aaaconnect.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:63:f5:5d:9a:27:1f:00:bc:35:a2:f3:a2:a3:9f:0d:39:62 was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aaaconnect.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:63:f5:5d:9a:27:1f:00:bc:35:a2:f3:a2:a3:9f:0d:39:62
Serial Number (int): 295350958989619368175089004983302744783202
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2b:2f:48:f9:2a:60:e7:79:d3:87:84:2b:d5:49:6f:70:2d:ab:db:27
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3f:b8:06:9f:4b:08:c1:51:30:2f:01:3b:d4:35:15:a1:0c:b3:3c:01
Fingerprint (sha256): 5d:6d:18:5a:9e:94:75:fb:e4:43:10:80:bc:dc:7f:59:05:f4:38:9e:a0:d9:d3:0d:48:3a:bc:98:dc:9d:4f:af

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aaaconnect.co.uk

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aaaconnect.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aaaconnect.co.uk
abertayalumni.com
academicalsconnect.com
acgconnect.org
acglobalconnect.com
ackworthschoolconnect.com
aeseconnect.com
aiglonlife.ch
aiglonlife2.ch
aiglononline.ch
aimscommunity.org
aisgalumni.org
aislagosalumni.org
albanetworker.com
alderleyalumnae.co.uk
aluconnect.org
alumne.fak.dk
alumnet.sdu.dk
alumni-haut-lac.ch
alumni.24orebs.com
alumni.adek.gov.ae
alumni.ashoka.edu.in
alumni.bmc.edu.sa
alumni.champittet.ch
alumni.dulwich.org
alumni.eeg.uminho.pt
alumni.galilcol.ac.il
alumni.johnsmithtrust.org
alumni.neurosciences.berlin
alumnibeausoleil.ch
alumnihotelschoolrocmondriaan.nl
alumnirapport.com
alumnisb.be
alumniuib.com
alumniul.online
alumniultest.manual.graduway.com
amitgushdanalumni.com
andrewsnetwork.co.uk
ansaalumni.no
ansanetwork.no
arel.network
ashinagaconnect.org
askalumni.gre.ac.uk
aswalumni.org
atlanticcollegeconnect.com
atlanticconnect.org
auafconnect.net
auralumni.com
aurconnect.com
autconnect.com
aveconnect.org
www.aaaconnect.co.uk
www.abertayalumni.com
www.academicalsconnect.com
www.acgconnect.org
www.acglobalconnect.com
www.ackworthschoolconnect.com
www.aeseconnect.com
www.aiglonlife.ch
www.aiglonlife2.ch
www.aiglononline.ch
www.aimscommunity.org
www.aisgalumni.org
www.aislagosalumni.org
www.albanetworker.com
www.alderleyalumnae.co.uk
www.aluconnect.org
www.alumne.fak.dk
www.alumnet.sdu.dk
www.alumni-haut-lac.ch
www.alumni.24orebs.com
www.alumni.adek.gov.ae
www.alumni.ashoka.edu.in
www.alumni.dulwich.org
www.alumni.eeg.uminho.pt
www.alumnibeausoleil.ch
www.alumnihotelschoolrocmondriaan.nl
www.alumnirapport.com
www.alumnisb.be
www.alumniuib.com
www.alumniul.online
www.amitgushdanalumni.com
www.andrewsnetwork.co.uk
www.ansaalumni.no
www.ansanetwork.no
www.arel.network
www.ashinagaconnect.org
www.askalumni.gre.ac.uk
www.aswalumni.org
www.atlanticcollegeconnect.com
www.atlanticconnect.org
www.auafconnect.net
www.auralumni.com
www.aurconnect.com
www.autconnect.com
www.aveconnect.org

Other certificates including the domain name aaaconnect.co.uk

(limited to 100 certificates)
alumni-haut-lac.ch
m.aaaconnect.co.uk
alumni.ashoka.edu.in
aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
atlanticcollegeconnect.com
alumni.johnsmithtrust.org
alumne.fak.dk
ackworthschoolconnect.com
alumne.fak.dk
m.aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
alumni.dulwich.org
aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
m.aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
alumni.eeg.uminho.pt
aaaconnect.co.uk
alumni.johnsmithtrust.org
aaaconnect.co.uk
aaaconnect.co.uk
alumni.johnsmithtrust.org
alumne.fak.dk
m.aaaconnect.co.uk
alumni.adek.gov.ae
m.aaaconnect.co.uk
m.aaaconnect.co.uk
m.aaaconnect.co.uk
atlanticconnect.org
aaaconnect.co.uk
amitgushdanalumni.com
m.aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
alumnihotelschoolrocmondriaan.nl
m.aaaconnect.co.uk
alumni.novasbe.pt
m.aaaconnect.co.uk
m.aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
atlanticconnect.org
aaaconnect.co.uk
alumni.johnsmithtrust.org
m.aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
alumni.eeg.uminho.pt
aaaconnect.co.uk
alumni.dulwich.org
aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk

Certificate

The complete raw certificate details for aaaconnect.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRkOwRASiUpzhpkYwkjH
VF6vchEKo+bvKf/Xbon0mwOVzRodUi6LWso/f0yszceTB6f3PIIVWAYnb946mEmd
xJuQMmPpY7MyJQA219dzh5G8mqFlqHS2ZXk9tnpRnr75DSPqhC6PywzuVUIAzja5
9G/o8q16qyj1PBRec3QVDPx8piyrzWKEC2mBYD76O6HiC/6LFCYeVno1dSjYqLOg
OCGd2Li7V4qt7OVKP6w4oCpERuSg0eFke89jTCUCaDBCkuqExFuDZLQxPBLV6k+q
kODmqliiaSI46Ku5GYFaWlo/JEcldECSPQeXKhyALtcsE2uLWGmHhK1R2Yry+ZHz
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295350958989619368175089004983302744783202
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-16 12:13:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-14 12:13:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aaaconnect.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20841676698959895700930921291311554859497887810213057396904111797939670191122212562590429381054208232940347046895024357650624063730150348955753341739155078455161271111217855280973738760464517414832186762804523031858608057035622377751427900086647437694983226068593403936212198490149935970530680815735194059508051241592339831614183614854343169260681823935319656232211135261941836385674545526654491398719838943855314419147404620056314226793524596477792487441124046208169112553287994634431013554207580147198876639972695656850624221509750907232380414519994336905967728580349644693787643607532097535555032881492362066523129
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2b2f48f92a60e779d387842bd5496f702dabdb27
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2044 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaaconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abertayalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academicalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acgconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acglobalconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ackworthschoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeseconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiglonlife.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiglonlife2.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiglononline.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aimscommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aisgalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aislagosalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albanetworker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alderleyalumnae.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aluconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumne.fak.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnet.sdu.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni-haut-lac.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.24orebs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.adek.gov.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.ashoka.edu.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.bmc.edu.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.champittet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.dulwich.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.eeg.uminho.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.galilcol.ac.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.johnsmithtrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.neurosciences.berlin'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnibeausoleil.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnihotelschoolrocmondriaan.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnirapport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnisb.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniuib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniul.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniultest.manual.graduway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amitgushdanalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrewsnetwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ansaalumni.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ansanetwork.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arel.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashinagaconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'askalumni.gre.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aswalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlanticcollegeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlanticconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auafconnect.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auralumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aveconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aaaconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abertayalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.academicalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acgconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acglobalconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ackworthschoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aeseconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aiglonlife.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aiglonlife2.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aiglononline.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aimscommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aisgalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aislagosalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albanetworker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alderleyalumnae.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aluconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumne.fak.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnet.sdu.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni-haut-lac.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.24orebs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.adek.gov.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.ashoka.edu.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.dulwich.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.eeg.uminho.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnibeausoleil.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnihotelschoolrocmondriaan.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnirapport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnisb.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniuib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniul.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amitgushdanalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andrewsnetwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ansaalumni.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ansanetwork.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arel.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashinagaconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.askalumni.gre.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aswalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlanticcollegeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlanticconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auafconnect.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auralumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aurconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aveconnect.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170e37a06090000040300473045022100c4b175212b421392e2f83b59b7e6b0d577b2380e1cb609bce88e80bd19264dbf022071a53df2e60937aa72c26a1e86c7001be479be518e2625b711854f48f3f4489f00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170e37a063e0000040300463044022037b682f1f0d0a5ebbeaa94faa7057de24fea68d9d9cc5763a7561f08858f603e02207f669475fe282e1470297e5d875b701aa937ba8819895017976f77ba8838b70f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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