aatlconnected.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bf:6e:6b:13:ff:97:f7:03:bd:3b:7a:86:31:78:c6:a7:b6 was issued on by Let's Encrypt.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aatlconnected.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bf:6e:6b:13:ff:97:f7:03:bd:3b:7a:86:31:78:c6:a7:b6
Serial Number (int): 326477560938096185203289352091021330524086
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2c:8a:ee:ec:24:7a:c2:39:67:f2:2c:57:f5:3c:09:8a:8b:ab:b8:ed
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5c:0e:34:3d:a6:b0:e4:c5:67:20:1f:ac:e0:6a:9e:f5:ce:13:ff:c9
Fingerprint (sha256): 3e:c1:99:c8:c5:67:5e:20:6c:4b:80:41:62:bc:81:d6:6b:03:a2:d2:fc:37:00:b9:f1:f2:24:6d:f6:3d:90:cb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aatlconnected.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aatlconnected.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aatlconnected.com
access.fortefoundation.org
acomconnect.com
acsconnects.org
adenalumni.net
aexrochester.org
africanhumanities.org
ahlafoundationconnect.com
ahlefconnect.com
ahscommunity.org
alemanyconnect.org
allhandsandheartsalumni.org
alphaphinetwork.com
alumni.bcm.edu
alumni.brandman.edu
alumni.cayetano.edu.pe
alumni.cdl.ch
alumni.estacio.br
alumni.fia.com.br
alumni.fundacao.bradesco
alumni.harding.edu
alumni.harpercollege.edu
alumni.maua.br
alumni.nonprofitpractice.org
alumni.puc-campinas.edu.br
alumni.siebelinstitute.com
alumni.uarts.edu
alumni.udsm.ac.tz
alumni.unach.cl
alumni.unicamp.br
alumni.univali.br
alumniatbhs.com
alumnigsb.com
alumniknightnetwork.com
alumnisabana.com
alumniucsh.com
alumniupaep.mx
ampleforthglobal.org.uk
andoveralumni.org
andrewsnetwork.org
antigosalunos.aaapucrio.com.br
apuconnect.com
aqsaintsnetwork.com
arrowsconnect.org
asfmalumni.com
asulawalumninetwork.com
athenianlink.com
avonoldfarmsalumni.com
www.aatlconnected.com
www.acomconnect.com
www.acsconnects.org
www.adenalumni.net
www.aexrochester.org
www.africanhumanities.org
www.ahlafoundationconnect.com
www.ahlefconnect.com
www.ahscommunity.org
www.alemanyconnect.org
www.allhandsandheartsalumni.org
www.alphaphinetwork.com
www.alumni.brandman.edu
www.alumni.cayetano.edu.pe
www.alumni.estacio.br
www.alumni.fia.com.br
www.alumni.fundacao.bradesco
www.alumni.harding.edu
www.alumni.harpercollege.edu
www.alumni.maua.br
www.alumni.nonprofitpractice.org
www.alumni.puc-campinas.edu.br
www.alumni.uarts.edu
www.alumni.udsm.ac.tz
www.alumni.unach.cl
www.alumni.unicamp.br
www.alumni.univali.br
www.alumniatbhs.com
www.alumnigsb.com
www.alumniknightnetwork.com
www.alumnisabana.com
www.alumniucsh.com
www.alumniupaep.mx
www.ampleforthglobal.org.uk
www.andoveralumni.org
www.andrewsnetwork.org
www.antigosalunos.aaapucrio.com.br
www.apuconnect.com
www.aqsaintsnetwork.com
www.arrowsconnect.org
www.asfmalumni.com
www.asulawalumninetwork.com
www.athenianlink.com
www.avonoldfarmsalumni.com

Other certificates including the domain name aatlconnected.com

(limited to 100 certificates)
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
alumni.pcci.edu
alumni.pcci.edu
aatlconnected.com
alumni.facamp.com.br
aatlconnected.com
alumni.pcci.edu
alumni.nonprofitpractice.org
alumni.thrivescholars.org
aatlconnected.com
alumni.facamp.com.br
aatlconnected.com
aatlconnected.com
alumni.pcci.edu
aatlconnected.com
alumni.pcci.edu
aatlconnected.com
aatlconnected.com
aatlconnected.com
alumni.facamp.com.br
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
alumni.pcci.edu
alumni.pcci.edu
aatlconnected.com
alumni.pcci.edu
aatlconnected.com
aatlconnected.com
aatlconnected.com
alumni.nonprofitpractice.org
alumni.facamp.com.br
aatlconnected.com
alumni.pcci.edu
aatlconnected.com
alumni.pcci.edu
aatlconnected.com
alumni.pcci.edu
aatlconnected.com
aatlconnected.com
aatlconnected.com
alumni.pcci.edu
aatlconnected.com
alumni.pcci.edu
aatlconnected.com
alumni.pcci.edu
alumni.facamp.com.br
alumni.thrivescholars.org
aatlconnected.com
aatlconnected.com
alumni.facamp.com.br
aatlconnected.com

Certificate

The complete raw certificate details for aatlconnected.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4+szsBQwpy/dVv+xaJH
Xwjzlyj3Z0kIaWe3/rTz20cnrTydeO+0ZfnmlyEKcQnbemxwrcFVt7V3d4udAdYs
DK9MhdaDLNNQ5d3He+SpBX2h56w3Ujj+MQNWbmOuxkPuF906kI0Mpbl1wwHAXXxn
TtE3Q4BXLNQcgsLuxwZJMenWbvB3TkBD3A117wrQSyfyJDrVUq+k6PDPLng0BQeb
PEaoJXaVKuTeqil8ONyh3EGCS9P2zn8FDF7M2l0H7kwFeHqFIGnUhOuoYN7IrkOn
YjoS3b8tHkN1Gt6IS6sq/kMKvjkaXpsPWxv+6I99q5ehlUx/bzN9V66EEwC1VNKT
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326477560938096185203289352091021330524086
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-07 06:08:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-05 06:08:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aatlconnected.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16608066748305817560398997459070337068178127927709029061195920202653333471142371067441940701280929451486617579765482308065584111901993915674593123651150825446732588789417223801997149096070663170664278088024701043754293736257566567381695342063093631700585687171701222980358259037455828500740960385743195449312017823624360272880844481151643621271492644268430510948657917024954818672308002981735396443285730947780951109620333760371432900788189207446781857492350087315815433486279495445404215125674787599203602530666077569543693016540647890863665735828176080540702885298343881205151786728079797510324291457111726583091971
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2c8aeeec247ac23967f22c57f53c098a8babb8ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2079 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aatlconnected.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access.fortefoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acomconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acsconnects.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adenalumni.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aexrochester.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africanhumanities.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahlafoundationconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahlefconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahscommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alemanyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allhandsandheartsalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alphaphinetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.bcm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.brandman.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.cayetano.edu.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.cdl.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.estacio.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.fia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.fundacao.bradesco'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.harding.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.harpercollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.maua.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.nonprofitpractice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.puc-campinas.edu.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.siebelinstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.uarts.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.udsm.ac.tz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.unach.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.unicamp.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.univali.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniatbhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnigsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniknightnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnisabana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniucsh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniupaep.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ampleforthglobal.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andoveralumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrewsnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antigosalunos.aaapucrio.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqsaintsnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arrowsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asfmalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asulawalumninetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athenianlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avonoldfarmsalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aatlconnected.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acomconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acsconnects.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adenalumni.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aexrochester.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.africanhumanities.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahlafoundationconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahlefconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahscommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alemanyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allhandsandheartsalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alphaphinetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.brandman.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.cayetano.edu.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.estacio.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.fia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.fundacao.bradesco'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.harding.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.harpercollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.maua.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.nonprofitpractice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.puc-campinas.edu.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.uarts.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.udsm.ac.tz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.unach.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.unicamp.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.univali.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniatbhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnigsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniknightnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnisabana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniucsh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniupaep.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ampleforthglobal.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andoveralumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andrewsnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antigosalunos.aaapucrio.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aqsaintsnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arrowsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asfmalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asulawalumninetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athenianlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avonoldfarmsalumni.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000173281b1e9e00000403004830460221009bdbe840d059a3104e803aebf5228c5d77de732cd73562a8bd913f6c949a086b022100db907b3e01e5a270c378a6830ca306e5bf38b6305276fb0c42b0d4371b6aa7d500750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000173281b1ed80000040300463044022066eaccd99178eb8b04701ecce03187a0c4611014a427930b33e58d0a0ee94847022013c2a9ec5b0be5238c304b2bbcd1f545a9948e9d8c78d9dc72a2b0082c790d80
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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