akcoatings.com

Issued by R3

About this certificate

This digital certificate with serial number 04:5a:99:f4:5d:1e:b1:13:5f:6e:4c:2f:61:d3:ba:b0:32:38 was issued on by Let's Encrypt.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=akcoatings.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5a:99:f4:5d:1e:b1:13:5f:6e:4c:2f:61:d3:ba:b0:32:38
Serial Number (int): 379279197442409763206716634345093435765304
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 07:f0:3d:d8:2b:3a:69:5b:04:61:f9:45:42:3b:7d:5c:04:37:f5:89
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 67:17:f9:37:e7:d3:f5:58:99:7c:54:54:f6:90:72:92:a8:33:cf:ea
Fingerprint (sha256): 51:bd:87:1c:2c:1d:aa:1d:e4:eb:86:41:f2:4a:1e:0c:4b:05:1d:d2:aa:c0:99:4a:ef:94:91:f8:51:df:5b:b6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate akcoatings.com

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for akcoatings.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

akcoatings.com
aspu.com
cancergenetics.com
capstonefinance.com
careers.pieris.com
eminvestor.exxonmobil.com
gladstoneacquisition.com
greggumbel.com
investor.travelandleisureco.com
investor.twoharborsinvestment.com
investors.aercap.com
investors.cabalettabio.com
investors.geemedia.com
investors.globaleagleent.com
investors.gpmtreit.com
investors.imediabrands.com
investors.parkerdrilling.com
investors.tiltholdings.com
ir.adgerobiopharm.com
ir.aethlonmedical.com
ir.algernonpharmaceuticals.com
ir.auriniapharma.com
ir.calwatergroup.com
ir.capstoneturbine.com
ir.cerecor.com
ir.codexis.com
ir.cohbar.com
ir.cymabay.com
ir.evi-ind.com
ir.gladstonecapital.com
ir.gladstonecommercial.com
ir.gladstoneinvestment.com
ir.gladstoneland.com
ir.gnusbrands.com
ir.gulfportenergy.com
ir.heliostechnologies.com
ir.huntsman.com
ir.interpacediagnostics.com
ir.interpacedx.com
ir.kintara.com
ir.libertybroadband.com
ir.libertymedia.com
ir.libertytripadvisorholdings.com
ir.lmfunding.com
ir.mainstcapital.com
ir.midwestemissions.com
ir.nationalstorageaffiliates.com
ir.oneworldpharma.com
ir.owlrockcapitalcorporation.com
ir.pharmacytebiotech.com
ir.pieris.com
ir.promisneurosciences.com
ir.qurateretail.com
ir.redwoodtrust.com
ir.relmada.com
ir.rigel.com
ir.riotblockchain.com
ir.sm-energy.com
irisife.com
itkg.net
joinladenburg.com
kcsa-cannabis.com
nclhltdinvestor.com
nclhltdmedia.com
proxyvote.equitystock.com
reporting.vfc.com
sec.gceholdings.com
terratechcorp.com
venturefoundryvfc.com
vfcfoundation.org
www.akcoatings.com
www.cancergenetics.com
www.capstonefinance.com
www.gladstoneacquisition.com
www.greggumbel.com
www.irisife.com
www.itkg.net
www.joinladenburg.com
www.kcsa-cannabis.com
www.nclhltdinvestor.com
www.nclhltdmedia.com
www.terratechcorp.com
www.venturefoundryvfc.com
www.vfcfoundation.org
www.vfcglobalidentity.com

Other certificates including the domain name akcoatings.com

(limited to 100 certificates)
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
akcoatings.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com

Certificate

The complete raw certificate details for akcoatings.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LYyhDFQaUkzz392xpQC
b0pdY49RVDDtt+/xk+5GiBXh9e/wYuRVyijQYVOp3Gjd3rwMvnRmq8P7Nf9SWmt7
f3l4agDrMRrSjx0RK/Lccz4gBK53w01zs5PmrbpV+SzShU+Wg08Qsew9Ao/OpuYC
ipGuvtDIq6ORzd5lqdA2OrNUE5AIYa/DNBdewe/52dxlDolbXRTkaW8q/+5UH/o0
Ml3yMH9umqita2eOD8USY3eGRgdnnvk3rQJmlplv1giWAIz9Uv3Kiwwnd8Ox+9tz
Vva1K03W/kOcuN0ZP/89ClOYQvRZTo26iRunGso+HmU+qLTTpinWDvuFI8BrP2Wk
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 379279197442409763206716634345093435765304
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-29 13:10:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-28 13:10:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'akcoatings.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27862271944321896682328688773912652014505389762634774317777921145724377418801366126663221929703736115591229251880811215190202058422479907457584181838229930189149080125237161590224986099686573740166226791449568000060431326714991143909312830108626793599461470521876431427440758415451233138355046055515430195596510516088443533110976287584284483538573881848958592518897228194117165582166154589777461705502272209066196169371349816551989346770591213270905126584835388480710375972527823721546526401164132322332525262337333058203299698245415930629045936005653884888651181116949995005470093845133101470845727410521670089548879
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							07f03dd82b3a695b0461f945423b7d5c0437f589
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1911 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akcoatings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cancergenetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capstonefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.pieris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eminvestor.exxonmobil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gladstoneacquisition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greggumbel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.travelandleisureco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.twoharborsinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.aercap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cabalettabio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.geemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.globaleagleent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.gpmtreit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.imediabrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.parkerdrilling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tiltholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.adgerobiopharm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aethlonmedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.algernonpharmaceuticals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.auriniapharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.calwatergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.capstoneturbine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cerecor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.codexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cohbar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cymabay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.evi-ind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gladstonecapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gladstonecommercial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gladstoneinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gladstoneland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gnusbrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gulfportenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.heliostechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.huntsman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.interpacediagnostics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.interpacedx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.kintara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.libertybroadband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.libertymedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.libertytripadvisorholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lmfunding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mainstcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.midwestemissions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nationalstorageaffiliates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.oneworldpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.owlrockcapitalcorporation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pharmacytebiotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pieris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.promisneurosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.qurateretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.redwoodtrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.relmada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rigel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.riotblockchain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sm-energy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irisife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itkg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joinladenburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcsa-cannabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nclhltdinvestor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nclhltdmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proxyvote.equitystock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reporting.vfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.gceholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terratechcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venturefoundryvfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vfcfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akcoatings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cancergenetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capstonefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gladstoneacquisition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greggumbel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.irisife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itkg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joinladenburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kcsa-cannabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nclhltdinvestor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nclhltdmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terratechcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.venturefoundryvfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vfcfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vfcglobalidentity.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d558ec78d0000040300473045022100f8a243560ac11f679b25aef2481ba51c0f7573a63769c6eb2e37c6a0638fe7300220039ef6dd13e34dc8b8a83fde03934745f8b9d727a1986e8238cd3966f9a8d7b7007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d558ec78b0000040300473045022100fc2d81ea30487e6bd58042aba0210ab5b6db33bc6d3e0fb101e7e248a631ad2602204ca68321bcc3e5f79444aa7dbf27cd41806751d57e6c219a7ade17005b0879ea
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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