aspu.com

Issued by R3

About this certificate

This digital certificate with serial number 03:c6:65:49:7e:d4:07:99:fd:3a:a5:04:e8:7c:9e:dc:3c:52 was issued on by Let's Encrypt.

With 70 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aspu.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c6:65:49:7e:d4:07:99:fd:3a:a5:04:e8:7c:9e:dc:3c:52
Serial Number (int): 328847400083253838320894223666171719990354
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6d:a1:1c:f6:0a:ce:0d:17:38:48:b4:42:76:4f:cb:3d:16:47:87:2a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bb:c9:bc:27:89:d4:81:cf:15:da:b3:48:7b:69:f0:c8:07:f0:d5:dd
Fingerprint (sha256): 44:25:e9:b3:2d:fe:cf:56:24:00:8a:eb:85:91:7e:8e:13:f1:9c:96:5b:8a:03:3f:00:bf:fb:b8:52:ac:2b:f4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate aspu.com

70

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aspu.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aspu.com
cancergenetics.com
carrizo.com
clearpointneuro.com
crzo.com
crzo.net
greggumbel.com
interventionalmr.com
interventionalmr.net
investors.cabalettabio.com
investors.geemedia.com
investors.globaleagleent.com
investors.kezarlifesciences.com
investors.rexahn.com
investors.tiltholdings.com
ir.adgerobiopharm.com
ir.bristowgroup.com
ir.capstoneturbine.com
ir.delmarpharma.com
ir.dgoc.com
ir.gladstonecapital.com
ir.gladstonecommercial.com
ir.gladstoneinvestment.com
ir.gladstoneland.com
ir.greenspiritrx.com
ir.huntsman.com
ir.interpacediagnostics.com
ir.mainstcapital.com
ir.midwestemissions.com
ir.milestonescientific.com
ir.mtem.com
ir.nationalstorageaffiliates.com
ir.pharmacytebiotech.com
ir.pieris.com
ir.relmada.com
ir.rigel.com
ir.riotblockchain.com
ir.rosehillresources.com
ir.volitionrx.com
irisife.com
joinladenburg.com
kcsa-cannabis.com
mriinterventions.com
mriinterventions.net
omnideep.com
reporting.vfc.com
troutgroup.com
venturefoundryvfc.com
vfcfoundation.org
www.cancergenetics.com
www.carrizo.com
www.clearpointneuro.com
www.crzo.com
www.crzo.net
www.greggumbel.com
www.gvrtrade.com
www.interventionalmr.com
www.interventionalmr.net
www.irisife.com
www.joinladenburg.com
www.kcsa-cannabis.com
www.mriinterventions.com
www.mriinterventions.net
www.omnideep.com
www.petroteqenergy.com
www.seacorholdingsinvestors.com
www.troutgroup.com
www.venturefoundryvfc.com
www.vfcfoundation.org
www.vfcglobalidentity.com

Other certificates including the domain name aspu.com

(limited to 100 certificates)
akcoatings.com
a.reinventtechnologypartners.com
aspu.com
a.reinventtechnologypartners.com
aspu.com
akcoatings.com
a.reinventtechnologypartners.com
servicedesk.gerkencompanies.com
c3helpdesk.c3insurance.com
www.aspu.com
aspu.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
aspu.com
a.reinventtechnologypartners.com
helpdesk.rdek.bc.ca
aspu.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
informatique.aubainerie.com
dmsbit.northeastern.edu
a.reinventtechnologypartners.com
c3helpdesk.c3insurance.com
aspu.com
aspu.com
aspu.com
a.reinventtechnologypartners.com
aspu.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
aspu.com
akcoatings.com
aspu.com
aspu.com
aspu.com
a.reinventtechnologypartners.com
aspu.com
a.reinventtechnologypartners.com
aspu.com
aspu.com
a.reinventtechnologypartners.com
aspu.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
aspu.com
akcoatings.com
a.reinventtechnologypartners.com
aspu.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
aspu.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
www.aspu.com
aspu.com
aspu.com
akcoatings.com
aspu.com
devopshelpdesk.hcss.com
aspu.com
akcoatings.com
akcoatings.com
aspu.com
www.aspu.com
sdp.tianjinjuilliard.edu.cn
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
desk.burgiss.com
aspu.com
akcoatings.com
www.aspu.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
akcoatings.com
akcoatings.com
support.aspu.com
aspu.com
aspu.com
support.aspu.com
www.aspu.com
aspu.com
a.reinventtechnologypartners.com
aspu.com
servicedesk.gerkencompanies.com
aspu.com
a.reinventtechnologypartners.com

Certificate

The complete raw certificate details for aspu.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzT784lrxRNTpoCD9pP2t
nYN11F41hTwN+5Ubdkpyzyialskt2atHqZVvefx3o0C1kcWMsx1peR5+9fdc16xv
2HnknteVrwUBbCWccSMaFHCcojgDTEZNJgXyI1ruGi1Pg+ERRX50RAwdVZxNM7hq
wJvevUIOKQ9CGMJPWxzmEHQhNYS70BUQdzf1ZCOIuH2aO4DFM28jPRnvcFq/jMI8
gNmgDqc3nrzL2giOgNbJo1wrv5MwEqvjZR9C6YkOxN82E9KPyjBOl+PWRN0gbPBk
B2A7W9wTRbLDnJbR4v+0ycigZ9axXZ6Ckd/K+6bGKLjedkTaLXEsmifKQVWBR5oB
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328847400083253838320894223666171719990354
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-24 19:12:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-22 19:12:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aspu.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25909912974115071505607561060088052655968199839570357964697123269111557097230426826944424014368010044907068221992958739548732456936471338916257396800740666562532018184325019810536524895779006468087502770722471792780357601044744055591422316508420568980272762710389748466368169971339484519820342400214873182271751829810596454083628006971998114657727575648367091950520026949262387457614626944137222174260773885152494223792270469470405728051771354903313241136725907266355015127272609889171455819257191926497192377886856080549004333193595120991254897086152799609995673859849932121680261777243773406065589577947433789948223
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6da11cf60ace0d173848b442764fcb3d1647872a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1504 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cancergenetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrizo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clearpointneuro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crzo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crzo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greggumbel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interventionalmr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interventionalmr.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cabalettabio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.geemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.globaleagleent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.kezarlifesciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rexahn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tiltholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.adgerobiopharm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bristowgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.capstoneturbine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.delmarpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.dgoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gladstonecapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gladstonecommercial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gladstoneinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gladstoneland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.greenspiritrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.huntsman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.interpacediagnostics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mainstcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.midwestemissions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.milestonescientific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mtem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nationalstorageaffiliates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pharmacytebiotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pieris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.relmada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rigel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.riotblockchain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rosehillresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.volitionrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irisife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joinladenburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcsa-cannabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mriinterventions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mriinterventions.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnideep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reporting.vfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'troutgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venturefoundryvfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vfcfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cancergenetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrizo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clearpointneuro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crzo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crzo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greggumbel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gvrtrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.interventionalmr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.interventionalmr.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.irisife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joinladenburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kcsa-cannabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mriinterventions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mriinterventions.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omnideep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.petroteqenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seacorholdingsinvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.troutgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.venturefoundryvfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vfcfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vfcglobalidentity.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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