aatlconnected.com

Issued by R3

About this certificate

This digital certificate with serial number 03:c4:19:62:92:c7:55:4e:3c:2c:e0:35:f9:f3:6f:d1:bb:a0 was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aatlconnected.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c4:19:62:92:c7:55:4e:3c:2c:e0:35:f9:f3:6f:d1:bb:a0
Serial Number (int): 328065944233796045368324343884187138374560
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 69:fb:33:c2:4e:49:cf:1c:23:4c:69:e2:38:73:63:26:b6:81:ba:e2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cc:e9:f1:6a:97:c3:72:bf:e9:05:37:63:f9:6c:58:ba:49:4b:4a:19
Fingerprint (sha256): 38:3d:0e:db:fa:32:a3:78:69:97:b0:f3:05:4e:fd:73:68:24:1b:de:0b:5b:85:8c:b0:59:70:74:ca:de:7f:2d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate aatlconnected.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aatlconnected.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aatlconnected.com
acacia.network
access.fortefoundation.org
acfcampusconnect.org
aclubtemp.com
acomconnect.com
acsconnects.org
adenalumni.net
aexrochester.org
africanhumanities.org
ahlefconnect.com
ahscommunity.org
alemanyconnect.org
allhandsandheartsalumni.org
alphaphinetwork.com
alumni.bcm.edu
alumni.brandman.edu
alumni.cayetano.edu.pe
alumni.cdl.ch
alumni.estacio.br
alumni.fia.com.br
alumni.fundacao.bradesco
alumni.harding.edu
alumni.harpercollege.edu
alumni.maua.br
alumni.nonprofitpractice.org
alumni.pcci.edu
alumni.puc-campinas.edu.br
alumni.siebelinstitute.com
alumni.thrivescholars.org
alumni.udsm.ac.tz
alumni.unach.cl
alumni.unicamp.br
alumni.univali.br
alumniatbhs.com
alumnigsb.com
alumniknightnetwork.com
alumnisabana.com
alumniucsh.com
alumniupaep.mx
ampleforthglobal.org.uk
andoveralumni.org
andrewsnetwork.org
apuconnect.com
aqsaintsnetwork.com
arrowsconnect.org
asfmalumni.com
asulawalumninetwork.com
athenianlink.com
avonoldfarmsalumni.com
www.aatlconnected.com
www.acacia.network
www.acfcampusconnect.org
www.aclubtemp.com
www.acomconnect.com
www.acsconnects.org
www.adenalumni.net
www.aexrochester.org
www.africanhumanities.org
www.ahlefconnect.com
www.ahscommunity.org
www.alemanyconnect.org
www.allhandsandheartsalumni.org
www.alphaphinetwork.com
www.alumni.brandman.edu
www.alumni.cayetano.edu.pe
www.alumni.estacio.br
www.alumni.fia.com.br
www.alumni.fundacao.bradesco
www.alumni.harding.edu
www.alumni.harpercollege.edu
www.alumni.maua.br
www.alumni.nonprofitpractice.org
www.alumni.pcci.edu
www.alumni.puc-campinas.edu.br
www.alumni.thrivescholars.org
www.alumni.udsm.ac.tz
www.alumni.unach.cl
www.alumni.unicamp.br
www.alumni.univali.br
www.alumniatbhs.com
www.alumnigsb.com
www.alumniknightnetwork.com
www.alumnisabana.com
www.alumniucsh.com
www.alumniupaep.mx
www.ampleforthglobal.org.uk
www.andoveralumni.org
www.andrewsnetwork.org
www.apuconnect.com
www.aqsaintsnetwork.com
www.arrowsconnect.org
www.asfmalumni.com
www.asulawalumninetwork.com
www.athenianlink.com
www.avonoldfarmsalumni.com

Other certificates including the domain name aatlconnected.com

(limited to 100 certificates)
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
alumni.pcci.edu
alumni.pcci.edu
aatlconnected.com
alumni.facamp.com.br
aatlconnected.com
alumni.pcci.edu
alumni.nonprofitpractice.org
alumni.thrivescholars.org
aatlconnected.com
alumni.facamp.com.br
aatlconnected.com
aatlconnected.com
alumni.pcci.edu
aatlconnected.com
alumni.pcci.edu
aatlconnected.com
aatlconnected.com
aatlconnected.com
alumni.facamp.com.br
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
alumni.pcci.edu
alumni.pcci.edu
aatlconnected.com
alumni.pcci.edu
aatlconnected.com
aatlconnected.com
aatlconnected.com
alumni.nonprofitpractice.org
alumni.facamp.com.br
aatlconnected.com
alumni.pcci.edu
aatlconnected.com
alumni.pcci.edu
aatlconnected.com
alumni.pcci.edu
aatlconnected.com
aatlconnected.com
aatlconnected.com
alumni.pcci.edu
aatlconnected.com
alumni.pcci.edu
aatlconnected.com
alumni.pcci.edu
alumni.facamp.com.br
alumni.thrivescholars.org
aatlconnected.com
aatlconnected.com
alumni.facamp.com.br
aatlconnected.com

Certificate

The complete raw certificate details for aatlconnected.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINZTCCDE2gAwIBAgISA8QZYpLHVU48LOA1+fNv0bugMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTA0MjkxMzM5MzdaFw0yMTA3MjgxMzM5MzdaMBwxGjAYBgNVBAMT
EWFhdGxjb25uZWN0ZWQuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiNOaj+44jtIP2k11Rn7GJncXi9BuFLcAlozuaZqjcZlBwPoFBFJebggN5P7Q
8UAgjZuz2S56253TttZ2U6cRpsoJHDpHnt8lwoPS7HyieQ7f9L0bkeh8Yn48SkpB
sLyzBrPxE5sgJv77DMCtobl1YNn1hf0IxF99o1Dbc5abwx8dR7p2iSDDELF9wC+a
1mXwFIP2rfmDGenaEf3aekkfZ3kjk96AZhSgJXqTv1GuWhF+ZCCoPp9oExaZHfqC
4VojPUIqjMoIBF6vrvlU5CZ2HAcKrcSeKY0fSx8979T/6Ze5WPcp7cbcnE1EliQl
upgRaPjxcyKjWHhQKunddoMWDQIDAQABo4IKiTCCCoUwDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G
A1UdDgQWBBRp+zPCTknPHCNMaeI4c2MmtoG64jAfBgNVHSMEGDAWgBQULrMXt1hW
y65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6
Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iu
b3JnLzCCCFgGA1UdEQSCCE8wgghLghFhYXRsY29ubmVjdGVkLmNvbYIOYWNhY2lh
Lm5ldHdvcmuCGmFjY2Vzcy5mb3J0ZWZvdW5kYXRpb24ub3JnghRhY2ZjYW1wdXNj
b25uZWN0Lm9yZ4INYWNsdWJ0ZW1wLmNvbYIPYWNvbWNvbm5lY3QuY29tgg9hY3Nj
b25uZWN0cy5vcmeCDmFkZW5hbHVtbmkubmV0ghBhZXhyb2NoZXN0ZXIub3JnghVh
ZnJpY2FuaHVtYW5pdGllcy5vcmeCEGFobGVmY29ubmVjdC5jb22CEGFoc2NvbW11
bml0eS5vcmeCEmFsZW1hbnljb25uZWN0Lm9yZ4IbYWxsaGFuZHNhbmRoZWFydHNh
bHVtbmkub3JnghNhbHBoYXBoaW5ldHdvcmsuY29tgg5hbHVtbmkuYmNtLmVkdYIT
YWx1bW5pLmJyYW5kbWFuLmVkdYIWYWx1bW5pLmNheWV0YW5vLmVkdS5wZYINYWx1
bW5pLmNkbC5jaIIRYWx1bW5pLmVzdGFjaW8uYnKCEWFsdW1uaS5maWEuY29tLmJy
ghhhbHVtbmkuZnVuZGFjYW8uYnJhZGVzY2+CEmFsdW1uaS5oYXJkaW5nLmVkdYIY
YWx1bW5pLmhhcnBlcmNvbGxlZ2UuZWR1gg5hbHVtbmkubWF1YS5icoIcYWx1bW5p
Lm5vbnByb2ZpdHByYWN0aWNlLm9yZ4IPYWx1bW5pLnBjY2kuZWR1ghphbHVtbmku
cHVjLWNhbXBpbmFzLmVkdS5icoIaYWx1bW5pLnNpZWJlbGluc3RpdHV0ZS5jb22C
GWFsdW1uaS50aHJpdmVzY2hvbGFycy5vcmeCEWFsdW1uaS51ZHNtLmFjLnR6gg9h
bHVtbmkudW5hY2guY2yCEWFsdW1uaS51bmljYW1wLmJyghFhbHVtbmkudW5pdmFs
aS5icoIPYWx1bW5pYXRiaHMuY29tgg1hbHVtbmlnc2IuY29tghdhbHVtbmlrbmln
aHRuZXR3b3JrLmNvbYIQYWx1bW5pc2FiYW5hLmNvbYIOYWx1bW5pdWNzaC5jb22C
DmFsdW1uaXVwYWVwLm14ghdhbXBsZWZvcnRoZ2xvYmFsLm9yZy51a4IRYW5kb3Zl
cmFsdW1uaS5vcmeCEmFuZHJld3NuZXR3b3JrLm9yZ4IOYXB1Y29ubmVjdC5jb22C
E2Fxc2FpbnRzbmV0d29yay5jb22CEWFycm93c2Nvbm5lY3Qub3Jngg5hc2ZtYWx1
bW5pLmNvbYIXYXN1bGF3YWx1bW5pbmV0d29yay5jb22CEGF0aGVuaWFubGluay5j
b22CFmF2b25vbGRmYXJtc2FsdW1uaS5jb22CFXd3dy5hYXRsY29ubmVjdGVkLmNv
bYISd3d3LmFjYWNpYS5uZXR3b3Jrghh3d3cuYWNmY2FtcHVzY29ubmVjdC5vcmeC
EXd3dy5hY2x1YnRlbXAuY29tghN3d3cuYWNvbWNvbm5lY3QuY29tghN3d3cuYWNz
Y29ubmVjdHMub3JnghJ3d3cuYWRlbmFsdW1uaS5uZXSCFHd3dy5hZXhyb2NoZXN0
ZXIub3Jnghl3d3cuYWZyaWNhbmh1bWFuaXRpZXMub3JnghR3d3cuYWhsZWZjb25u
ZWN0LmNvbYIUd3d3LmFoc2NvbW11bml0eS5vcmeCFnd3dy5hbGVtYW55Y29ubmVj
dC5vcmeCH3d3dy5hbGxoYW5kc2FuZGhlYXJ0c2FsdW1uaS5vcmeCF3d3dy5hbHBo
YXBoaW5ldHdvcmsuY29tghd3d3cuYWx1bW5pLmJyYW5kbWFuLmVkdYIad3d3LmFs
dW1uaS5jYXlldGFuby5lZHUucGWCFXd3dy5hbHVtbmkuZXN0YWNpby5icoIVd3d3
LmFsdW1uaS5maWEuY29tLmJyghx3d3cuYWx1bW5pLmZ1bmRhY2FvLmJyYWRlc2Nv
ghZ3d3cuYWx1bW5pLmhhcmRpbmcuZWR1ghx3d3cuYWx1bW5pLmhhcnBlcmNvbGxl
Z2UuZWR1ghJ3d3cuYWx1bW5pLm1hdWEuYnKCIHd3dy5hbHVtbmkubm9ucHJvZml0
cHJhY3RpY2Uub3JnghN3d3cuYWx1bW5pLnBjY2kuZWR1gh53d3cuYWx1bW5pLnB1
Yy1jYW1waW5hcy5lZHUuYnKCHXd3dy5hbHVtbmkudGhyaXZlc2Nob2xhcnMub3Jn
ghV3d3cuYWx1bW5pLnVkc20uYWMudHqCE3d3dy5hbHVtbmkudW5hY2guY2yCFXd3
dy5hbHVtbmkudW5pY2FtcC5icoIVd3d3LmFsdW1uaS51bml2YWxpLmJyghN3d3cu
YWx1bW5pYXRiaHMuY29tghF3d3cuYWx1bW5pZ3NiLmNvbYIbd3d3LmFsdW1uaWtu
aWdodG5ldHdvcmsuY29tghR3d3cuYWx1bW5pc2FiYW5hLmNvbYISd3d3LmFsdW1u
aXVjc2guY29tghJ3d3cuYWx1bW5pdXBhZXAubXiCG3d3dy5hbXBsZWZvcnRoZ2xv
YmFsLm9yZy51a4IVd3d3LmFuZG92ZXJhbHVtbmkub3JnghZ3d3cuYW5kcmV3c25l
dHdvcmsub3JnghJ3d3cuYXB1Y29ubmVjdC5jb22CF3d3dy5hcXNhaW50c25ldHdv
cmsuY29tghV3d3cuYXJyb3dzY29ubmVjdC5vcmeCEnd3dy5hc2ZtYWx1bW5pLmNv
bYIbd3d3LmFzdWxhd2FsdW1uaW5ldHdvcmsuY29tghR3d3cuYXRoZW5pYW5saW5r
LmNvbYIad3d3LmF2b25vbGRmYXJtc2FsdW1uaS5jb20wTAYDVR0gBEUwQzAIBgZn
gQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s
ZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgB9PvL4j/+I
VWgkwsDKnlKJeSvFDngJfy5ql2iZfiLw1wAAAXkeEijKAAAEAwBHMEUCIAazUPnX
OIq4AOahZNI/7OHsCuD0jsUuQPzUf09YLk2/AiEA6b/X8i/bHLoXebXqDN65uqdo
WkxzwtQw4JN4fd2fN4IAdQBElGUusO7Or8RAB9io/ijA2uaCvtjLMbU/0zOWtbaB
qAAAAXkeEiiMAAAEAwBGMEQCICWG0HcO8zRM948GsLDFPi6mF1Gnn/L5An3mjAJI
iVwTAiAJ8poiXIru9XGo0tAuxJ8Lt0ud4SGvkH6TzEohg/T3fTANBgkqhkiG9w0B
AQsFAAOCAQEAYC36X5J50xqMrqYsehCFLBuE6CLhUh6OChp+saFOnZBb9q4NP0IP
LZcTcPt9Lvnf3YFFxpx/YP4PPmPM4ln/Lqho3ezd+MK1gSWQk0kvaJq8uyRFz0sR
aVFfIrI2huWUPzIneZT4T6/8N8KAIhisRH0wfXocspNA/xBuYCWlAJXnXdtLYy0t
VoeW217quTvvQokjDl1VHtv6KPppxVWVHxlKFo23t/JKpJNMrf93MZJx6giZHYzc
414N7K4OkEPQrgStQLcgUwGlTl84gQ1uVCwqq47IjUm+Tsw7fPotM+wMi1Eto6eh
8pHhQoeeX9gf3wqkOoFDH+qavqFFRcj5iQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNOaj+44jtIP2k11Rn7G
JncXi9BuFLcAlozuaZqjcZlBwPoFBFJebggN5P7Q8UAgjZuz2S56253TttZ2U6cR
psoJHDpHnt8lwoPS7HyieQ7f9L0bkeh8Yn48SkpBsLyzBrPxE5sgJv77DMCtobl1
YNn1hf0IxF99o1Dbc5abwx8dR7p2iSDDELF9wC+a1mXwFIP2rfmDGenaEf3aekkf
Z3kjk96AZhSgJXqTv1GuWhF+ZCCoPp9oExaZHfqC4VojPUIqjMoIBF6vrvlU5CZ2
HAcKrcSeKY0fSx8979T/6Ze5WPcp7cbcnE1EliQlupgRaPjxcyKjWHhQKunddoMW
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328065944233796045368324343884187138374560
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-29 13:39:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-28 13:39:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aatlconnected.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17272755177819444988329368938094036416881841982205098478774773174288776103035401535680587932069477366391247267295197150609654882859691663480711847857059190226349920279636512981705995193659645369900329251803168831006655337056111427031147920038493769212263035958153794898077785284839533138564139549184407017308440449000036441708700829775687913846232231760246930953545540733824223667968570004724881156733187422599615401970429538381005164022677222367927796128717304721267360574475645947183134570163074566702586052439615053958805913928838069950468933333872986423055582734828571848076115147424232573634259494052450946717197
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							69fb33c24e49cf1c234c69e238736326b681bae2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aatlconnected.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acacia.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access.fortefoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acfcampusconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aclubtemp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acomconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acsconnects.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adenalumni.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aexrochester.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africanhumanities.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahlefconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahscommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alemanyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allhandsandheartsalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alphaphinetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.bcm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.brandman.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.cayetano.edu.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.cdl.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.estacio.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.fia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.fundacao.bradesco'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.harding.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.harpercollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.maua.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.nonprofitpractice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.pcci.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.puc-campinas.edu.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.siebelinstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.thrivescholars.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.udsm.ac.tz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.unach.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.unicamp.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.univali.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniatbhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnigsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniknightnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnisabana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniucsh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniupaep.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ampleforthglobal.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andoveralumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrewsnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqsaintsnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arrowsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asfmalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asulawalumninetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athenianlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avonoldfarmsalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aatlconnected.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acacia.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acfcampusconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aclubtemp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acomconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acsconnects.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adenalumni.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aexrochester.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.africanhumanities.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahlefconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahscommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alemanyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allhandsandheartsalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alphaphinetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.brandman.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.cayetano.edu.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.estacio.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.fia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.fundacao.bradesco'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.harding.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.harpercollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.maua.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.nonprofitpractice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.pcci.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.puc-campinas.edu.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.thrivescholars.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.udsm.ac.tz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.unach.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.unicamp.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.univali.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniatbhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnigsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniknightnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnisabana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniucsh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniupaep.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ampleforthglobal.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andoveralumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andrewsnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aqsaintsnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arrowsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asfmalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asulawalumninetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athenianlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avonoldfarmsalumni.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d7000001791e1228ca0000040300473045022006b350f9d7388ab800e6a164d23fece1ec0ae0f48ec52e40fcd47f4f582e4dbf022100e9bfd7f22fdb1cba1779b5ea0cdeb9baa7685a4c73c2d430e093787ddd9f37820075004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a8000001791e12288c000004030046304402202586d0770ef3344cf78f06b0b0c53e2ea61751a79ff2f9027de68c0248895c13022009f29a225c8aeef571a8d2d02ec49f0bb74b9de121af907e93cc4a2183f4f77d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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