aatlconnected.com

Issued by R3

About this certificate

This digital certificate with serial number 04:4b:8d:d9:fc:a2:16:eb:75:e1:7d:e3:b0:03:2e:c4:70:37 was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aatlconnected.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4b:8d:d9:fc:a2:16:eb:75:e1:7d:e3:b0:03:2e:c4:70:37
Serial Number (int): 374158874245944622313915437234880988344375
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: bd:13:10:2f:79:67:97:c9:2f:be:62:3d:74:7f:ed:de:08:94:78:e6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 36:59:40:bc:ee:2e:4b:69:33:f6:af:c8:4b:d0:2a:4f:0b:6b:12:42
Fingerprint (sha256): 07:a8:27:87:de:d5:d1:33:7f:e9:3f:67:5d:fd:42:a1:67:8f:37:3d:cc:98:c6:6e:2f:61:9c:91:97:f8:54:d4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate aatlconnected.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aatlconnected.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aatlconnected.com
acacia.network
access.fortefoundation.org
acfcampusconnect.org
aclubtemp.com
acomconnect.com
acsconnects.org
adenalumni.net
aexrochester.org
africanhumanities.org
ahlefconnect.com
ahscommunity.org
alemanyconnect.org
allhandsandheartsalumni.org
alphaphinetwork.com
alumni.bcm.edu
alumni.brandman.edu
alumni.cayetano.edu.pe
alumni.cdl.ch
alumni.estacio.br
alumni.fia.com.br
alumni.fundacao.bradesco
alumni.harding.edu
alumni.harpercollege.edu
alumni.maua.br
alumni.nonprofitpractice.org
alumni.pcci.edu
alumni.puc-campinas.edu.br
alumni.siebelinstitute.com
alumni.udsm.ac.tz
alumni.unach.cl
alumni.unicamp.br
alumni.univali.br
alumniatbhs.com
alumnigsb.com
alumniknightnetwork.com
alumnisabana.com
alumniucsh.com
alumniupaep.mx
ampleforthglobal.org.uk
andoveralumni.org
andrewsnetwork.org
apuconnect.com
aqsaintsnetwork.com
arrowsconnect.org
asfmalumni.com
asulawalumninetwork.com
athenianlink.com
avonoldfarmsalumni.com
www.aatlconnected.com
www.acacia.network
www.acfcampusconnect.org
www.aclubtemp.com
www.acomconnect.com
www.acsconnects.org
www.adenalumni.net
www.aexrochester.org
www.africanhumanities.org
www.ahlefconnect.com
www.ahscommunity.org
www.alemanyconnect.org
www.allhandsandheartsalumni.org
www.alphaphinetwork.com
www.alumni.brandman.edu
www.alumni.cayetano.edu.pe
www.alumni.estacio.br
www.alumni.fia.com.br
www.alumni.fundacao.bradesco
www.alumni.harding.edu
www.alumni.harpercollege.edu
www.alumni.maua.br
www.alumni.nonprofitpractice.org
www.alumni.pcci.edu
www.alumni.puc-campinas.edu.br
www.alumni.udsm.ac.tz
www.alumni.unach.cl
www.alumni.unicamp.br
www.alumni.univali.br
www.alumniatbhs.com
www.alumnigsb.com
www.alumniknightnetwork.com
www.alumnisabana.com
www.alumniucsh.com
www.alumniupaep.mx
www.ampleforthglobal.org.uk
www.andoveralumni.org
www.andrewsnetwork.org
www.apuconnect.com
www.aqsaintsnetwork.com
www.arrowsconnect.org
www.asfmalumni.com
www.asulawalumninetwork.com
www.athenianlink.com
www.avonoldfarmsalumni.com

Other certificates including the domain name aatlconnected.com

(limited to 100 certificates)
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
alumni.pcci.edu
alumni.pcci.edu
aatlconnected.com
alumni.facamp.com.br
aatlconnected.com
alumni.pcci.edu
alumni.nonprofitpractice.org
alumni.thrivescholars.org
aatlconnected.com
alumni.facamp.com.br
aatlconnected.com
aatlconnected.com
alumni.pcci.edu
aatlconnected.com
alumni.pcci.edu
aatlconnected.com
aatlconnected.com
aatlconnected.com
alumni.facamp.com.br
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
alumni.pcci.edu
alumni.pcci.edu
aatlconnected.com
alumni.pcci.edu
aatlconnected.com
aatlconnected.com
aatlconnected.com
alumni.nonprofitpractice.org
alumni.facamp.com.br
aatlconnected.com
alumni.pcci.edu
aatlconnected.com
alumni.pcci.edu
aatlconnected.com
alumni.pcci.edu
aatlconnected.com
aatlconnected.com
aatlconnected.com
alumni.pcci.edu
aatlconnected.com
alumni.pcci.edu
aatlconnected.com
alumni.pcci.edu
alumni.facamp.com.br
alumni.thrivescholars.org
aatlconnected.com
aatlconnected.com
alumni.facamp.com.br
aatlconnected.com

Certificate

The complete raw certificate details for aatlconnected.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBLl40MDjQTviWkjAd5N
9z5uIiKp0AhLc0ZM/XAXjoVnVIkq/1ZPdzSotkp8Z0dY4Lzb7CXnC7YTlOgm6773
X9NVdR6rW27Ml2fv3Xx6kK5+8a1yVEOEC80X+rKaL7K8pYQ8lPobwZ4DVCat3pDt
qeYu8O/OFJo6FW3HQ3LzLpclYeNRzzGlMV/YbrneSpke+c9vU/+DeyVG44K/fAB9
FIyMP8UYuvK/o90q5fTI/IE/ohFq33diPH55JomwKU28TWMiCIQGEhm4F5pCs+lL
NGa4tQG2gGk7M87OgurxlCbjfZxp+Lcu668OrvvWDpvGZ5WZKB9tVcOlhmTBpkQ6
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 374158874245944622313915437234880988344375
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-12 09:38:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-10 09:38:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aatlconnected.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17177728426007719132717575950210635558979884679465201610296628183868966513400220050687898349611925378044709834820286746131413050171400313053009771943059559210583149268302068403204134216161248886412165685905699053509315643809446079844155376301525178963415768947330308923506251893867007321166647719881067782803455466237396894631283702524882106904086435384615293328742718157283595369802651125655104713676633983814031947049926710806989554057231529369957859397326581324050330683569307346807934219449587980735961132553289291020887765682412961783612780884485044113587251431753342876405552558299481422197972841368089021135561
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bd13102f796797c92fbe623d747fedde089478e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2069 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aatlconnected.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acacia.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access.fortefoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acfcampusconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aclubtemp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acomconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acsconnects.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adenalumni.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aexrochester.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africanhumanities.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahlefconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahscommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alemanyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allhandsandheartsalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alphaphinetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.bcm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.brandman.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.cayetano.edu.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.cdl.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.estacio.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.fia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.fundacao.bradesco'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.harding.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.harpercollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.maua.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.nonprofitpractice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.pcci.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.puc-campinas.edu.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.siebelinstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.udsm.ac.tz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.unach.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.unicamp.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.univali.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniatbhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnigsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniknightnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnisabana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniucsh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniupaep.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ampleforthglobal.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andoveralumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrewsnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqsaintsnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arrowsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asfmalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asulawalumninetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athenianlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avonoldfarmsalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aatlconnected.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acacia.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acfcampusconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aclubtemp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acomconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acsconnects.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adenalumni.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aexrochester.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.africanhumanities.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahlefconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahscommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alemanyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allhandsandheartsalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alphaphinetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.brandman.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.cayetano.edu.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.estacio.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.fia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.fundacao.bradesco'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.harding.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.harpercollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.maua.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.nonprofitpractice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.pcci.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.puc-campinas.edu.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.udsm.ac.tz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.unach.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.unicamp.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.univali.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniatbhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnigsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniknightnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnisabana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniucsh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniupaep.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ampleforthglobal.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andoveralumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andrewsnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aqsaintsnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arrowsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asfmalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asulawalumninetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athenianlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avonoldfarmsalumni.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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