ns2.getro.com

Issued by R3

About this certificate

This digital certificate with serial number 04:56:5a:cb:09:66:6f:c7:54:97:11:c6:fc:2b:14:38:06:24 was issued on by Let's Encrypt.

With 78 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ns2.getro.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:56:5a:cb:09:66:6f:c7:54:97:11:c6:fc:2b:14:38:06:24
Serial Number (int): 377834112028782172264029541343930065880612
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f9:37:9a:65:24:5e:16:c8:50:4a:32:5e:ef:43:5b:ef:db:6b:cf:de
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 13:9a:ab:c7:c1:2c:74:12:28:11:66:05:6e:e6:25:a3:c4:0d:51:3a
Fingerprint (sha256): 23:48:5b:b0:92:31:92:a4:96:0a:e1:3c:d3:6c:f3:29:7b:fa:f0:84:fd:0d:e4:76:39:73:99:b1:34:52:bb:0d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ns2.getro.com

78

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ns2.getro.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

careers.dfjgrowth.com
careers.uncharted.org
jobs.acgpartners.com
jobs.alpinesg.com
jobs.amplifypartners.com
jobs.anzupartners.com
jobs.atxventurepartners.com
jobs.axavp.com
jobs.bluehaveninitiative.com
jobs.boost.vc
jobs.bowcapital.com
jobs.byfounders.vc
jobs.cantos.vc
jobs.company.co
jobs.craftventures.com
jobs.cre.vc
jobs.eclipse.vc
jobs.edpstarter.com
jobs.embarccollective.com
jobs.energyimpactpartners.com
jobs.engine.xyz
jobs.firstmilevc.com
jobs.flourishventures.com
jobs.forerunnerventures.com
jobs.fprimecapital.com
jobs.fulcrumep.com
jobs.generalcatalyst.com
jobs.glasswing.vc
jobs.greylock.com
jobs.htxtalent.com
jobs.icebreaker.vc
jobs.initialized.com
jobs.javelinvp.com
jobs.jllspark.com
jobs.joinef.com
jobs.kaporcapital.com
jobs.khoslaventures.com
jobs.kindredcapital.vc
jobs.kinship.co
jobs.knoxtech.org
jobs.launchtn.org
jobs.lumalaunch.com
jobs.lyragrowth.com
jobs.m13.co
jobs.massdigitalhealth.org
jobs.multicoin.capital
jobs.nfx.com
jobs.nif.vc
jobs.notation.vc
jobs.omersventures.com
jobs.oxfordsciencesinnovation.com
jobs.panteracapital.com
jobs.petersonpartners.com
jobs.petersonventures.com
jobs.pnptc.com
jobs.quona.com
jobs.reddogcap.com
jobs.ret.vc
jobs.rockiesventureclub.org
jobs.rosecliff.com
jobs.s2gventures.com
jobs.saintjoseph.com
jobs.sapphireventures.com
jobs.silvertonpartners.com
jobs.southparkcommons.com
jobs.spacetalent.org
jobs.startuplab.no
jobs.susaventures.com
jobs.tpycapital.com
jobs.tusk.vc
jobs.uncorkcapital.com
jobs.valorcapitalgroup.com
jobs.venrock.com
jobs.vertexventures.co.il
ns2.getro.com
opportunities.lool.vc
techjobs.marsdd.com
www.agetech.jobs

Other certificates including the domain name getro.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for ns2.getro.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 377834112028782172264029541343930065880612
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-02 00:11:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-01 00:11:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ns2.getro.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 970596525622566796162861569865563723929872284657147481689049235135010449983358329037050869204876998609029416153542577733548249928318521988813633428219893584385647957882723436351172720506504775758223644145677257951113501843650317433051666909077464387128906637000251949909088252736638246321334379169927952107485903078040220295533060392740629516619334904425554649758488638108759201542526509896107276997505464727354038711261602830858471319395155481384755163355215642830984109052142338578282403690230077500873012127998803606509222985249552209030558631657719582710782480671853922897119631088936636067950613922099830634095872206434805347706080306507608446971592292187728002185394771578331460619599686900156314501499562160383071755725556891915556163750875704568318872492496413697359716914320563863555792213033740852765506098663193964317164583552929285525326835965031889858469383120612712502815245595771242975173433472264159320624703879226998740738312374342090180016084715228653979613696207920341011432973410280397899254592522736896724372464802549712532140213286590369936902972502092722774359906357800063700850008884626239155881048050425417124686179552112991968997480801273408626861821248149966483153758255909599086666099801615536719783636201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f9379a65245e16c8504a325eef435befdb6bcfde
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1689 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.dfjgrowth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.uncharted.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.acgpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.alpinesg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.amplifypartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.anzupartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.atxventurepartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.axavp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.bluehaveninitiative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.boost.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.bowcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.byfounders.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.cantos.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.company.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.craftventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.cre.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.eclipse.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.edpstarter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.embarccollective.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.energyimpactpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.engine.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.firstmilevc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.flourishventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.forerunnerventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.fprimecapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.fulcrumep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.generalcatalyst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.glasswing.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.greylock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.htxtalent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.icebreaker.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.initialized.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.javelinvp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.jllspark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.joinef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.kaporcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.khoslaventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.kindredcapital.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.kinship.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.knoxtech.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.launchtn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.lumalaunch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.lyragrowth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.m13.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.massdigitalhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.multicoin.capital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.nfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.nif.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.notation.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.omersventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.oxfordsciencesinnovation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.panteracapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.petersonpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.petersonventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.pnptc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.quona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.reddogcap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.ret.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.rockiesventureclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.rosecliff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.s2gventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.saintjoseph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.sapphireventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.silvertonpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.southparkcommons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.spacetalent.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.startuplab.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.susaventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.tpycapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.tusk.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.uncorkcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.valorcapitalgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.venrock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.vertexventures.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns2.getro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opportunities.lool.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techjobs.marsdd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agetech.jobs'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017ba40fe1f70000040300463044021f2b9b45e0c0bfd90478d594a47353ff077adb4b08b800b77cdbf52e52cb3e750221009035d0c465f03af76664c0bd709e04b70f8e56ae6b21cd12e7c57481a3b8d1a40076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017ba40fe246000004030047304502203f751f0177284b2b69a30b7f7294ed8464ffeced402d8e75f6310c2cb2116948022100de09795f158c9c0d53056024cf7231ae4f436d816122c8a372229a03ff5a5f5e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008e2f5220780e1d3b350b5836fb9ea72dacdce1d4f1574f9f0a35d26982cf6d52e465fa7a695b663a377aa989ab399dfe3108cf6f68c1fb4c43fd2b7d7eb9cf89175e40f310491f9ca10f4139ee86b98b462362d24f134c7408b9a96b2efcba1cbfaed5f8462622b53ec3236e17304c2b8e4a791e39d5c195ce209b116fe2864b7a076c00a332e689937b4c6fe8a04d1b0281e26a55262c41b2d5efb73da2cedfb1ee58fdcd16c2490ac512f00b93c5136d1c233cc7e7a2ea34851ac978bd83fac11242a43e0bf8df92a4b6bdf75ca79367bdfd8c35de5e096d3b1aef6f40564983764b774b728ca2280be20575229ab6f6a5ef128611de815e066650ba40ca8f