2019asba.ptly.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:4b:19:a6:9b:3b:79:ff:cb:aa:fd:6c:4f:88:d5:a7:84:43 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=2019asba.ptly.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4b:19:a6:9b:3b:79:ff:cb:aa:fd:6c:4f:88:d5:a7:84:43
Serial Number (int): 374004417015770218102875124493116015871043
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 56:8d:82:06:b1:8b:db:e2:4c:d5:32:64:e2:ec:1f:60:7c:c2:3e:6c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2a:d4:1a:56:ff:1e:8d:82:a4:15:ca:c1:28:59:f6:cf:ae:4f:f5:ea
Fingerprint (sha256): e6:b8:ed:0c:f2:d4:3a:97:12:e4:0d:1e:51:66:b4:39:4a:fe:16:6b:52:45:3a:af:a3:d8:8d:ce:84:b2:e1:eb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 2019asba.ptly.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 2019asba.ptly.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2019asba.ptly.com
ack.org.au
agcollegealumni.edu.au
alumni.clarendon.vic.edu.au
alumni.johnxxiii.edu.au
alumni.monte.nsw.edu.au
alumni.sacredheart.wa.edu.au
alumni.stmonicas-epping.com
alumni.tts.edu.sg
alumniconnect.org.au
alumnilinc.lincoln.ac.nz
aogu.ascham.nsw.edu.au
ap.ptly.com
apbeta.ptly.com
apsgolf.org.au
artsbeat.myhills.net.au
asba.asn.au
asba2019.ptly.com
asbansw.asn.au
benniesconnect.com
careyevents.ptly.com
careyfundraising.ptly.com
coca.net.au
community.ags.school.nz
community.harrowbeijing.cn
community.roseville.nsw.edu.au
connect.clc.vic.edu.au
connect.lakes.nsw.edu.au
danebankoldgirls.com
emjs.club
emmanuelcollegealumni.net.au
emmanuelevents.ptly.com
events.ags.school.nz
events.ejwhittenfoundation.com.au
events.loreto.vic.edu.au
fosvic.org.au
foundation.tts.edu.sg
ggsfundraising.ptly.com
giving.waverley.nsw.edu.au
glenaeoncommunity.com.au
grammar150th.ags.school.nz
heritage.johnxxiii.edu.au
hutchins.ptly.com
hutchins175th.ptly.com
ippa.iona.wa.edu.au
johnxxiiibusdirectory.ptly.com
jpcalumni.com.au
kcoca.com
kogu.kambala.nsw.edu.au
learninglounge.myhills.net.au
lmeddu.com
lowtherhall.ptly.com
lowtherhallcentenary.com.au
maristevents.ptly.com
myhills.net.au
ncoba.com.au
nswdpialumni.org
oba.net.au
ocga.com.au
oiu.org.au
okga.org.au
ola.org.au
oldboys.ccgs.wa.edu.au
oldboys.spc.nsw.edu.au
oldguildfordians.com.au
oldsaints.ascollege.wa.edu.au
omsc.org.au
ormistoncollegealumni.com.au
oscanet.com.au
oscayear12.ptly.com
osfc.ptly.com
ourtgs.com.au
owca.asn.au
pafa.myhills.net.au
palladians.com
paoca.com
pastpupils.loreto.vic.edu.au
pittwaterhouse.com
ptly.com
roseville.ptly.com
scotchevents.ptly.com
scotchosmad.ptly.com
sjcobu.com
sscalumni.com.au
statehighconnect.com.au
statehighevents.com.au
stcathsevents.com.au
stcathsoldgirls.com.au
teara.ags.school.nz
tksobu.com.au
tocalalumni.ptly.com
tohga.myhills.net.au
trinitycommunity.com.au
trinitystudents.ptly.com
tssoldboys.com.au
vivarch.org.au
waverleyevents.ptly.com
wcobu.com.au
xavnet.com.au

Other certificates including the domain name ptly.com

(limited to 100 certificates)
wcobu.com.au
ptlycert7.ptly.com
eu.ptly.com
ptlycert15.ptly.com
ais-alumni.be
ais-alumni.be
ap.ptly.com
ptlycert3.ptly.com
ptlycert9.ptly.com
ais-alumni.be
thebluecoatoldscholars.co.uk
hutchins.ptly.com
ptlycert18.ptly.com
maristevents.ptly.com
maristevents.ptly.com
ptlycert7.ptly.com
eu.ptly.com
*.ptly.com
ap.ptly.com
tocalalumni.ptly.com
hutchins.ptly.com
ptlycert16.ptly.com
ptlycert5.ptly.com
ptlycert16.ptly.com
ptlycert9.ptly.com
ptlycert15.ptly.com
eu.ptly.com
eubeta.ptly.com
ptlycert2.ptly.com
*.ptly.com
ptlycert4.ptly.com
ptlycert18.ptly.com
ais-alumni.be
tocalalumni.ptly.com
ais-alumni.be
lowtherhall.ptly.com
ptlycert15.ptly.com
*.ptly.com
ap.ptly.com
demo.ptly.com
ptlycert2.ptly.com
ap.ptly.com
cert0.ptly.com
cert4.ptly.com
ais-alumni.be
maristevents.ptly.com
asba2017.ptly.com
ptlycert16.ptly.com
ptlycert3.ptly.com
demo.ptly.com
2019asba.ptly.com
ap.ptly.com
cert3.ptly.com
eu.ptly.com
*.ptly.com
ptlycert18.ptly.com
ais-alumni.be
eu.ptly.com
ptlycert8.ptly.com
apbeta.ptly.com
ais-alumni.be
eubeta.ptly.com
maristevents.ptly.com
ptlycert17.ptly.com
ais-alumni.be
eu.ptly.com
ptlycert16.ptly.com
asba2019.ptly.com
ptlycert14.ptly.com
events.loreto.vic.edu.au
ptlycert21.ptly.com
ptlycert1.ptly.uk
ptlycert15.ptly.com
cert1.ptly.com
ap.ptly.com
ptlycert12.ptly.com
ap.ptly.com
emmanuelevents.ptly.com
eu.ptly.com
ptlycert8.ptly.com
ptlycert14.ptly.com
cert0.ptly.com
ptlycert12.ptly.com
myhills.net.au
eu.ptly.com
maristevents.ptly.com
cert1.ptly.com
ptlycert4.ptly.com
ptlycert14.ptly.com
events.loreto.vic.edu.au
ptlycert1.ptly.com
ptly.com
ap.ptly.com
ptlycert7.ptly.com
cert5.ptly.com
cert1.ptly.com
ais-alumni.be
maristevents.ptly.com
internet-alumni.com
cert3.ptly.com

Certificate

The complete raw certificate details for 2019asba.ptly.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5BuylWWcKQ4cYEF2bDt
FSeuqB/N9k2d6NWs40WbK0vQkJoUI4diZTHOOUvr8ATUjlH8m6ByWu7iOPNxIWmH
FNYENtnmnV1QZNmyEWwLpEnasG7lfTBghyPwcbkhlf8LVmjB4Wn2xNN/GGBp4E5V
aQY3dZdtVD69+YEFI2WZeRdGbsnZF1I+ku+ypHxpx3kbusqysb92D9CWegbJJe5t
nC95O56SlDmddq4TGC+hrSF1GP9n9zHu9/8C4lG3QtYxLYogKPPx4JLRSKd/7yNH
KmVL4aUfw7zwCPddobYoKVwLW3OIhTzVNiASQIHbmQA8VHYT1gpoUu0iF+BjNiS7
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 374004417015770218102875124493116015871043
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-03 01:35:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-02 01:35:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2019asba.ptly.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17618346846071184210889980016068371527197456351526445359998608041216985836400271805690318506210241300216594786265020282405178986391382509907983491723890158426731387083249680530596580811220496789554127411431239314426979485623985708940771960884510929181965072433992151325169551406188736990606089965089220778481007562355528048846567437082041985960871172631564080355864808507770122728576222515700006763042623954638974699487440853275527452622723782703077481415000000399775585514082871041290836132171146805254944483037337249946782400641512600664410513988438779375893354256826590028980703052018887886670958593902677191867311
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							568d8206b18bdbe24cd53264e2ec1f607cc23e6c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2089 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2019asba.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ack.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agcollegealumni.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.clarendon.vic.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.johnxxiii.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.monte.nsw.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.sacredheart.wa.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.stmonicas-epping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.tts.edu.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniconnect.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnilinc.lincoln.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aogu.ascham.nsw.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apbeta.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apsgolf.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artsbeat.myhills.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asba.asn.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asba2019.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asbansw.asn.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benniesconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careyevents.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careyfundraising.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coca.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.ags.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.harrowbeijing.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.roseville.nsw.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.clc.vic.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.lakes.nsw.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danebankoldgirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emjs.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emmanuelcollegealumni.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emmanuelevents.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.ags.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.ejwhittenfoundation.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.loreto.vic.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fosvic.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundation.tts.edu.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ggsfundraising.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giving.waverley.nsw.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenaeoncommunity.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grammar150th.ags.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heritage.johnxxiii.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hutchins.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hutchins175th.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ippa.iona.wa.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnxxiiibusdirectory.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jpcalumni.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcoca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kogu.kambala.nsw.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learninglounge.myhills.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmeddu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lowtherhall.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lowtherhallcentenary.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristevents.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhills.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncoba.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nswdpialumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oba.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocga.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oiu.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okga.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ola.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldboys.ccgs.wa.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldboys.spc.nsw.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldguildfordians.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldsaints.ascollege.wa.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omsc.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ormistoncollegealumni.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oscanet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oscayear12.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osfc.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourtgs.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owca.asn.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pafa.myhills.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palladians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paoca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pastpupils.loreto.vic.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pittwaterhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roseville.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scotchevents.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scotchosmad.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjcobu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sscalumni.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statehighconnect.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statehighevents.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcathsevents.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcathsoldgirls.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teara.ags.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tksobu.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tocalalumni.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tohga.myhills.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trinitycommunity.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trinitystudents.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tssoldboys.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivarch.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waverleyevents.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcobu.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xavnet.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016cf4fa516200000403004730450221008c2328fcf3c1b44ab15db6351c18af7f2f0f4cbf9006f6a66349718dae7c4d5f02206559302ef2dcf8a9bcbaa35ef41d889fd199ee9921981d36a15dc98b7d1dc444007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016cf4fa51600000040300483046022100b17f4d2afe406b00cb5737a78c629217bdf87900f51e738ec659642f976459db0221008e39bc802313547450c95cce3a4b9ec47a2b6f87409524317ee0636e79ad7567
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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