akcoatings.com

Issued by R3

About this certificate

This digital certificate with serial number 03:dd:a1:89:64:7c:a4:37:c7:60:fd:a9:51:12:1a:bb:1d:1d was issued on by Let's Encrypt.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=akcoatings.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:dd:a1:89:64:7c:a4:37:c7:60:fd:a9:51:12:1a:bb:1d:1d
Serial Number (int): 336753979974915206583206803768757425216797
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 04:eb:92:54:69:c8:fb:57:ee:1a:f1:6c:10:c6:f3:b5:59:9b:86:47
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 66:3f:66:e4:2d:4e:02:31:95:4a:44:e6:44:a5:30:67:56:84:f6:91
Fingerprint (sha256): 4d:b4:4c:15:e3:0d:af:e3:f4:0c:cc:76:9c:c2:ac:01:e7:b2:bd:4f:7b:09:dc:11:e5:fa:fe:bd:22:f9:cb:98

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate akcoatings.com

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for akcoatings.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

akcoatings.com
aspu.com
cancergenetics.com
capstonefinance.com
careers.pieris.com
eminvestor.exxonmobil.com
gladstoneacquisition.com
greggumbel.com
investor.travelandleisureco.com
investor.twoharborsinvestment.com
investors.aercap.com
investors.cabalettabio.com
investors.geemedia.com
investors.globaleagleent.com
investors.gpmtreit.com
investors.imediabrands.com
investors.parkerdrilling.com
investors.tiltholdings.com
ir.adgerobiopharm.com
ir.aethlonmedical.com
ir.algernonpharmaceuticals.com
ir.auriniapharma.com
ir.calwatergroup.com
ir.capstoneturbine.com
ir.cerecor.com
ir.codexis.com
ir.cohbar.com
ir.cymabay.com
ir.evi-ind.com
ir.gladstonecapital.com
ir.gladstonecommercial.com
ir.gladstoneinvestment.com
ir.gladstoneland.com
ir.gnusbrands.com
ir.gulfportenergy.com
ir.heliostechnologies.com
ir.huntsman.com
ir.immunocore.com
ir.interpacediagnostics.com
ir.interpacedx.com
ir.kintara.com
ir.libertybroadband.com
ir.libertymedia.com
ir.libertytripadvisorholdings.com
ir.lmfunding.com
ir.mainstcapital.com
ir.midwestemissions.com
ir.nationalstorageaffiliates.com
ir.oneworldpharma.com
ir.owlrockcapitalcorporation.com
ir.pharmacytebiotech.com
ir.promisneurosciences.com
ir.qurateretail.com
ir.redwoodtrust.com
ir.relmada.com
ir.rigel.com
ir.riotblockchain.com
ir.sm-energy.com
irisife.com
itkg.net
joinladenburg.com
kcsa-cannabis.com
nclhltdinvestor.com
nclhltdmedia.com
proxyvote.equitystock.com
reporting.vfc.com
sec.gceholdings.com
terratechcorp.com
venturefoundryvfc.com
vfcfoundation.org
www.akcoatings.com
www.cancergenetics.com
www.capstonefinance.com
www.gladstoneacquisition.com
www.greggumbel.com
www.irisife.com
www.itkg.net
www.joinladenburg.com
www.kcsa-cannabis.com
www.nclhltdinvestor.com
www.nclhltdmedia.com
www.terratechcorp.com
www.venturefoundryvfc.com
www.vfcfoundation.org
www.vfcglobalidentity.com

Other certificates including the domain name akcoatings.com

(limited to 100 certificates)
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
akcoatings.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com

Certificate

The complete raw certificate details for akcoatings.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0TbwAqDgIAUUmVxJTm0
lrFJQCwEivxpE0/kJ4d/E/QQXVN9LrMz2EBDCZY1cLZBMaA5ZUoukM/KtGleZvk/
Ti9fY1bGqqdqWdgMgXoENBRbJPQnT9EFYomFpe9JG39LMjxOTAhJRG+KzVBq8O59
xy2CTJhV9S+zuN5mPy7t3Sabj6Fp+yEKodIxkLl9fCrFH6U6hGxky4uNvjQneIhR
RnUslpc3y4rMFcuLsz4fnapLZWgo506LheuCO1Oj8x8Tcyn/3wQ4YyVK7oLIQE+G
BCyTNN5YmYx7SJxiYfUZbqs4kdShn/3nWn/c2ePOuZYEGfebLWmTPxRthK9V5nRE
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336753979974915206583206803768757425216797
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-30 19:30:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-29 19:30:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'akcoatings.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25660331250221371091529150648204167003341745415449492483632329237662444437326419234700028916104205986457317995265605631315858465606032453820666833886072142023517394907071606855640195068233084237101051657144404157346120095940556221149680241601269693739522452898641444453181711375139356912396322900708237266524791999006098110774972213685350561006445425224701383129100079449749107399245239547517815510973775411069176052152471220810006819411820203238983381392851416987294857178541739139196595327065892028188458787709592876846624037443506614902398131308489884962957439515213778314017183428099764602719683770961586071815407
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							04eb925469c8fb57ee1af16c10c6f3b5599b8647
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1915 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akcoatings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cancergenetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capstonefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.pieris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eminvestor.exxonmobil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gladstoneacquisition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greggumbel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.travelandleisureco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.twoharborsinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.aercap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cabalettabio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.geemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.globaleagleent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.gpmtreit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.imediabrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.parkerdrilling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tiltholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.adgerobiopharm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aethlonmedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.algernonpharmaceuticals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.auriniapharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.calwatergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.capstoneturbine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cerecor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.codexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cohbar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cymabay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.evi-ind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gladstonecapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gladstonecommercial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gladstoneinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gladstoneland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gnusbrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gulfportenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.heliostechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.huntsman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.immunocore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.interpacediagnostics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.interpacedx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.kintara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.libertybroadband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.libertymedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.libertytripadvisorholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lmfunding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mainstcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.midwestemissions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nationalstorageaffiliates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.oneworldpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.owlrockcapitalcorporation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pharmacytebiotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.promisneurosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.qurateretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.redwoodtrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.relmada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rigel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.riotblockchain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sm-energy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irisife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itkg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joinladenburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcsa-cannabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nclhltdinvestor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nclhltdmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proxyvote.equitystock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reporting.vfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.gceholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terratechcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venturefoundryvfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vfcfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akcoatings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cancergenetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capstonefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gladstoneacquisition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greggumbel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.irisife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itkg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joinladenburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kcsa-cannabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nclhltdinvestor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nclhltdmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terratechcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.venturefoundryvfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vfcfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vfcglobalidentity.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f30b33b150000040300473045022100ce7a257ea3b02c10ee94ae187bfeadaf3cb275a608df201f1313c9599f39ebdf02206c790e0b89d49301d5ab8d9337989864540b991fcfd25dd36e124fcae19bb505007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f30b33bf6000004030046304402206020de8b48003b3a8d8b0d73475f18cf10866f3bec006c0904f9136118e6265302207de87b5fc57cc7b7d16b0d1e23cdde7e3a80886a113ddf08c0023b3260e02ad7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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