advanceiowa.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d0:b6:9e:94:e8:74:f5:7b:12:7d:9f:f4:79:f1:bb:64:a8 was issued on by Let's Encrypt.

With 76 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=advanceiowa.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d0:b6:9e:94:e8:74:f5:7b:12:7d:9f:f4:79:f1:bb:64:a8
Serial Number (int): 332358333013186195604801219243685833303208
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 91:de:a6:6d:d0:ed:ed:30:7a:7b:bb:4a:cc:58:16:8b:e6:30:e4:1c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 85:91:ec:e1:02:53:c6:4f:49:ec:6e:e6:5b:68:7e:95:26:1b:af:d9
Fingerprint (sha256): f2:b2:26:70:e6:18:d2:d6:fa:37:b6:66:87:82:3f:c7:21:4b:f0:b2:c8:c1:a9:ea:23:ea:31:32:dd:2f:40:9c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate advanceiowa.com

76

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for advanceiowa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

19th-amendment-centennial.org
advanceiowa.com
agricultureforpublichealth.org
community-in-motion.com
exploreiowageology.org
farmingforpublichealth.org
findstemiowa.org
goodneighboriowa.com
goodneighboriowa.org
intranet.iwrc.org
iowafamilybusiness.com
iowafamilybusinesscenter.com
iowafamilybusinessforum.com
iowastem.org
iwrc.org
jpec.org
mba.uni.edu.hk
msei.iwrc.org
mwfoodsummit.com
neiowastem.com
neiowastem.net
neiowastem.org
northamericanreview.org
nwirrc.org
painttraining.com
plantiowanative.com
playgroundsafety.org
proudandtorn.com
proudandtorn.org
qualityeducationnwia.org
qualityeducationswia.org
rampsandpathways.org
rrttc.com
star4d.org
tallgrassprairiecenter.org
teachingiowahistory.com
tedxuni.com
uni-dome.com
uni-dome.org
uni-foundation.org
uni.edu.hk
unialum.org
unibusinessethics.com
unidome.org
unifoundation.org
wayup-iowa.org
www.advanceiowa.com
www.community-in-motion.com
www.exploreiowageology.org
www.goodneighboriowa.org
www.iowastem.org
www.iwrc.org
www.jpec.org
www.mba.uni.edu.hk
www.mwfoodsummit.com
www.neiowastem.com
www.neiowastem.net
www.neiowastem.org
www.northamericanreview.org
www.nwirrc.org
www.painttraining.com
www.playgroundsafety.org
www.proudandtorn.com
www.proudandtorn.org
www.qualityeducationnwia.org
www.qualityeducationswia.org
www.rampsandpathways.org
www.rrttc.com
www.star4d.org
www.tallgrassprairiecenter.org
www.teachingiowahistory.com
www.tedxuni.com
www.uni-foundation.org
www.unialum.org
www.unifoundation.org
www.wayup-iowa.org

Other certificates including the domain name advanceiowa.com

(limited to 100 certificates)
advanceiowa.com
advanceiowa.com
advanceiowa.com
uni.edu
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
uni.edu
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
uni.edu
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
uni.edu
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com

Certificate

The complete raw certificate details for advanceiowa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEZZu9NtWHMBHd2Ozkqg
8B8OZ1P19IhXtDE1bapL1jmlufhiSDjjxs5SMVuIczOtPfKx6YiD0GRSkkQa8O43
1h2/ocDrdLakaKGqWZ5hT7DpeK++P1AtGGmef3WzNqVtFKVH/QiSekYYMLGT0tTv
qEg2RM0e8d68/gcVyD+W+3AdW+3wfgmcFItGeIV8kiD+QBsG5Rp7fe7OG5F+KIqr
oF2yE5QT+PhV00ST++D6qGpyvdchQCeeKXcuQ5sjNusogVLDcw0xTe/OVTXdRsB1
oKhdO4bIbZzG3Lu3oRKHKQTm0nPIeYGbN8IBdXkpKVNFp6eHCl9WYp/Bai12Um7Y
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332358333013186195604801219243685833303208
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-15 21:03:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-14 21:03:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'advanceiowa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24272445688958883409925410672980764381721371352676562035388204650406369574930046321599844738177389177758029422622618699439312062938097984085763390456639547404679013011781147662120803582581526745936743560180728227926148613594580066530996484539847638984067053239092704055264925757124366922179700226246404378598708859927075286011912006953773090546584029486398359881818301067076406283550356814715628185426259801365198646648760518334576306371469034746517356523501713536484354856643352415792429611355136161123218151971732930126551710164101189741448033840918274871989034232705475227216559802400097867937650577394165934381267
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							91dea66dd0eded307a7bbb4acc58168be630e41c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1567 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '19th-amendment-centennial.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advanceiowa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agricultureforpublichealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community-in-motion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exploreiowageology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmingforpublichealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findstemiowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodneighboriowa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodneighboriowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.iwrc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowafamilybusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowafamilybusinesscenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowafamilybusinessforum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowastem.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iwrc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jpec.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mba.uni.edu.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msei.iwrc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mwfoodsummit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neiowastem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neiowastem.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neiowastem.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northamericanreview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwirrc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'painttraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plantiowanative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playgroundsafety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proudandtorn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proudandtorn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualityeducationnwia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualityeducationswia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rampsandpathways.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rrttc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'star4d.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tallgrassprairiecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teachingiowahistory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tedxuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uni-dome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uni-dome.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uni-foundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uni.edu.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unialum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unibusinessethics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unidome.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unifoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wayup-iowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advanceiowa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.community-in-motion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exploreiowageology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodneighboriowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowastem.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iwrc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jpec.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mba.uni.edu.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mwfoodsummit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neiowastem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neiowastem.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neiowastem.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northamericanreview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nwirrc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.painttraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playgroundsafety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.proudandtorn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.proudandtorn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qualityeducationnwia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qualityeducationswia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rampsandpathways.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rrttc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.star4d.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tallgrassprairiecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teachingiowahistory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tedxuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uni-foundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unialum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unifoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wayup-iowa.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016fab3b9cba0000040300473045022100bb4c72c4a42c2f00900596200a9058f61892d463fa0004a613d20a47097c6e13022019ce97b45873c8947d4f59fbeb41cff92ef832d6edee38acd9e4d6eb795a2d34007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fab3b9cad000004030046304402204012eedecc4c17731bcfbd66a865ceddbffce63fab531e9a6045c7f8224d27cb02204ba95199d3be43561b6affb51d282ebcd03f96c35c8a0a7d261941b9fa08dba4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002de1c79df51eb7d942b864dde90374b10b26d2fed9d630fb61e7e26005ec4a2cfcbc45ec021fb6157d180cd8165d68555d83dd7098ba93aa6a56296deebf96c2befc94cb089a4a74c432668e45b7a3c267e5181fbc127b3e45746baed058b3e89136d1284923aff8a74420b1d95fca2a4e140754c1cfbeb73f7f2e635589e4764fc8a09c1bf1ff0ef5e98634061fc1403191a9e0e85e6532f69e68af4131677808282b41432a1b517148777e4a0af4d31961cba3774021b548bc6ed709dccf86a8bfa1bc5e4bbc413a5647ae6c5684c1c191e6b26d619d7112fe7bba9962fa8b9e40a8b4daeddcde8e30e5a47be04bb0fac30cbc9d99dd5ea994a83f2e2807c4