a.reinventtechnologypartners.com

Issued by R3

About this certificate

This digital certificate with serial number 04:a5:af:3f:d3:ab:ab:16:5c:7c:72:e2:65:ba:bc:f1:1d:02 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=a.reinventtechnologypartners.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a5:af:3f:d3:ab:ab:16:5c:7c:72:e2:65:ba:bc:f1:1d:02
Serial Number (int): 404828680576149672160093705583215135235330
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 34:ea:38:35:cd:71:1e:24:5f:34:49:a6:7f:08:49:0a:ab:59:80:20
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 11:b6:2e:00:39:b4:db:b7:16:e1:20:84:8c:2d:be:3b:0d:60:ab:2b
Fingerprint (sha256): 24:17:6e:58:69:6f:92:39:c1:24:4d:db:39:f1:28:7e:75:c4:83:b5:c2:02:e3:72:b6:d7:52:98:2c:04:c5:ff

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate a.reinventtechnologypartners.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for a.reinventtechnologypartners.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

a.reinventtechnologypartners.com
akcoatings.com
aksteel.com
aktube.com
aspu.com
cancergenetics.com
capstonefinance.com
careers.pieris.com
carrizo.com
conference.ladenburg.com
crzo.com
crzo.net
greggumbel.com
interventionalmr.com
interventionalmr.net
investor.twoharborsinvestment.com
investors.cabalettabio.com
investors.geemedia.com
investors.globaleagleent.com
investors.imediabrands.com
investors.kezarlifesciences.com
investors.rexahn.com
investors.tiltholdings.com
ir.adgerobiopharm.com
ir.bristowgroup.com
ir.capstoneturbine.com
ir.cerecor.com
ir.cohbar.com
ir.delmarpharma.com
ir.dgoc.com
ir.gladstonecapital.com
ir.gladstonecommercial.com
ir.gladstoneinvestment.com
ir.gladstoneland.com
ir.greenspiritrx.com
ir.gulfportenergy.com
ir.huntsman.com
ir.interpacediagnostics.com
ir.libertybroadband.com
ir.libertymedia.com
ir.libertytripadvisorholdings.com
ir.lonestarresources.com
ir.mainstcapital.com
ir.midwestemissions.com
ir.milestonescientific.com
ir.mtem.com
ir.nationalstorageaffiliates.com
ir.oneworldpharma.com
ir.pennvirginia.com
ir.pharmacytebiotech.com
ir.pieris.com
ir.promisneurosciences.com
ir.qurateretail.com
ir.relmada.com
ir.resonant.com
ir.rigel.com
ir.riotblockchain.com
ir.rosehillresources.com
ir.volitionrx.com
ir.wisatechnologies.com
irisife.com
itkg.net
joinladenburg.com
kcsa-cannabis.com
nclhltdinvestor.com
nclhltdmedia.com
omnideep.com
reporting.vfc.com
terratechcorp.com
troutgroup.com
venturefoundryvfc.com
vfcfoundation.org
www.akcoatings.com
www.aksteel.com
www.aktube.com
www.cancergenetics.com
www.capstonefinance.com
www.carrizo.com
www.crzo.com
www.crzo.net
www.greggumbel.com
www.gvrtrade.com
www.interventionalmr.com
www.interventionalmr.net
www.irisife.com
www.itkg.net
www.joinladenburg.com
www.kcsa-cannabis.com
www.nclhltdinvestor.com
www.nclhltdmedia.com
www.omnideep.com
www.petroteqenergy.com
www.seacorholdingsinvestors.com
www.terratechcorp.com
www.troutgroup.com
www.venturefoundryvfc.com
www.vfcfoundation.org
www.vfcglobalidentity.com
z.reinventtechnologypartners.com

Other certificates including the domain name reinventtechnologypartners.com

(limited to 100 certificates)
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com

Certificate

The complete raw certificate details for a.reinventtechnologypartners.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGhlh1BpFb0rPKjsV9HL
46WsNBg/NeXPqRL0cwgAVm+6h1M989JUbRrX5F/vRsRDFCnq3G1/4wbW2lMz+1jm
nLsieumSXTXWvZYxYuOMtr9lbRl4zHcOSgRCw/Yy0Ust11mpQCdmwzMWmk66kIBV
S4ew7NKTiAh1H87vJm3RyWLV2j6nj20WakFswVwFpMHOjbX/pWqiNYNM3tR0AZC0
cjy8fT1zYb2fLeIMggBzrVd1iPUpYaoJhni3XsaFeIPwqZf+jwtVy5bcBk+D0d1x
X5BzB0i6SMLP9Ibqd3nystfOnucOgaCcjVMdixFlbI5QjV7wB3hrgUnIv5CbCrWM
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 404828680576149672160093705583215135235330
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-11 13:39:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-09 13:39:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'a.reinventtechnologypartners.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21259515114456681004550432137903378278648309256846077630498127793967639297305637233645527375596779237892741891103969180930525555825952495942189690986539397641129536006992056191426462250837538681806774405992661458670052335267263121866838338427976539924580895198770735302065131366640024183235943096816255920310553507531589619461894045954869906370988312842985173320231513548355582193110011617845883054040154969203558886332356563516864765771021203026162906918172873493127603600492784774641664281761270855236567351134560810714960782614308890272060948413181163494353272793784481848350602670056965425679654356012738769423457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							34ea3835cd711e245f3449a67f08490aab598020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.reinventtechnologypartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akcoatings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aksteel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aktube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cancergenetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capstonefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.pieris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrizo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference.ladenburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crzo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crzo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greggumbel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interventionalmr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interventionalmr.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.twoharborsinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cabalettabio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.geemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.globaleagleent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.imediabrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.kezarlifesciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rexahn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tiltholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.adgerobiopharm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bristowgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.capstoneturbine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cerecor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cohbar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.delmarpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.dgoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gladstonecapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gladstonecommercial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gladstoneinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gladstoneland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.greenspiritrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gulfportenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.huntsman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.interpacediagnostics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.libertybroadband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.libertymedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.libertytripadvisorholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lonestarresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mainstcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.midwestemissions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.milestonescientific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mtem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nationalstorageaffiliates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.oneworldpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pennvirginia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pharmacytebiotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pieris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.promisneurosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.qurateretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.relmada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.resonant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rigel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.riotblockchain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rosehillresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.volitionrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.wisatechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irisife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itkg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joinladenburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcsa-cannabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nclhltdinvestor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nclhltdmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnideep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reporting.vfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terratechcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'troutgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venturefoundryvfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vfcfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akcoatings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aksteel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aktube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cancergenetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capstonefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrizo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crzo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crzo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greggumbel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gvrtrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.interventionalmr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.interventionalmr.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.irisife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itkg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joinladenburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kcsa-cannabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nclhltdinvestor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nclhltdmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omnideep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.petroteqenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seacorholdingsinvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terratechcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.troutgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.venturefoundryvfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vfcfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vfcglobalidentity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'z.reinventtechnologypartners.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017f796babf60000040300473045022100d01bf99644458d4161e2955288cfd047035b33d5c89af894397c2c38a83d397902201b4065a66c7c26ce486fa832102ef03a922ade5908a5461ed0d481a93406922e0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017f796bad4a0000040300483046022100d929be0c525c3cc2c1e9b68a51d86cda598ac692c6b039a30276ebfda35adce7022100ab8c9ae4593aa43030628297e65a8bb30ed1c35e051de8508932de0266209191
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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