aspu.com

Issued by R3

About this certificate

This digital certificate with serial number 03:56:6e:de:67:0a:82:24:33:d4:62:51:d7:e0:bd:41:51:cd was issued on by Let's Encrypt.

With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aspu.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:56:6e:de:67:0a:82:24:33:d4:62:51:d7:e0:bd:41:51:cd
Serial Number (int): 290748511209841130894104330372660219433421
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2e:ca:65:65:3a:cb:18:03:3b:37:b2:30:c1:64:0c:43:39:ea:13:8f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): df:20:db:4f:37:18:19:c7:fb:28:2c:93:8b:ce:fb:1e:4a:3b:3f:bf
Fingerprint (sha256): 38:f7:f6:dd:91:72:7d:9c:0d:0d:44:70:55:62:a2:68:35:02:22:d1:67:f3:0a:58:3e:17:91:b5:51:7d:a5:f5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate aspu.com

72

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aspu.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aspu.com
cancergenetics.com
carrizo.com
crzo.com
crzo.net
greggumbel.com
interventionalmr.com
interventionalmr.net
investors.cabalettabio.com
investors.geemedia.com
investors.globaleagleent.com
investors.kezarlifesciences.com
investors.rexahn.com
investors.tiltholdings.com
ir.adgerobiopharm.com
ir.bristowgroup.com
ir.capstoneturbine.com
ir.delmarpharma.com
ir.dgoc.com
ir.gladstonecapital.com
ir.gladstonecommercial.com
ir.gladstoneinvestment.com
ir.gladstoneland.com
ir.greenspiritrx.com
ir.huntsman.com
ir.interpacediagnostics.com
ir.mainstcapital.com
ir.midwestemissions.com
ir.milestonescientific.com
ir.mtem.com
ir.nationalstorageaffiliates.com
ir.pharmacytebiotech.com
ir.pieris.com
ir.relmada.com
ir.rigel.com
ir.riotblockchain.com
ir.rosehillresources.com
ir.volitionrx.com
irisife.com
joinladenburg.com
kcsa-cannabis.com
mriinterventions.com
mriinterventions.net
nclhltdinvestor.com
nclhltdmedia.com
omnideep.com
reporting.vfc.com
troutgroup.com
venturefoundryvfc.com
vfcfoundation.org
www.cancergenetics.com
www.carrizo.com
www.crzo.com
www.crzo.net
www.greggumbel.com
www.gvrtrade.com
www.interventionalmr.com
www.interventionalmr.net
www.irisife.com
www.joinladenburg.com
www.kcsa-cannabis.com
www.mriinterventions.com
www.mriinterventions.net
www.nclhltdinvestor.com
www.nclhltdmedia.com
www.omnideep.com
www.petroteqenergy.com
www.seacorholdingsinvestors.com
www.troutgroup.com
www.venturefoundryvfc.com
www.vfcfoundation.org
www.vfcglobalidentity.com

Other certificates including the domain name aspu.com

(limited to 100 certificates)
akcoatings.com
a.reinventtechnologypartners.com
aspu.com
a.reinventtechnologypartners.com
aspu.com
akcoatings.com
a.reinventtechnologypartners.com
servicedesk.gerkencompanies.com
c3helpdesk.c3insurance.com
www.aspu.com
aspu.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
aspu.com
a.reinventtechnologypartners.com
helpdesk.rdek.bc.ca
aspu.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
informatique.aubainerie.com
dmsbit.northeastern.edu
a.reinventtechnologypartners.com
c3helpdesk.c3insurance.com
aspu.com
aspu.com
aspu.com
a.reinventtechnologypartners.com
aspu.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
aspu.com
akcoatings.com
aspu.com
aspu.com
aspu.com
a.reinventtechnologypartners.com
aspu.com
a.reinventtechnologypartners.com
aspu.com
aspu.com
a.reinventtechnologypartners.com
aspu.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
aspu.com
akcoatings.com
a.reinventtechnologypartners.com
aspu.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
aspu.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
www.aspu.com
aspu.com
aspu.com
akcoatings.com
aspu.com
devopshelpdesk.hcss.com
aspu.com
akcoatings.com
akcoatings.com
aspu.com
www.aspu.com
sdp.tianjinjuilliard.edu.cn
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
desk.burgiss.com
aspu.com
akcoatings.com
www.aspu.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
akcoatings.com
akcoatings.com
support.aspu.com
aspu.com
aspu.com
support.aspu.com
www.aspu.com
aspu.com
a.reinventtechnologypartners.com
aspu.com
servicedesk.gerkencompanies.com
aspu.com
a.reinventtechnologypartners.com

Certificate

The complete raw certificate details for aspu.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7sgcUx28kRsFGVNCJEEq
B9fLzioKVMdJOuWj9rZlKnJcda48Qk+0gV9QHhi2EDWQCPiUFmoJ7y5rBIZZ7quR
5VAB4nGILQdijSLOKCn1AR+vbj214zajrhUBDfvm8dVltIt+9aWfq+YmnpsxsZ0V
6p42j0UX9zYX8UGQot/pAqn6Wbl2swK1UN5UmNBM96uqHrq0ch0OxRu7uvcSrnNZ
IFUqtXCWcBELcCBrxiHtuNdJo7Jm+4fev3pOMAOHlppgqSQA83CPsdrJ6vTT//de
ci5twIfFyv7BZ1rSo+wkMGTyWPNfU0/bi5lDCXKS2Qjw84KztnBu5Ff5TCSNSJ5s
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290748511209841130894104330372660219433421
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-29 11:10:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-27 11:10:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aspu.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30143394817897699869319025697235259713897344763497037250247578508173889366163665639696994461658426705723261136132307209625383518864445519250392429493569549214343341023078421444836533729672115682921566568252739737058456026090025863118905499692831739384265599592476726032421541685396818457324015026008301601191688257873591707545869126016325474649117458531602553673479020762543793360207096295323097905703538524259392235820340286327262621102382536441208147587866751427220511182426227015663362036410848301413219071097966686369416856830922393258127145233909135096863023985355035570925786181652749808822091419246893266267371
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2eca65653acb18033b37b230c1640c4339ea138f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1544 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cancergenetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrizo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crzo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crzo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greggumbel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interventionalmr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interventionalmr.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cabalettabio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.geemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.globaleagleent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.kezarlifesciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rexahn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tiltholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.adgerobiopharm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bristowgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.capstoneturbine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.delmarpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.dgoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gladstonecapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gladstonecommercial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gladstoneinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gladstoneland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.greenspiritrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.huntsman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.interpacediagnostics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mainstcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.midwestemissions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.milestonescientific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mtem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nationalstorageaffiliates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pharmacytebiotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pieris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.relmada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rigel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.riotblockchain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rosehillresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.volitionrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irisife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joinladenburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcsa-cannabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mriinterventions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mriinterventions.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nclhltdinvestor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nclhltdmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnideep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reporting.vfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'troutgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venturefoundryvfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vfcfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cancergenetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrizo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crzo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crzo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greggumbel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gvrtrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.interventionalmr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.interventionalmr.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.irisife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joinladenburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kcsa-cannabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mriinterventions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mriinterventions.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nclhltdinvestor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nclhltdmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omnideep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.petroteqenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seacorholdingsinvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.troutgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.venturefoundryvfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vfcfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vfcglobalidentity.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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