akcoatings.com

Issued by R3

About this certificate

This digital certificate with serial number 04:35:26:b2:b2:e0:28:af:01:76:f9:ef:47:2f:e7:7c:a3:d4 was issued on by Let's Encrypt.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=akcoatings.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:35:26:b2:b2:e0:28:af:01:76:f9:ef:47:2f:e7:7c:a3:d4
Serial Number (int): 366535547694559979975063600722344079565780
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c3:10:a1:9d:24:9b:95:dc:58:06:28:6e:99:d6:f3:a7:60:ed:d3:c9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a6:eb:a7:7c:23:b0:08:6d:95:c1:8f:aa:9b:a5:0f:eb:21:28:a8:13
Fingerprint (sha256): 2b:18:24:48:66:02:df:8e:04:f7:02:55:8d:e8:4a:12:49:de:7f:4f:b2:76:85:50:f0:01:79:e1:cb:1e:1e:27

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate akcoatings.com

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for akcoatings.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

akcoatings.com
aspu.com
cancergenetics.com
capstonefinance.com
careers.pieris.com
eminvestor.exxonmobil.com
gladstoneacquisition.com
greggumbel.com
investor.travelandleisureco.com
investor.twoharborsinvestment.com
investors.aercap.com
investors.cabalettabio.com
investors.geemedia.com
investors.globaleagleent.com
investors.gpmtreit.com
investors.imediabrands.com
investors.tiltholdings.com
ir.adgerobiopharm.com
ir.aethlonmedical.com
ir.algernonpharmaceuticals.com
ir.auriniapharma.com
ir.calwatergroup.com
ir.capstoneturbine.com
ir.cerecor.com
ir.codexis.com
ir.cohbar.com
ir.cymabay.com
ir.evi-ind.com
ir.gladstonecapital.com
ir.gladstonecommercial.com
ir.gladstoneinvestment.com
ir.gladstoneland.com
ir.gnusbrands.com
ir.gulfportenergy.com
ir.heliostechnologies.com
ir.huntsman.com
ir.interpacediagnostics.com
ir.interpacedx.com
ir.kintara.com
ir.libertybroadband.com
ir.libertymedia.com
ir.libertytripadvisorholdings.com
ir.lmfunding.com
ir.mainstcapital.com
ir.midwestemissions.com
ir.nationalstorageaffiliates.com
ir.oneworldpharma.com
ir.owlrockcapitalcorporation.com
ir.pharmacytebiotech.com
ir.pieris.com
ir.promisneurosciences.com
ir.qurateretail.com
ir.redwoodtrust.com
ir.relmada.com
ir.rigel.com
ir.riotblockchain.com
ir.sm-energy.com
irisife.com
itkg.net
joinladenburg.com
kcsa-cannabis.com
nclhltdinvestor.com
nclhltdmedia.com
proxyvote.equitystock.com
reporting.vfc.com
sec.gceholdings.com
terratechcorp.com
venturefoundryvfc.com
vfcfoundation.org
www.akcoatings.com
www.cancergenetics.com
www.capstonefinance.com
www.gladstoneacquisition.com
www.greggumbel.com
www.irisife.com
www.itkg.net
www.joinladenburg.com
www.kcsa-cannabis.com
www.nclhltdinvestor.com
www.nclhltdmedia.com
www.terratechcorp.com
www.venturefoundryvfc.com
www.vfcfoundation.org
www.vfcglobalidentity.com

Other certificates including the domain name akcoatings.com

(limited to 100 certificates)
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
akcoatings.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com

Certificate

The complete raw certificate details for akcoatings.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RlgbhsPryGPNk4BA7Ov
jNUUaam2W+QxyPOIeTYteK8diQvVEL+BT4Hx2tGvfNZXOzKTYGrQh8c+H6eOB9ZZ
iZ9BXg3cGjMlhpjm1m+l5GHUL3JuY+ExcKfdSdnXYrrXzYUJB/y3j9AixGHy6k9J
XxbdeWrqgknh87xlEpttsONevbzOQ3+sta9xCa+9Z/5vx5Qel8qlW+wIuCjAca16
qMEMRFgpDr1BtDzYUcqK84FM4mTpciRKaXisFiJnV9PsVl4nQ2i6qJEDo0ZH3gF4
FAXwkaPtSeNya4eOqzNapEN990dzIBsZZFn+yl6ZJi0CLtSbwBBbivybiKZ7CxxT
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 366535547694559979975063600722344079565780
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-02 16:52:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-02 16:52:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'akcoatings.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29930991984295489642216055231846670090324403948646139489689720876367276119195098492099688072116655187591946902366268140790499492378340439794503071922366836022238224322747066094558233681948362312352616869890065170147385234651104976945248002189366121752629043849165610032552010560771141309201256492253024901284592243821490581203815883241463847171538779570904146096773333315039201035971085666801087162197789955196194222237770157125817201720467839460667811449066849389243728790401875684490732408939229491960625891912509345497588840184955104031079901842548410256271359352736292294812336857034381572782862906645124239610657
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c310a19d249b95dc5806286e99d6f3a760edd3c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1881 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akcoatings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cancergenetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capstonefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.pieris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eminvestor.exxonmobil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gladstoneacquisition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greggumbel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.travelandleisureco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.twoharborsinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.aercap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cabalettabio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.geemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.globaleagleent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.gpmtreit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.imediabrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tiltholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.adgerobiopharm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aethlonmedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.algernonpharmaceuticals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.auriniapharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.calwatergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.capstoneturbine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cerecor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.codexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cohbar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cymabay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.evi-ind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gladstonecapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gladstonecommercial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gladstoneinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gladstoneland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gnusbrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gulfportenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.heliostechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.huntsman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.interpacediagnostics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.interpacedx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.kintara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.libertybroadband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.libertymedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.libertytripadvisorholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lmfunding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mainstcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.midwestemissions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nationalstorageaffiliates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.oneworldpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.owlrockcapitalcorporation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pharmacytebiotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pieris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.promisneurosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.qurateretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.redwoodtrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.relmada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rigel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.riotblockchain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sm-energy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irisife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itkg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joinladenburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcsa-cannabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nclhltdinvestor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nclhltdmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proxyvote.equitystock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reporting.vfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.gceholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terratechcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venturefoundryvfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vfcfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akcoatings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cancergenetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capstonefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gladstoneacquisition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greggumbel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.irisife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itkg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joinladenburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kcsa-cannabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nclhltdinvestor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nclhltdmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terratechcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.venturefoundryvfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vfcfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vfcglobalidentity.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d6af345620000040300463044022016de633c9e504d7c384b394b408db563f376bdd365af371dd4573cc667228fc3022017086ba8da37acf0b4a2a6f4599b86103015b3100745853065b70fcb726860df00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d6af345ab000004030046304402205307846bf42c516a834792b842ee743e7407faf12d40a36167ef20ecd5139eb9022029f51dcc9abdce4dc1ac5bfd27baa0ac2ea0ad1c39ec824a3ae44702a2b84013
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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