aaaconnect.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:7e:60:1e:c7:0d:6c:fa:e0:60:f2:46:58:a0:7b:13:81:f2 was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aaaconnect.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7e:60:1e:c7:0d:6c:fa:e0:60:f2:46:58:a0:7b:13:81:f2
Serial Number (int): 391452487652843545862990316950473739043314
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 42:5c:2a:b1:9d:3b:d8:d3:52:17:f8:dd:0a:d7:fc:78:ad:8e:9a:03
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b2:90:e0:8c:e2:18:22:a2:db:98:ff:82:ea:fc:7a:5b:f5:5c:3a:6d
Fingerprint (sha256): 4b:4b:48:bd:a5:dc:ac:9f:ed:81:84:5c:69:f6:05:74:17:0e:4f:98:b8:bf:66:e2:b2:46:d5:dd:69:21:7a:c3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aaaconnect.co.uk

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aaaconnect.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aaaconnect.co.uk
abertayalumni.com
academicalsconnect.com
acgconnect.org
acglobalconnect.com
ackworthschoolconnect.com
aeseconnect.com
aiglonlife.ch
aiglonlife2.ch
aiglononline.ch
aimscommunity.org
aisgalumni.org
aislagosalumni.org
albanetworker.com
alderleyalumnae.co.uk
aluconnect.org
alumne.fak.dk
alumnet.sdu.dk
alumni-haut-lac.ch
alumni.24orebs.com
alumni.adek.gov.ae
alumni.bmc.edu.sa
alumni.champittet.ch
alumni.dulwich.org
alumni.galilcol.ac.il
alumni.johnsmithtrust.org
alumni.neurosciences.berlin
alumni.pharm.chula.ac.th
alumnibeausoleil.ch
alumnihotelschoolrocmondriaan.nl
alumnirapport.com
alumnisb.be
alumniuib.com
alumniul.online
alumniultest.manual.graduway.com
andrewsnetwork.co.uk
arel.network
ashinagaconnect.org
askalumni.gre.ac.uk
aswalumni.org
atlanticcollegeconnect.com
atlanticconnect.org
auafconnect.net
auralumni.com
aurconnect.com
autconnect.com
aveconnect.org
www.aaaconnect.co.uk
www.abertayalumni.com
www.academicalsconnect.com
www.acgconnect.org
www.acglobalconnect.com
www.ackworthschoolconnect.com
www.aeseconnect.com
www.aiglonlife.ch
www.aiglonlife2.ch
www.aiglononline.ch
www.aimscommunity.org
www.aisgalumni.org
www.aislagosalumni.org
www.albanetworker.com
www.alderleyalumnae.co.uk
www.aluconnect.org
www.alumne.fak.dk
www.alumnet.sdu.dk
www.alumni-haut-lac.ch
www.alumni.24orebs.com
www.alumni.adek.gov.ae
www.alumni.dulwich.org
www.alumni.pharm.chula.ac.th
www.alumnibeausoleil.ch
www.alumnihotelschoolrocmondriaan.nl
www.alumnirapport.com
www.alumnisb.be
www.alumniuib.com
www.alumniul.online
www.andrewsnetwork.co.uk
www.arel.network
www.ashinagaconnect.org
www.askalumni.gre.ac.uk
www.aswalumni.org
www.atlanticcollegeconnect.com
www.atlanticconnect.org
www.auafconnect.net
www.auralumni.com
www.aurconnect.com
www.autconnect.com
www.aveconnect.org

Other certificates including the domain name aaaconnect.co.uk

(limited to 100 certificates)
alumni-haut-lac.ch
m.aaaconnect.co.uk
alumni.ashoka.edu.in
aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
atlanticcollegeconnect.com
alumni.johnsmithtrust.org
alumne.fak.dk
ackworthschoolconnect.com
alumne.fak.dk
m.aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
alumni.dulwich.org
aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
m.aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
alumni.eeg.uminho.pt
aaaconnect.co.uk
alumni.johnsmithtrust.org
aaaconnect.co.uk
aaaconnect.co.uk
alumni.johnsmithtrust.org
alumne.fak.dk
m.aaaconnect.co.uk
alumni.adek.gov.ae
m.aaaconnect.co.uk
m.aaaconnect.co.uk
m.aaaconnect.co.uk
atlanticconnect.org
aaaconnect.co.uk
amitgushdanalumni.com
m.aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
alumnihotelschoolrocmondriaan.nl
m.aaaconnect.co.uk
alumni.novasbe.pt
m.aaaconnect.co.uk
m.aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
atlanticconnect.org
aaaconnect.co.uk
alumni.johnsmithtrust.org
m.aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
alumni.eeg.uminho.pt
aaaconnect.co.uk
alumni.dulwich.org
aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk

Certificate

The complete raw certificate details for aaaconnect.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjflhAb/fTzB1h8hiFY5
z5ar1WfkUiK1NYymsUgiXSBxg7ZyNaa8LU7xR8K8kLjPTYcE+QB5agy+c4cHNkVe
lhJZ+eDIvLkp/E0UYHGO+ppyVxpFb04UCUMQspxoGO3mlooeykmJLzdOtmPXt/RH
HOWd/DLK7LKub1iaFs7aFpxmG17Tk4snw4IT6rpL9E/qfVI5le4Dk2KjcSZgkm1H
poJt4vdhEWdVfrLSIQgfCWqyVzv07nnigS2AOSMmmonN+BnZBjznw5zxQXmMAc/a
7W/AnzjiqG+zVDF1Y9FJduqaGf0dm1ioXcj076Z3xJGIWRL5AvP/Mssw/W+1/Udq
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 391452487652843545862990316950473739043314
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-03 08:37:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-03 08:37:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aaaconnect.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26032654437065467441325774921393736419593482458072720094239902937707833663200642783160966712949836362334128052887087768175584146549703867010471787634104401971587694262288647266714200999553673167331094644400127746802516565233577693976714576319957868039734150963225943278099385440688000116264934065036611838539376796095313492178987971655613892057674536994213395678861295890308299457176163524156065240539117693104512753349308647165130691047863160741621363847056532661198181616600081125035721879794928584484501002563384691433473110080169537627826542547968095804776125553133263129486804841278782773837094153461854305217167
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							425c2ab19d3bd8d35217f8dd0ad7fc78ad8e9a03
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1884 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaaconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abertayalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academicalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acgconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acglobalconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ackworthschoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeseconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiglonlife.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiglonlife2.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiglononline.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aimscommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aisgalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aislagosalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albanetworker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alderleyalumnae.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aluconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumne.fak.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnet.sdu.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni-haut-lac.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.24orebs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.adek.gov.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.bmc.edu.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.champittet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.dulwich.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.galilcol.ac.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.johnsmithtrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.neurosciences.berlin'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.pharm.chula.ac.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnibeausoleil.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnihotelschoolrocmondriaan.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnirapport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnisb.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniuib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniul.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniultest.manual.graduway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrewsnetwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arel.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashinagaconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'askalumni.gre.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aswalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlanticcollegeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlanticconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auafconnect.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auralumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aveconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aaaconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abertayalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.academicalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acgconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acglobalconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ackworthschoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aeseconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aiglonlife.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aiglonlife2.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aiglononline.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aimscommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aisgalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aislagosalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albanetworker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alderleyalumnae.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aluconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumne.fak.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnet.sdu.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni-haut-lac.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.24orebs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.adek.gov.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.dulwich.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.pharm.chula.ac.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnibeausoleil.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnihotelschoolrocmondriaan.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnirapport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnisb.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniuib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniul.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andrewsnetwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arel.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashinagaconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.askalumni.gre.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aswalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlanticcollegeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlanticconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auafconnect.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auralumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aurconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aveconnect.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001700a692d9100000403004730450220245362a72b33c51e0eccc60d06ef736772229c4579642d6e995d271239eaf3df02210085d9a95b9cd07700c886c3982b1ff553cfa95a7086d8ee7a5d565d448bb7358a00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001700a692dd2000004030047304502207e7c790c0bc735059a1ed22a6feaf3ff9e7a3f5c16a3b516720dd21ac4e6e300022100ebdfff0976e87987abb38930835527db027e731c081d0c0ae15a9a03ef2e7f18
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0066c21e02dbc1034f840bcd6138d624467e3af8645ca0c5808d5118f363c413f65281352b5934cb160c3a3854832283b96492a64f0b2cc106162d859d8385d59ea06aca75983a58e4ce9b6c19f07de6d1752aaddf1e36fef0736b6e3535e31f3c77ecea640460cc787785c90296f413c2c80b805094658b92ad3bc0624619e26a48050c452c6f40ed43ee2b1b0433e28154428b55063e26a15c01edb76223bc41b7e0f0c0fa3f7993d5ba4d0387a275de7e4526561c2c6a8ab4b61f7bee54b49b7290ffaf7c315a300004d7b6709ba8ee5f65f6768e44a39a57e7d770ce05e27ace174dfd75a8aa9d39cf95dea38697a9507d747db10107a47f0d3c09a4b5b164