aaaconnect.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 03:32:e1:19:20:0b:82:9b:92:55:c7:9c:ea:b1:4e:c7:67:d8 was issued on by Let's Encrypt.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aaaconnect.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:32:e1:19:20:0b:82:9b:92:55:c7:9c:ea:b1:4e:c7:67:d8
Serial Number (int): 278650182897749770785471538511045710014424
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 02:dc:70:36:b0:17:80:72:6b:f0:f3:a3:ff:ad:6c:bb:88:9c:2e:93
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0b:18:ec:d3:ad:8d:72:fb:df:12:a9:2a:f4:ad:8b:1c:d3:40:2c:89
Fingerprint (sha256): 39:be:e8:4e:02:11:90:46:f6:7b:8b:21:cd:c1:d8:2e:3d:a8:0d:3a:48:9f:a7:6b:67:99:54:c8:09:18:19:17

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate aaaconnect.co.uk

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aaaconnect.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aaaconnect.co.uk
academicalsconnect.com
acgconnect.org
acglobalconnect.com
ackworthschoolconnect.com
aeseconnect.com
aiglonlife.ch
aiglonlife2.ch
aiglononline.ch
aimscommunity.org
aislagosalumni.org
albanetworker.com
alderleyalumnae.co.uk
alfaisalmedalumni.com
aluconnect.org
alumne.fak.dk
alumnet.sdu.dk
alumni-haut-lac.ch
alumni.24orebs.com
alumni.adek.gov.ae
alumni.ashoka.edu.in
alumni.aub.ac.uk
alumni.bmc.edu.sa
alumni.champittet.ch
alumni.dulwich.org
alumni.eeg.uminho.pt
alumni.johnsmithtrust.org
alumni.med.uminho.pt
alumni.neurosciences.berlin
alumni.novasbe.pt
alumnibeausoleil.ch
alumnihotelschoolrocmondriaan.nl
alumnirapport.com
alumnisb.be
alumniul.online
alumniultest.manual.graduway.com
amitgushdanalumni.com
andrewsnetwork.co.uk
ansaalumni.no
ansanetwork.no
arel.network
askalumni.gre.ac.uk
aswalumni.org
atlanticcollegeconnect.com
atlanticconnect.org
auafconnect.net
aularianconnect.com
auralumni.com
aurconnect.com
autconnect.com
aveconnect.org
www.aaaconnect.co.uk
www.academicalsconnect.com
www.acgconnect.org
www.acglobalconnect.com
www.ackworthschoolconnect.com
www.aeseconnect.com
www.aiglonlife.ch
www.aiglonlife2.ch
www.aiglononline.ch
www.aimscommunity.org
www.aislagosalumni.org
www.albanetworker.com
www.alderleyalumnae.co.uk
www.alfaisalmedalumni.com
www.aluconnect.org
www.alumne.fak.dk
www.alumnet.sdu.dk
www.alumni-haut-lac.ch
www.alumni.24orebs.com
www.alumni.adek.gov.ae
www.alumni.ashoka.edu.in
www.alumni.aub.ac.uk
www.alumni.dulwich.org
www.alumni.eeg.uminho.pt
www.alumni.med.uminho.pt
www.alumni.novasbe.pt
www.alumnibeausoleil.ch
www.alumnihotelschoolrocmondriaan.nl
www.alumnirapport.com
www.alumnisb.be
www.alumniul.online
www.amitgushdanalumni.com
www.andrewsnetwork.co.uk
www.ansaalumni.no
www.ansanetwork.no
www.arel.network
www.askalumni.gre.ac.uk
www.aswalumni.org
www.atlanticcollegeconnect.com
www.atlanticconnect.org
www.auafconnect.net
www.aularianconnect.com
www.auralumni.com
www.aurconnect.com
www.autconnect.com
www.aveconnect.org

Other certificates including the domain name aaaconnect.co.uk

(limited to 100 certificates)
alumni-haut-lac.ch
m.aaaconnect.co.uk
alumni.ashoka.edu.in
aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
atlanticcollegeconnect.com
alumni.johnsmithtrust.org
alumne.fak.dk
ackworthschoolconnect.com
alumne.fak.dk
m.aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
alumni.dulwich.org
aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
m.aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
alumni.eeg.uminho.pt
aaaconnect.co.uk
alumni.johnsmithtrust.org
aaaconnect.co.uk
aaaconnect.co.uk
alumni.johnsmithtrust.org
alumne.fak.dk
m.aaaconnect.co.uk
alumni.adek.gov.ae
m.aaaconnect.co.uk
m.aaaconnect.co.uk
m.aaaconnect.co.uk
atlanticconnect.org
aaaconnect.co.uk
amitgushdanalumni.com
m.aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
alumnihotelschoolrocmondriaan.nl
m.aaaconnect.co.uk
alumni.novasbe.pt
m.aaaconnect.co.uk
m.aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
atlanticconnect.org
aaaconnect.co.uk
alumni.johnsmithtrust.org
m.aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
alumni.eeg.uminho.pt
aaaconnect.co.uk
alumni.dulwich.org
aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk

Certificate

The complete raw certificate details for aaaconnect.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7So2SmzM8byXUguCzby
IWnHKaDOyhA47XuCl628kEKzaHQFjpos3e6ZmsPsd978qxgTTsIrH60PAkvD67nf
G7uLVZdlFypv/TvGgugPxWcqZJJ8QcDZmytLbX0z0sI3Y+Scimb8dQp+bd365ZuU
jrQsMIWlJeUyevT4m1/CgykTxoo90x/qLcuhS81OGuc6dOTt5O4cHqBey4Nh4eqw
jq10JuWFL1jHN4gmzBKtY57bRR3bCsgA4JSVjY4jQEs4aaRd1XWdXsbSgQFf525L
UMMhbtr+1J3wqqq+o0SUX0WZo516Ns4Mxzzr7dVorzjWaKQuScqqXaK+104NJ62S
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278650182897749770785471538511045710014424
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-15 12:51:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-15 12:51:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aaaconnect.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18646117381144083826743874667033660271486261733452196884385567860888530213236752707471914458967127208623911987441945592011983904890043998795617859942450061227163320728577788658196338032403283618498519126071309861626223988186823039470842046528569932394515474374060380345063115300713948169141358831454060383314888078737460058449459149683750157512911123814142003759207050951766490266066177385731134390726737554573843897937986981797527105817726424075197132791214963942708021128706960987819661210975742470984506456053784789481002727586336191245617873865926365848114269574508372955862891024532947413004399895082573990040207
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							02dc7036b01780726bf0f3a3ffad6cbb889c2e93
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2089 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaaconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academicalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acgconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acglobalconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ackworthschoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeseconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiglonlife.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiglonlife2.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiglononline.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aimscommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aislagosalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albanetworker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alderleyalumnae.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alfaisalmedalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aluconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumne.fak.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnet.sdu.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni-haut-lac.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.24orebs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.adek.gov.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.ashoka.edu.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.aub.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.bmc.edu.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.champittet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.dulwich.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.eeg.uminho.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.johnsmithtrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.med.uminho.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.neurosciences.berlin'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.novasbe.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnibeausoleil.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnihotelschoolrocmondriaan.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnirapport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnisb.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniul.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniultest.manual.graduway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amitgushdanalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrewsnetwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ansaalumni.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ansanetwork.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arel.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'askalumni.gre.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aswalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlanticcollegeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlanticconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auafconnect.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aularianconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auralumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aveconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aaaconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.academicalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acgconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acglobalconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ackworthschoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aeseconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aiglonlife.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aiglonlife2.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aiglononline.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aimscommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aislagosalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albanetworker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alderleyalumnae.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfaisalmedalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aluconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumne.fak.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnet.sdu.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni-haut-lac.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.24orebs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.adek.gov.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.ashoka.edu.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.aub.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.dulwich.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.eeg.uminho.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.med.uminho.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.novasbe.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnibeausoleil.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnihotelschoolrocmondriaan.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnirapport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnisb.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniul.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amitgushdanalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andrewsnetwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ansaalumni.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ansanetwork.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arel.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.askalumni.gre.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aswalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlanticcollegeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlanticconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auafconnect.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aularianconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auralumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aurconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aveconnect.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a8000001770650bbd80000040300463044022025f271c7b9ca0d5db62a745508dabe3058eb1e7e523913bc4f7f3d30ae1d3be50220465d1046811af0ea53cbc85a560380f8390ee18ef3eb306659566d919f8b073e007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001770650bbd30000040300473045022026aac8f9709d9d31b0a24f2564e2bf7d13b99261fc5e1c42e1db758d6c03e8e1022100bf5bfb7a2cf99cd4d74a216842614ab34aa4c0c25f02a836d4e27f7e19d15ae8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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