aspu.com

Issued by R3

About this certificate

This digital certificate with serial number 04:d4:30:a9:4e:dc:bd:cd:f7:ee:0e:1f:cd:e9:84:82:fd:48 was issued on by Let's Encrypt.

With 71 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aspu.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d4:30:a9:4e:dc:bd:cd:f7:ee:0e:1f:cd:e9:84:82:fd:48
Serial Number (int): 420653687555763595693933185850662556204360
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c8:25:f0:1d:a9:78:73:06:74:c9:20:b1:29:44:6a:77:7d:71:3c:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ba:b3:6e:57:b6:f6:ea:4b:58:cc:a8:bc:d4:c9:ae:b3:40:02:28:af
Fingerprint (sha256): 31:46:82:b1:78:cd:98:10:e1:68:b1:1d:09:d0:5a:33:78:96:6d:30:7f:c5:fc:62:83:1f:4a:55:8f:ff:77:1f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate aspu.com

71

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aspu.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aspu.com
cancergenetics.com
carrizo.com
crzo.com
crzo.net
greggumbel.com
interventionalmr.com
interventionalmr.net
investors.cabalettabio.com
investors.geemedia.com
investors.globaleagleent.com
investors.kezarlifesciences.com
investors.rexahn.com
investors.tiltholdings.com
ir.adgerobiopharm.com
ir.bristowgroup.com
ir.capstoneturbine.com
ir.delmarpharma.com
ir.dgoc.com
ir.gladstonecapital.com
ir.gladstonecommercial.com
ir.gladstoneinvestment.com
ir.gladstoneland.com
ir.greenspiritrx.com
ir.huntsman.com
ir.interpacediagnostics.com
ir.mainstcapital.com
ir.midwestemissions.com
ir.milestonescientific.com
ir.mtem.com
ir.nationalstorageaffiliates.com
ir.pharmacytebiotech.com
ir.pieris.com
ir.relmada.com
ir.rigel.com
ir.riotblockchain.com
ir.rosehillresources.com
ir.terratechcorp.com
ir.volitionrx.com
irisife.com
itkg.net
joinladenburg.com
kcsa-cannabis.com
nclhltdinvestor.com
nclhltdmedia.com
omnideep.com
reporting.vfc.com
troutgroup.com
venturefoundryvfc.com
vfcfoundation.org
www.cancergenetics.com
www.carrizo.com
www.crzo.com
www.crzo.net
www.greggumbel.com
www.gvrtrade.com
www.interventionalmr.com
www.interventionalmr.net
www.irisife.com
www.itkg.net
www.joinladenburg.com
www.kcsa-cannabis.com
www.nclhltdinvestor.com
www.nclhltdmedia.com
www.omnideep.com
www.petroteqenergy.com
www.seacorholdingsinvestors.com
www.troutgroup.com
www.venturefoundryvfc.com
www.vfcfoundation.org
www.vfcglobalidentity.com

Other certificates including the domain name aspu.com

(limited to 100 certificates)
akcoatings.com
a.reinventtechnologypartners.com
aspu.com
a.reinventtechnologypartners.com
aspu.com
akcoatings.com
a.reinventtechnologypartners.com
servicedesk.gerkencompanies.com
c3helpdesk.c3insurance.com
www.aspu.com
aspu.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
aspu.com
a.reinventtechnologypartners.com
helpdesk.rdek.bc.ca
aspu.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
informatique.aubainerie.com
dmsbit.northeastern.edu
a.reinventtechnologypartners.com
c3helpdesk.c3insurance.com
aspu.com
aspu.com
aspu.com
a.reinventtechnologypartners.com
aspu.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
aspu.com
akcoatings.com
aspu.com
aspu.com
aspu.com
a.reinventtechnologypartners.com
aspu.com
a.reinventtechnologypartners.com
aspu.com
aspu.com
a.reinventtechnologypartners.com
aspu.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
aspu.com
akcoatings.com
a.reinventtechnologypartners.com
aspu.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
aspu.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
www.aspu.com
aspu.com
aspu.com
akcoatings.com
aspu.com
devopshelpdesk.hcss.com
aspu.com
akcoatings.com
akcoatings.com
aspu.com
www.aspu.com
sdp.tianjinjuilliard.edu.cn
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
desk.burgiss.com
aspu.com
akcoatings.com
www.aspu.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
akcoatings.com
akcoatings.com
support.aspu.com
aspu.com
aspu.com
support.aspu.com
www.aspu.com
aspu.com
a.reinventtechnologypartners.com
aspu.com
servicedesk.gerkencompanies.com
aspu.com
a.reinventtechnologypartners.com

Certificate

The complete raw certificate details for aspu.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kVsCQWuZ4xXj0Sully5
KzXn/fdb7/EbBcLdmDvbz8aMhBhew2W95IAw+yeC7CF2sXHS8pf4Hu11ApzuN7wW
NwxCq6Ov4gkeLo9I7n9zAp1j5/1BSP0QM+s3Krjed60WycQaOfkfgaFqauTJ8FkM
txII1XPAJjKU4qqt9c8//ZayuSqee3PswGM2wsljuq3xXGyGQ3GlzIpfHfPrND0T
4onj1/GdCLGUhBuC2cCaNAdCAzkD/49mxhRU5LMhCk7MR1Ja3npHQ4B/OCwnrHrh
YI2LPtNTwnSH3E0NL4g6e4BgvPA87k/Q0zn34ECKFu2byfmtxuQj0PwW7jo8zPrW
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 420653687555763595693933185850662556204360
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-09 19:40:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-07 19:40:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aspu.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27049230533074461858250852212493808659907954953400760750585867997851255776931544001349810939193434550621186638503432835323499398003858242761579535071241560733963099754175957590322661606366324476503126407698191866351384718487991630631552206793759280728754785744359831054790687378862826286779316736725783209689110560969708073963334511706856160564186863403333696273771504243159765847742184031594583769578369865588016825559119257428381212555114391803436194400134855040063285070810644758525658340516594278620946806660202430731708252694235896669646122776463781220155098788587188720066973333415874167747037122031914309047827
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c825f01da978730674c920b129446a777d713cd5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1494 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cancergenetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrizo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crzo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crzo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greggumbel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interventionalmr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interventionalmr.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cabalettabio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.geemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.globaleagleent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.kezarlifesciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rexahn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tiltholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.adgerobiopharm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bristowgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.capstoneturbine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.delmarpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.dgoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gladstonecapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gladstonecommercial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gladstoneinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gladstoneland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.greenspiritrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.huntsman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.interpacediagnostics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mainstcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.midwestemissions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.milestonescientific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mtem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nationalstorageaffiliates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pharmacytebiotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pieris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.relmada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rigel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.riotblockchain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rosehillresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.terratechcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.volitionrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irisife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itkg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joinladenburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcsa-cannabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nclhltdinvestor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nclhltdmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnideep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reporting.vfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'troutgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venturefoundryvfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vfcfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cancergenetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrizo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crzo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crzo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greggumbel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gvrtrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.interventionalmr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.interventionalmr.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.irisife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itkg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joinladenburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kcsa-cannabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nclhltdinvestor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nclhltdmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omnideep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.petroteqenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seacorholdingsinvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.troutgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.venturefoundryvfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vfcfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vfcglobalidentity.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000017a8cfff84e000004030047304502204a9bf6b3f77a187c3240a473e9665f28bbc6c453bfcf10031a3048d2056ef5f90221009127a2c6138eb4aa6dc42e296a334dfcec34c5372e97cf60881ace245ac3194a0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017a8cfff8960000040300483046022100cdb9a37cd0a04eea4b240bb799606f752f4c5e3670d15a2cd0ac53675ad267da022100b1be1ba46e1cde20b73bc807dcdcdc4c8b5c87469de5474c002e28403e0184b4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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