
hampoloclub.polo-development.com
hertfordshire.polo-development.com
houseboats.trubytraining.com
india.polo-development.com
ipapolo.polo-development.com
jazzpharma.malcomonline.com
jri.employindy.org
laesperanza.polo-development.com
learn.onboardmaritime.com
learn.tfgeducation.com
learning.servicecore.com
learning.yourdocket.com
lms.alpha-derm.com
login.fightconnectapp.com
map.employindy.org
master.malcomonline.com
mountshastasupermarket.trubytraining.com
msolearning.tomtom.com
mysports.polo-development.com
novartis.malcomonline.com
pdh.suiteintro.com
pinnacle.tonyrobbins.com
puestoviejo.polo-development.com
silverthorn.trubytraining.com
summerhill.polo-development.com
tennesseelms.stchealth.us
ucdavis.boulderinsight.com
university.foremostmedia.com
visitphilly.academyfortourism.com
www.americanvaluescenter.org
www.ipapolo.com
www.knowledge.homes
www.malcomonline.com

Other certificates including the domain name boulderinsight.com

(limited to 100 certificates)
wadetrim.trubytraining.com
bhsa.mysportsanalysis.com
realtyinsights.com
cpcontacts.adventuredeb.com
wadetrim.trubytraining.com
farmviability.oahurcd.org
xltcg.com
xltcg.com
academy.boulderinsight.com
internal.hedgucation.assurehedge.com
www.educate.ekgguy.com
educate.ekgguy.com
adventuredeb.com
learning.servicon.com
www.learn-experiencemanitouregion.ca
nopingpong.com
boulderinsight.com
serpentine.polo-development.com
polopark.polo-development.com
learning.servicon.com
plataforma.pedago.cl
cpcontacts.adventuredeb.com
staff.arcsystechnologies.com
uni.bradfordconsolidation.com
learning.servicon.com
www.bloombehive.com
cpanel.realtyinsights.com
learning.servicon.com
farmviability.oahurcd.org
farmviability.oahurcd.org
learning.servicon.com
www.realtyinsights.boulderinsight.com
farmviability.oahurcd.org
autodiscover.deltasigmaphi.com
www.garrisoncox.boulderinsight.com
learning.servicon.com
polobern.polo-development.com
www.tridotacademy.com
autodiscover.boulderinsight.com
book.dragonnapper.com
competence.rosen-group.com
uni.airportlogistics.org
book.dragonnapper.com
elearning.toyota.com.ph
realtyinsights.com
deltasigmaphi.boulderinsight.com
academy.boulderinsight.com
educate.ekgguy.com
learning.travelalberta.com
farmviability.oahurcd.org
alp.arcsystechnologies.com
webdisk.winnerwinnerchickendinner.com
autodiscover.gstiegler.com
xltcg.com
internal.hedgucation.assurehedge.com
ucdavis.boulderinsight.com
www.educate.ekgguy.com
www.learn-experiencemanitouregion.ca
www.bloombehive.com
charlottebestbuys.com
www.pts.org
bourbon.guru
litifam-training.litify.com
educate.ekgguy.com
antisharkcage.com
www.educate.ekgguy.com
garrisoncox.com
learning.servicon.com
academy.evgo.com
cpanel.realtyinsights.com
adventuredeb.com
xltcg.com
educate.ekgguy.com
xltcg.com
elearning.toyota.com.ph
farmviability.oahurcd.org
university.tektonresearch.com
brand.polo-development.com
educate.ekgguy.com
learning.servicon.com
fairchild.trubytraining.com
www.wearespinco.ca
educate.ekgguy.com
farmviability.oahurcd.org
realtyinsights.com
internal.hedgucation.assurehedge.com
elearning.toyota.com.ph
educate.ekgguy.com
adventuredeb.com
www.realtyinsights.boulderinsight.com
hpaumpire.mysportsanalysis.com
deltasigmaphi.com
edu.4redi.net
www.tridotacademy.com
adventuredeb.com
farmviability.oahurcd.org
gstiegler.com
wadetrim.trubytraining.com
bourbon.guru
internal.hedgucation.assurehedge.com

Certificate

The complete raw certificate details for ucdavis.boulderinsight.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtamn5sqCfwFzyd5Yl4sE
2MXFrXDbESDUcwFyRUgIHg7FTmZ5l14YVjwuUbExIkqAH8ziA8Mgf5IOx+8j8hFd
EzwMqGXyQtNa2SFZgoJTTPZh3g/Ji7t/UMG3uT1GIfNWZOBkHGuaZGRw0yuDpnPy
rKPb/8q1R46DAuy2v4HmduP/5t0LsaeRadavSVPAZmV0vtx7OW4lwjo/mbmiUiJS
mtJEsVX043noH7MifYVgr0gKPk6GfTywfTj17+LQNhtLWuAsYx1dURKu3OQwlzjn
c8d9xKH6/mwZ4JtahbeXEvU6nrb3Pjje/WMXK8YrEuyToRPs6y/yynveq/z/wGzf
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 401414969376575877275871802410053597234358
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-01 04:57:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-29 04:57:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ucdavis.boulderinsight.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22932793624123504159324716610076119896463368701373897476325044462328062568850093283810406778389945555162592306639729015777311903107208730082234310639686619123535184276791829365633324846852520156739691883537013463748635851107171355000322785533342018939183012615492516853111818485691923471505592193370048151449495283649506280953546133638879070391984606842255328560624363255756575796334046740163379173177626890740293213756603477302158668029957079564882316559540167047815052034620997608158671710718867423525128947252409828742398723430700711357778949006546495323099255661465158840093620175932268001253496352208513558962157
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							df169db8fdf733dd58e36f197886da2586179c61
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1438 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academy.ovaledge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.drbizboom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspectpolo.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beaufort.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'binfieldheathpoloclub.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackbears.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandywinepolo.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cirencester.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectstage.wintellplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.jillianstreit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.malcomonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drafting.trubytraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dubaipoloclub.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dukane.foremostmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emsworth.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghantootpolo.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandcounty.academyfortourism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hampoloclub.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hertfordshire.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houseboats.trubytraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'india.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipapolo.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jazzpharma.malcomonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jri.employindy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laesperanza.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.onboardmaritime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.tfgeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learning.servicecore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learning.yourdocket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lms.alpha-derm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.fightconnectapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'map.employindy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'master.malcomonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountshastasupermarket.trubytraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msolearning.tomtom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysports.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novartis.malcomonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdh.suiteintro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinnacle.tonyrobbins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puestoviejo.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silverthorn.trubytraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summerhill.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tennesseelms.stchealth.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucdavis.boulderinsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'university.foremostmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitphilly.academyfortourism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.americanvaluescenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipapolo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.knowledge.homes'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.malcomonline.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c23f3c46e000004030046304402201d08ab993e4776590054dc2b55acb493c3ccf3e5cebf652c33086a9abefd865c0220726641971021909ee149d5595b2343a28152ea562e06a2b9be9018d548c58292007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c23f3c47a000004030047304502202a283704ca70a84dd7da2ab4b61c3f33eb3d19fbaa064cd07afa266a65c5233c022100d1ce7703dfa5f04677de3f2de8f6d585f7ecc202f77adc7d637af57461a7f17b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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