yourlifeiowa.org

Issued by R3

About this certificate

This digital certificate with serial number 03:29:fd:91:52:df:0e:7b:de:4a:f7:fb:30:cd:0a:19:b8:bd was issued on by Let's Encrypt.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=yourlifeiowa.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:29:fd:91:52:df:0e:7b:de:4a:f7:fb:30:cd:0a:19:b8:bd
Serial Number (int): 275625484085847238485600378186024152053949
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5c:21:1f:75:bb:a7:bb:4b:ed:04:6f:99:1d:2a:3b:bc:38:af:b3:a7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c7:ea:5b:e5:a0:63:24:3a:5d:b6:0e:24:c0:80:d1:d8:46:d1:19:ce
Fingerprint (sha256): f3:10:9d:1a:68:c0:a2:f2:c9:37:4c:70:d6:c9:a2:6b:a3:0b:b6:1b:fc:53:6c:39:77:29:cf:96:a4:b1:ba:78

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate yourlifeiowa.org

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for yourlifeiowa.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1800betsoff.org
childsupport.ia.gov
coalitions.drugfreeinfo.org
cultureiowa.com
cultureiowa.org
dpscareers.com
drugfreeinfo.com
drugfreeinfo.net
drugfreeinfo.org
educateiowa.gov
facilitylocator.drugfreeinfo.org
iahealthlink.gov
iaschoolperformance.gov
iaschoolperformance.org
iowaartssummit.com
iowaattorneygeneral.org
iowacourtsonline.com
iowacourtsonline.net
iowacourtsonline.org
iowaculturalaffairs.com
iowaculturalaffairs.net
iowaculturalaffairs.org
iowaculture.com
iowaculture.net
iowaculture.org
iowacultureapp.com
iowacultureapp.org
iowadot.org
iowagreatplaces.com
iowagreatplaces.org
iowahumanitiescouncil.gov
iowaoutdoorsmagazine.com
iowap2interns.com
iowasourcewater.org
iowatitleguaranty.gov
iowaworks.gov
iowaworks.org
preserveiowasummit.com
preserveiowasummit.org
produceiowa.com
produceiowa.net
produceiowa.org
query.iowasexoffender.org
recoveryiowa.org
resources.iowahistory.org
skillediowa.org
stophtiowa.org
thefilmlounge.org
www.1800betsoff.org
www.childsupport.ia.gov
www.cjis.iowa.gov
www.culturalaffairs.org
www.dia-hfd.state.ia.us
www.dom.state.ia.us
www.dpscareers.com
www.food.iowa.gov
www.govelect.iowa.gov
www.governor.state.ia.us
www.ia.gov
www.iaschoolperformance.gov
www.iaschoolperformance.org
www.icn.state.ia.us
www.iid.state.ia.us
www.infoiowa.state.ia.us
www.insuranceca.iowa.gov
www.iowaartscouncil.org
www.iowaartssummit.com
www.iowabyways.org
www.iowacleanair.gov
www.iowacourtsonline.com
www.iowacourtsonline.net
www.iowacourtsonline.org
www.iowacultureapp.com
www.iowacultureapp.org
www.iowadnr.com
www.iowadnr.net
www.iowadot.gov
www.iowadot.org
www.iowagreatplaces.gov
www.iowagtsb.org
www.iowahistory.org
www.iowahush.com
www.iowap2services.com
www.iowareap.com
www.iowaroadsigns.com
www.iowasexoffender.com
www.iowasexoffender.net
www.iowasexoffender.org
www.iowasexoffenders.com
www.iowasexoffenders.net
www.iowasexoffenders.org
www.preserveiowasummit.com
www.preserveiowasummit.org
www.stophtiowa.org
yourlifeiowa.org

Other certificates including the domain name yourlifeiowa.org

(limited to 100 certificates)
yourlifeiowa.org
yourlifeiowa.com
yourlifeiowa.com
yourlifeiowa.org
yourlifeiowa.com
yourlifeiowa.com
yourlifeiowa.org
yourlifeiowa.org
yourlifeiowa.com
yourlifeiowa.com
yourlifeiowa.com
yourlifeiowa.com
yourlifeiowa.org
yourlifeiowa.com
yourlifeiowa.org
yourlifeiowa.org
yourlifeiowa.org
yourlifeiowa.com
yourlifeiowa.org
yourlifeiowa.org
yourlifeiowa.org
yourlifeiowa.com
yourlifeiowa.org
yourlifeiowa.com
yourlifeiowa.org
yourlifeiowa.com
yourlifeiowa.com
yourlifeiowa.com
yourlifeiowa.com
yourlifeiowa.com
yourlifeiowa.org
yourlifeiowa.com
yourlifeiowa.org
yourlifeiowa.org
yourlifeiowa.org
yourlifeiowa.com
yourlifeiowa.org
yourlifeiowa.org
yourlifeiowa.com
yourlifeiowa.org
yourlifeiowa.org
yourlifeiowa.com
yourlifeiowa.com
yourlifeiowa.org
yourlifeiowa.org
yourlifeiowa.com

Certificate

The complete raw certificate details for yourlifeiowa.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lfheAynIm5+X6wy2d/o
AGMtPQysfZN7eLtJFAa6ygTzorGQkEu2LRoJI+cG2u1Hm2jnZAUmeo//cU026yI3
v0CqT3Ne+u4SnpbGI1dranL2jmDCULxLcTQhjUlXnclL5KAh7fML2ZiM11EvbgdS
WZjKy8uYHOuCP4JWrpCXAM/5LQB5IuOznPUZ2iP29Ht/9f6VaVziV6hNnHeY3uQf
x4ZmobdJzsN0YJCr+loC6y+4b6H2XwwyROpdn/rGs/mPjbwfN5IRTwyx2aaXLDMR
iLUKlQgB01a73fFft2T7Td+6+UdplOIutGLceZ7AxWilUFcIwTx867I5l+wVY2Il
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275625484085847238485600378186024152053949
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-21 15:34:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-20 15:34:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'yourlifeiowa.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28573192529406265580697616934176125283370351416508334930708247594437139784518173130146724543172290563608150603693308333056816310932357589947294939940211901924638921238930096726836836293061002977604438445418048818308613609307790590929022183664188754699430955078298814058442805755953497671275278805100520823794328041460276717361059908915098334201798456963209000835165531575894638636695244431404251840774436290435981198939857392892396661631344544102077317413878980795229307070394481296577050000805112849796922485334042776290765424439645551538992227005095689404876610774476787164388550990673271368457683577765443510871301
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5c211f75bba7bb4bed046f991d2a3bbc38afb3a7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2062 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1800betsoff.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'childsupport.ia.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coalitions.drugfreeinfo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cultureiowa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cultureiowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dpscareers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drugfreeinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drugfreeinfo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drugfreeinfo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'educateiowa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facilitylocator.drugfreeinfo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iahealthlink.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iaschoolperformance.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iaschoolperformance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowaartssummit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowaattorneygeneral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowacourtsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowacourtsonline.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowacourtsonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowaculturalaffairs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowaculturalaffairs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowaculturalaffairs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowaculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowaculture.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowaculture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowacultureapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowacultureapp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowadot.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowagreatplaces.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowagreatplaces.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowahumanitiescouncil.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowaoutdoorsmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowap2interns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowasourcewater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowatitleguaranty.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowaworks.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowaworks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preserveiowasummit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preserveiowasummit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'produceiowa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'produceiowa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'produceiowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'query.iowasexoffender.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveryiowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.iowahistory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skillediowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stophtiowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefilmlounge.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1800betsoff.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.childsupport.ia.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cjis.iowa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.culturalaffairs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dia-hfd.state.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dom.state.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dpscareers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.food.iowa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.govelect.iowa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.governor.state.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ia.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iaschoolperformance.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iaschoolperformance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icn.state.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iid.state.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infoiowa.state.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insuranceca.iowa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowaartscouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowaartssummit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowabyways.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowacleanair.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowacourtsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowacourtsonline.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowacourtsonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowacultureapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowacultureapp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowadnr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowadnr.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowadot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowadot.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowagreatplaces.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowagtsb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowahistory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowahush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowap2services.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowareap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowaroadsigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowasexoffender.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowasexoffender.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowasexoffender.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowasexoffenders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowasexoffenders.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowasexoffenders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preserveiowasummit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preserveiowasummit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stophtiowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourlifeiowa.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187a4aa73820000040300473045022018c34147f30d9f3dd28ec96e0aaa44d964bbf7530540f59be998cff861ed05de0221008d7c325b8111d556285506526bd1b3b2d8e8f69e8b1320b7239d78e16421db780077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187a4aa739e0000040300483046022100d5fccaf973d6c55ffb589a5e7eebb4475534087324e15d0f788d7c37a11676a1022100d8431653976400498791ed1f3407fc03d7ef7c076ec627dce455da97a21bb20c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005299c078b342b0d03235878323f0782e9349a542a8cb451f00edd15dbae5ab046cb5b705ede867a9436c07374d90eaba63966f5a881fe35113f77e40903b37e5f23c3b14adeb70185739ac0fbb426b3e3c652c6280bc653ded1525ff17c85f5c0f7bd2ccc4fffa7a17e3a6b061cac2703fe7c2f45013922f4fe291e0253fe0a958831044ee1bcf3eb90102a6b3baa6ea6da5adb9842c0dddd1d6844daca2384dfd924e914650f6f040fa9d98df07723945096c27db30f2e57ab52d1ccba2c47e1d6ccb0a1f8937a505a844a6f5e1381d09acb11e9ee79d0100a4a8067f4c05910736a2bb9a067a3cbd53366c5b716bc97731496b3af9e1dacff518ecba4642c1