akcoatings.com

Issued by R3

About this certificate

This digital certificate with serial number 04:ab:cd:5f:c2:ef:bf:96:a1:ff:f7:e3:74:52:55:be:78:79 was issued on by Let's Encrypt.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=akcoatings.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ab:cd:5f:c2:ef:bf:96:a1:ff:f7:e3:74:52:55:be:78:79
Serial Number (int): 406910417431641220091407490487851023235193
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0f:99:c2:9c:a1:ac:8f:df:08:9d:49:ed:ee:7a:6b:63:dc:6d:a0:e4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5d:7a:5c:11:e7:5b:de:a0:cd:ea:d4:97:a4:79:c2:09:d4:9c:6b:d7
Fingerprint (sha256): 45:60:cd:19:7d:97:a4:6a:cd:d3:2c:dc:2c:d9:ef:6a:74:c1:cc:20:c6:ae:3d:83:ff:32:fe:d4:8e:e5:f2:67

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate akcoatings.com

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for akcoatings.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

akcoatings.com
aspu.com
cancergenetics.com
capstonefinance.com
careers.pieris.com
eminvestor.exxonmobil.com
gladstoneacquisition.com
greggumbel.com
investor.travelandleisureco.com
investor.twoharborsinvestment.com
investors.aercap.com
investors.cabalettabio.com
investors.geemedia.com
investors.globaleagleent.com
investors.gpmtreit.com
investors.imediabrands.com
investors.parkerdrilling.com
investors.rexahn.com
investors.tiltholdings.com
ir.adgerobiopharm.com
ir.aethlonmedical.com
ir.algernonpharmaceuticals.com
ir.auriniapharma.com
ir.calwatergroup.com
ir.capstoneturbine.com
ir.cerecor.com
ir.codexis.com
ir.cohbar.com
ir.cymabay.com
ir.dgoc.com
ir.evi-ind.com
ir.gladstonecapital.com
ir.gladstonecommercial.com
ir.gladstoneinvestment.com
ir.gladstoneland.com
ir.gnusbrands.com
ir.gulfportenergy.com
ir.heliostechnologies.com
ir.huntsman.com
ir.interpacediagnostics.com
ir.kintara.com
ir.libertybroadband.com
ir.libertymedia.com
ir.libertytripadvisorholdings.com
ir.lmfunding.com
ir.mainstcapital.com
ir.midwestemissions.com
ir.nationalstorageaffiliates.com
ir.oneworldpharma.com
ir.owlrockcapitalcorporation.com
ir.pharmacytebiotech.com
ir.pieris.com
ir.promisneurosciences.com
ir.qurateretail.com
ir.redwoodtrust.com
ir.relmada.com
ir.rigel.com
ir.riotblockchain.com
ir.volitionrx.com
irisife.com
itkg.net
joinladenburg.com
kcsa-cannabis.com
nclhltdinvestor.com
nclhltdmedia.com
proxyvote.equitystock.com
reporting.vfc.com
sec.gceholdings.com
terratechcorp.com
venturefoundryvfc.com
vfcfoundation.org
www.akcoatings.com
www.cancergenetics.com
www.capstonefinance.com
www.gladstoneacquisition.com
www.greggumbel.com
www.irisife.com
www.itkg.net
www.joinladenburg.com
www.kcsa-cannabis.com
www.nclhltdinvestor.com
www.nclhltdmedia.com
www.terratechcorp.com
www.venturefoundryvfc.com
www.vfcfoundation.org
www.vfcglobalidentity.com

Other certificates including the domain name akcoatings.com

(limited to 100 certificates)
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
akcoatings.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com

Certificate

The complete raw certificate details for akcoatings.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMYjCCC0qgAwIBAgISBKvNX8Lvv5ah//fjdFJVvnh5MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEwMDYxMjE5MTlaFw0yNDAxMDQxMjE5MThaMBkxFzAVBgNVBAMT
DmFrY29hdGluZ3MuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
u5dXS6jyftbc4HytOfiQxb17anR7DPWkX5eBRRr7AIxGijpba8p7lHuSLGo+VkN6
98Nk/ZFmhao0iYk4YzitHb2R2o5j2fldWC74hAu9xLhzxLXXzUGOMHS9CqLY0z4z
sD8vxabJkx062PhEmJ2eLk1GP/C7qUSTV5XDpM3GMcNN0UqfxlefarJare4llBp1
IidPWgqaHkYrmHhmu2sw8y3HavF1558NmR12GBQBbzMMvlYn/2myjv5Z4R7F/zeY
h6zZ1ApRnWLjJ7rJZ/YmXWxF6gK950axjthScgELZfo9TkekhOhNMBB7rnTFiyyI
mv+5gHs+IT8TKIWIRE4zAwIDAQABo4IJiTCCCYUwDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud
DgQWBBQPmcKcoayP3widSe3uemtj3G2g5DAfBgNVHSMEGDAWgBQULrMXt1hWy65Q
CUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9y
My5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3Jn
LzCCB5AGA1UdEQSCB4cwggeDgg5ha2NvYXRpbmdzLmNvbYIIYXNwdS5jb22CEmNh
bmNlcmdlbmV0aWNzLmNvbYITY2Fwc3RvbmVmaW5hbmNlLmNvbYISY2FyZWVycy5w
aWVyaXMuY29tghllbWludmVzdG9yLmV4eG9ubW9iaWwuY29tghhnbGFkc3RvbmVh
Y3F1aXNpdGlvbi5jb22CDmdyZWdndW1iZWwuY29tgh9pbnZlc3Rvci50cmF2ZWxh
bmRsZWlzdXJlY28uY29tgiFpbnZlc3Rvci50d29oYXJib3JzaW52ZXN0bWVudC5j
b22CFGludmVzdG9ycy5hZXJjYXAuY29tghppbnZlc3RvcnMuY2FiYWxldHRhYmlv
LmNvbYIWaW52ZXN0b3JzLmdlZW1lZGlhLmNvbYIcaW52ZXN0b3JzLmdsb2JhbGVh
Z2xlZW50LmNvbYIWaW52ZXN0b3JzLmdwbXRyZWl0LmNvbYIaaW52ZXN0b3JzLmlt
ZWRpYWJyYW5kcy5jb22CHGludmVzdG9ycy5wYXJrZXJkcmlsbGluZy5jb22CFGlu
dmVzdG9ycy5yZXhhaG4uY29tghppbnZlc3RvcnMudGlsdGhvbGRpbmdzLmNvbYIV
aXIuYWRnZXJvYmlvcGhhcm0uY29tghVpci5hZXRobG9ubWVkaWNhbC5jb22CHmly
LmFsZ2Vybm9ucGhhcm1hY2V1dGljYWxzLmNvbYIUaXIuYXVyaW5pYXBoYXJtYS5j
b22CFGlyLmNhbHdhdGVyZ3JvdXAuY29tghZpci5jYXBzdG9uZXR1cmJpbmUuY29t
gg5pci5jZXJlY29yLmNvbYIOaXIuY29kZXhpcy5jb22CDWlyLmNvaGJhci5jb22C
DmlyLmN5bWFiYXkuY29tggtpci5kZ29jLmNvbYIOaXIuZXZpLWluZC5jb22CF2ly
LmdsYWRzdG9uZWNhcGl0YWwuY29tghppci5nbGFkc3RvbmVjb21tZXJjaWFsLmNv
bYIaaXIuZ2xhZHN0b25laW52ZXN0bWVudC5jb22CFGlyLmdsYWRzdG9uZWxhbmQu
Y29tghFpci5nbnVzYnJhbmRzLmNvbYIVaXIuZ3VsZnBvcnRlbmVyZ3kuY29tghlp
ci5oZWxpb3N0ZWNobm9sb2dpZXMuY29tgg9pci5odW50c21hbi5jb22CG2lyLmlu
dGVycGFjZWRpYWdub3N0aWNzLmNvbYIOaXIua2ludGFyYS5jb22CF2lyLmxpYmVy
dHlicm9hZGJhbmQuY29tghNpci5saWJlcnR5bWVkaWEuY29tgiFpci5saWJlcnR5
dHJpcGFkdmlzb3Job2xkaW5ncy5jb22CEGlyLmxtZnVuZGluZy5jb22CFGlyLm1h
aW5zdGNhcGl0YWwuY29tghdpci5taWR3ZXN0ZW1pc3Npb25zLmNvbYIgaXIubmF0
aW9uYWxzdG9yYWdlYWZmaWxpYXRlcy5jb22CFWlyLm9uZXdvcmxkcGhhcm1hLmNv
bYIgaXIub3dscm9ja2NhcGl0YWxjb3Jwb3JhdGlvbi5jb22CGGlyLnBoYXJtYWN5
dGViaW90ZWNoLmNvbYINaXIucGllcmlzLmNvbYIaaXIucHJvbWlzbmV1cm9zY2ll
bmNlcy5jb22CE2lyLnF1cmF0ZXJldGFpbC5jb22CE2lyLnJlZHdvb2R0cnVzdC5j
b22CDmlyLnJlbG1hZGEuY29tggxpci5yaWdlbC5jb22CFWlyLnJpb3RibG9ja2No
YWluLmNvbYIRaXIudm9saXRpb25yeC5jb22CC2lyaXNpZmUuY29tgghpdGtnLm5l
dIIRam9pbmxhZGVuYnVyZy5jb22CEWtjc2EtY2FubmFiaXMuY29tghNuY2xobHRk
aW52ZXN0b3IuY29tghBuY2xobHRkbWVkaWEuY29tghlwcm94eXZvdGUuZXF1aXR5
c3RvY2suY29tghFyZXBvcnRpbmcudmZjLmNvbYITc2VjLmdjZWhvbGRpbmdzLmNv
bYIRdGVycmF0ZWNoY29ycC5jb22CFXZlbnR1cmVmb3VuZHJ5dmZjLmNvbYIRdmZj
Zm91bmRhdGlvbi5vcmeCEnd3dy5ha2NvYXRpbmdzLmNvbYIWd3d3LmNhbmNlcmdl
bmV0aWNzLmNvbYIXd3d3LmNhcHN0b25lZmluYW5jZS5jb22CHHd3dy5nbGFkc3Rv
bmVhY3F1aXNpdGlvbi5jb22CEnd3dy5ncmVnZ3VtYmVsLmNvbYIPd3d3LmlyaXNp
ZmUuY29tggx3d3cuaXRrZy5uZXSCFXd3dy5qb2lubGFkZW5idXJnLmNvbYIVd3d3
Lmtjc2EtY2FubmFiaXMuY29tghd3d3cubmNsaGx0ZGludmVzdG9yLmNvbYIUd3d3
Lm5jbGhsdGRtZWRpYS5jb22CFXd3dy50ZXJyYXRlY2hjb3JwLmNvbYIZd3d3LnZl
bnR1cmVmb3VuZHJ5dmZjLmNvbYIVd3d3LnZmY2ZvdW5kYXRpb24ub3Jnghl3d3cu
dmZjZ2xvYmFsaWRlbnRpdHkuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYK
KwYBBAHWeQIEAgSB9QSB8gDwAHUAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1y
b+H61BcAAAGLBSR/DQAABAMARjBEAiBKN1YvKXBy8CHAUb+GAENYZRVCsZlNHGJ8
+JciKcUBqgIgdBLGwXuelPxlYtMCdqDALyk7hsz0wpQx2P3nMUBy5z0AdwB2/4g/
Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYsFJH9PAAAEAwBIMEYCIQD2
Ja/TXBAsFFe4Ot9/WiNYDr52bgm3FQWFpmmy2MZ6pQIhAM5JujQvp7pUqtiiEic8
l2fY2cUy4UQ9Wn/S2l8nN0IUMA0GCSqGSIb3DQEBCwUAA4IBAQAWvgbwl/omAkpf
jdglY+P1KU3a0fkIoaEbsvvPF6rHYPd1qCxon2u1NWBfAHgQcRkOxE/FHIenOyk2
EIEU9enGED8SB3z8fdyt4HOebJhBTHzuoK3MVQ5N1utKxCtLSEQm/iH7GjviCycC
kJG+yO2ePMhZgMeb4uYR4CSjYQ5epztYyHG/hPzzXdEnrv6eG//HGVBHAZ/w2rlW
leY0K1StoeNn2XIMkgb1+6a+JiOPWgaPqKflcKf/4BueTD8M8yuF9bJ1jsLtwBMQ
BhLxp41mGpImrT52HtIYDoXtdKrpVsbI23MN7LcRRBqv//HNknGzudQqjMDWFQvL
sfMi5PBk
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5dXS6jyftbc4HytOfiQ
xb17anR7DPWkX5eBRRr7AIxGijpba8p7lHuSLGo+VkN698Nk/ZFmhao0iYk4Yzit
Hb2R2o5j2fldWC74hAu9xLhzxLXXzUGOMHS9CqLY0z4zsD8vxabJkx062PhEmJ2e
Lk1GP/C7qUSTV5XDpM3GMcNN0UqfxlefarJare4llBp1IidPWgqaHkYrmHhmu2sw
8y3HavF1558NmR12GBQBbzMMvlYn/2myjv5Z4R7F/zeYh6zZ1ApRnWLjJ7rJZ/Ym
XWxF6gK950axjthScgELZfo9TkekhOhNMBB7rnTFiyyImv+5gHs+IT8TKIWIRE4z
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 406910417431641220091407490487851023235193
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-06 12:19:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-04 12:19:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'akcoatings.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23681192056341743852135357147666510420431535573035747042331047251197189794697162583826199721005042002725077006999201431130371277650601107881435976529314625790854396654316899184674853883172536873386203647303344354535414613597404568491290927368567453676252521152622995944175727666603652831358488942902236671905581632560141748217664368694085321259086044558549568813872339646932862684078475196740193252741696290781329597976782375709661974141350235073624803802079716518384481263015613041029321935655104470899621401371850792956528533553050547248393562830317339861051994066169453085480276083037254679733780481071016202613507
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0f99c29ca1ac8fdf089d49edee7a6b63dc6da0e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1927 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akcoatings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cancergenetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capstonefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.pieris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eminvestor.exxonmobil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gladstoneacquisition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greggumbel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.travelandleisureco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.twoharborsinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.aercap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cabalettabio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.geemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.globaleagleent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.gpmtreit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.imediabrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.parkerdrilling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rexahn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tiltholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.adgerobiopharm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aethlonmedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.algernonpharmaceuticals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.auriniapharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.calwatergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.capstoneturbine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cerecor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.codexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cohbar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cymabay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.dgoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.evi-ind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gladstonecapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gladstonecommercial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gladstoneinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gladstoneland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gnusbrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gulfportenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.heliostechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.huntsman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.interpacediagnostics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.kintara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.libertybroadband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.libertymedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.libertytripadvisorholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lmfunding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mainstcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.midwestemissions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nationalstorageaffiliates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.oneworldpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.owlrockcapitalcorporation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pharmacytebiotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pieris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.promisneurosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.qurateretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.redwoodtrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.relmada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rigel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.riotblockchain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.volitionrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irisife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itkg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joinladenburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcsa-cannabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nclhltdinvestor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nclhltdmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proxyvote.equitystock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reporting.vfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.gceholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terratechcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venturefoundryvfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vfcfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akcoatings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cancergenetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capstonefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gladstoneacquisition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greggumbel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.irisife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itkg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joinladenburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kcsa-cannabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nclhltdinvestor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nclhltdmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terratechcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.venturefoundryvfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vfcfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vfcglobalidentity.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b05247f0d000004030046304402204a37562f297072f021c051bf86004358651542b1994d1c627cf8972229c501aa02207412c6c17b9e94fc6562d30276a0c02f293b86ccf4c29431d8fde7314072e73d00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b05247f4f0000040300483046022100f625afd35c102c1457b83adf7f5a23580ebe766e09b7150585a669b2d8c67aa5022100ce49ba342fa7ba54aad8a212273c9767d8d9c532e1443d5a7fd2da5f27374214
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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