alumni-haut-lac.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a0:f4:23:b7:1c:ed:00:8b:6e:bc:58:cd:de:e5:e7:f5:1a was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=alumni-haut-lac.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a0:f4:23:b7:1c:ed:00:8b:6e:bc:58:cd:de:e5:e7:f5:1a
Serial Number (int): 316106553577965156910401565793837856060698
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0d:30:88:58:23:56:e6:b6:84:8e:a0:a5:51:0d:bd:b8:5d:ec:2d:01
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cb:ee:2d:07:b4:b7:b7:e1:b9:18:6b:89:09:3d:7e:00:63:f3:99:f3
Fingerprint (sha256): 00:dc:9e:45:40:0d:96:f5:1e:2f:67:d1:3a:df:0a:0b:54:93:70:06:48:75:f9:26:66:20:20:db:97:c0:0b:2d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate alumni-haut-lac.ch

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alumni-haut-lac.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aaaconnect.co.uk
abertayalumni.com
academicalsconnect.com
acgconnect.org
acglobalconnect.com
ackworthschoolconnect.com
aeseconnect.com
aiglonlife.ch
aiglonlife2.ch
aiglononline.ch
aimscommunity.org
aisgalumni.org
aislagosalumni.org
albanetworker.com
alderleyalumnae.co.uk
aluconnect.org
alumne.fak.dk
alumnet.sdu.dk
alumni-haut-lac.ch
alumni.24orebs.com
alumni.adek.gov.ae
alumni.bmc.edu.sa
alumni.champittet.ch
alumni.dulwich.org
alumni.eeg.uminho.pt
alumni.galilcol.ac.il
alumni.johnsmithtrust.org
alumni.neurosciences.berlin
alumni.pharm.chula.ac.th
alumnibeausoleil.ch
alumnihotelschoolrocmondriaan.nl
alumnirapport.com
alumnisb.be
alumniuib.com
alumniul.online
alumniultest.manual.graduway.com
andrewsnetwork.co.uk
ansaalumni.no
ansanetwork.no
arel.network
ashinagaconnect.org
askalumni.gre.ac.uk
aswalumni.org
atlanticcollegeconnect.com
atlanticconnect.org
auafconnect.net
auralumni.com
aurconnect.com
autconnect.com
aveconnect.org
www.aaaconnect.co.uk
www.abertayalumni.com
www.academicalsconnect.com
www.acgconnect.org
www.acglobalconnect.com
www.ackworthschoolconnect.com
www.aeseconnect.com
www.aiglonlife.ch
www.aiglonlife2.ch
www.aiglononline.ch
www.aimscommunity.org
www.aisgalumni.org
www.aislagosalumni.org
www.albanetworker.com
www.alderleyalumnae.co.uk
www.aluconnect.org
www.alumne.fak.dk
www.alumnet.sdu.dk
www.alumni-haut-lac.ch
www.alumni.24orebs.com
www.alumni.adek.gov.ae
www.alumni.dulwich.org
www.alumni.eeg.uminho.pt
www.alumni.pharm.chula.ac.th
www.alumnibeausoleil.ch
www.alumnihotelschoolrocmondriaan.nl
www.alumnirapport.com
www.alumnisb.be
www.alumniuib.com
www.alumniul.online
www.andrewsnetwork.co.uk
www.ansaalumni.no
www.ansanetwork.no
www.arel.network
www.ashinagaconnect.org
www.askalumni.gre.ac.uk
www.aswalumni.org
www.atlanticcollegeconnect.com
www.atlanticconnect.org
www.auafconnect.net
www.auralumni.com
www.aurconnect.com
www.autconnect.com
www.aveconnect.org

Other certificates including the domain name alumni-haut-lac.ch

(limited to 100 certificates)
alumni-haut-lac.ch
aveconnect.org
alumni.ashoka.edu.in
abertayalumni.com
graduway.net
abertayalumni.com
graduway.net
graduway.net
oxfordalumnicommunity.org
atlanticcollegeconnect.com
graduway.net
alumni.johnsmithtrust.org
oxfordalumnicommunity.org
alumne.fak.dk
oxfordalumnicommunity.org
ackworthschoolconnect.com
aveconnect.org
alumne.fak.dk
graduway.net
askalumni.gre.ac.uk
aaaconnect.co.uk
alumni.bmc.edu.sa
aaaconnect.co.uk
oxfordalumnicommunity.org
oxfordalumnicommunity.org
graduway.net
aaaconnect.co.uk
oxfordalumnicommunity.org
abertayalumni.com
graduway.net
alumni.dulwich.org
aaaconnect.co.uk
graduway.net
abertayalumni.com
aaaconnect.co.uk
graduway.net
oxfordalumnicommunity.org
aaaconnect.co.uk
graduway.net
oxfordalumnicommunity.org
aaaconnect.co.uk
alumni.eeg.uminho.pt
abertayalumni.com
graduway.net
alumni.johnsmithtrust.org
oxfordalumnicommunity.org
alumni.johnsmithtrust.org
alumne.fak.dk
arel.network
oxfordalumnicommunity.org
graduway.net
oxfordalumnicommunity.org
alumni.adek.gov.ae
alderleyalumnae.co.uk
oxfordalumnicommunity.org
arel.network
atlanticconnect.org
oxfordalumnicommunity.org
amitgushdanalumni.com
graduway.net
aaaconnect.co.uk
alumnihotelschoolrocmondriaan.nl
alumni-haut-lac.ch
abertayalumni.com
acglobalconnect.com
graduway.net
alumni.novasbe.pt
oxfordalumnicommunity.org
abertayalumni.com
arel.network
atlanticconnect.org
aaaconnect.co.uk
graduway.net
alumni.johnsmithtrust.org
graduway.net
graduway.net
abertayalumni.com
alumni.bmc.edu.sa
arel.network
graduway.net
aaaconnect.co.uk
alumni.eeg.uminho.pt
aaaconnect.co.uk
alumni.dulwich.org
oxfordalumnicommunity.org
aaaconnect.co.uk
graduway.net

Certificate

The complete raw certificate details for alumni-haut-lac.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrmAOzi5/OaQHGKSOa/7
XQYJyuG8IsacW4ZkljI2lpmoS3BPcZSVVPwrhvFiWcFQFKFJ1KsrjAOcGMVxeRWp
FXr6FSCFaGpHBUxPOwQyBbNtfmSJSqVJi8+3ZbvCgwpVU0+D6JCfrunU3s6QMhb8
NWrL8mXIknRRMFsMuGrdyeZbaP2WPq36pIS3mu7yWWeVwoJLDrjdxqnuacZKX5gV
VLky3SzMSoy/q4jQezd9Ysw6q+F3bAFJoYszLThtziAhwPgr4cuJax4wtaNV/kp1
J1wyd/3cdC5Giu/trqH9HLu6EfRYL/Z7QHOLgdd+TQVuxxav7KgD7q+1iKqhBFuA
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316106553577965156910401565793837856060698
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-09 10:26:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-07 10:26:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alumni-haut-lac.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18017313210049123650670677308500187162700969466216242788212085892253429399972452581334883216484537559440910146820989442327171138741803086843626156311935143332514460471788337063896077662973035122586600867179768499668683727236850111384208579489932523988599818109717183214617172745784186293795601332809697206044360609214486873593122394778880235945573392232350878382715461535663424820978017524190172466231241918028749719462208974424675517722842990008083596431374102826091698285741294180284643426291013360424562540627487895818885718610369892864829193169532782192575329321143086561119409171134150975223870614092249019678759
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0d3088582356e6b6848ea0a5510dbdb85dec2d01
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2002 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaaconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abertayalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academicalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acgconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acglobalconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ackworthschoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeseconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiglonlife.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiglonlife2.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiglononline.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aimscommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aisgalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aislagosalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albanetworker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alderleyalumnae.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aluconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumne.fak.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnet.sdu.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni-haut-lac.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.24orebs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.adek.gov.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.bmc.edu.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.champittet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.dulwich.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.eeg.uminho.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.galilcol.ac.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.johnsmithtrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.neurosciences.berlin'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.pharm.chula.ac.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnibeausoleil.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnihotelschoolrocmondriaan.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnirapport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnisb.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniuib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniul.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniultest.manual.graduway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrewsnetwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ansaalumni.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ansanetwork.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arel.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashinagaconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'askalumni.gre.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aswalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlanticcollegeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlanticconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auafconnect.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auralumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aveconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aaaconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abertayalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.academicalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acgconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acglobalconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ackworthschoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aeseconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aiglonlife.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aiglonlife2.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aiglononline.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aimscommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aisgalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aislagosalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albanetworker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alderleyalumnae.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aluconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumne.fak.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnet.sdu.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni-haut-lac.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.24orebs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.adek.gov.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.dulwich.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.eeg.uminho.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.pharm.chula.ac.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnibeausoleil.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnihotelschoolrocmondriaan.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnirapport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnisb.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniuib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniul.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andrewsnetwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ansaalumni.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ansanetwork.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arel.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashinagaconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.askalumni.gre.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aswalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlanticcollegeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlanticconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auafconnect.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auralumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aurconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aveconnect.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170bf0b75e90000040300463044022015b9e5d4823b3de672813a666671dbfd3422e38120930676da7924f4fecf7c140220466da7ba79f197378dfec1b1b06e297cf8667d64153b219a6787bc0e6af0185700770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170bf0b762000000403004830460221009ed6f938d77eb7a02d4962ee2b08e2a16ccdb2d4c17b49dc0156f112bfec043d022100f4d9777fc2d698b60e32cc1ed9a38d807c23bd3a50333e8b4e218aed3c292016
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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