aaaconnect.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f5:68:9d:10:8b:f3:c5:b8:c8:f6:34:a0:c8:67:7b:e8:db was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aaaconnect.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f5:68:9d:10:8b:f3:c5:b8:c8:f6:34:a0:c8:67:7b:e8:db
Serial Number (int): 344845092928685796843423195837251549128923
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2c:d8:7c:a6:4c:35:a6:6f:3d:b7:aa:63:3d:db:9c:4c:e8:37:96:c9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ba:81:07:f8:23:88:70:76:42:bf:2a:80:8f:3e:b2:32:3f:6d:7a:b3
Fingerprint (sha256): 67:3d:58:3b:f3:61:83:b1:27:06:4b:39:d6:e9:f6:bd:f0:dc:03:b3:82:e3:20:60:7b:c5:14:fb:40:12:8f:b0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aaaconnect.co.uk

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aaaconnect.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aaaconnect.co.uk
abertayalumni.com
academicalsconnect.com
acgconnect.org
acglobalconnect.com
ackworthschoolconnect.com
aeseconnect.com
aiglonlife.ch
aiglonlife2.ch
aiglononline.ch
aimscommunity.org
aisgalumni.org
aislagosalumni.org
albanetworker.com
alderleyalumnae.co.uk
aluconnect.org
alumne.fak.dk
alumnet.sdu.dk
alumni-haut-lac.ch
alumni.24orebs.com
alumni.adek.gov.ae
alumni.bmc.edu.sa
alumni.champittet.ch
alumni.dulwich.org
alumni.eeg.uminho.pt
alumni.galilcol.ac.il
alumni.johnsmithtrust.org
alumni.neurosciences.berlin
alumni.pharm.chula.ac.th
alumnibeausoleil.ch
alumnihotelschoolrocmondriaan.nl
alumnirapport.com
alumnisb.be
alumniuib.com
alumniul.online
alumniultest.manual.graduway.com
andrewsnetwork.co.uk
arel.network
ashinagaconnect.org
askalumni.gre.ac.uk
aswalumni.org
atlanticcollegeconnect.com
atlanticconnect.org
auafconnect.net
auralumni.com
aurconnect.com
autconnect.com
aveconnect.org
www.aaaconnect.co.uk
www.abertayalumni.com
www.academicalsconnect.com
www.acgconnect.org
www.acglobalconnect.com
www.ackworthschoolconnect.com
www.aeseconnect.com
www.aiglonlife.ch
www.aiglonlife2.ch
www.aiglononline.ch
www.aimscommunity.org
www.aisgalumni.org
www.aislagosalumni.org
www.albanetworker.com
www.alderleyalumnae.co.uk
www.aluconnect.org
www.alumne.fak.dk
www.alumnet.sdu.dk
www.alumni-haut-lac.ch
www.alumni.24orebs.com
www.alumni.adek.gov.ae
www.alumni.dulwich.org
www.alumni.eeg.uminho.pt
www.alumni.pharm.chula.ac.th
www.alumnibeausoleil.ch
www.alumnihotelschoolrocmondriaan.nl
www.alumnirapport.com
www.alumnisb.be
www.alumniuib.com
www.alumniul.online
www.andrewsnetwork.co.uk
www.arel.network
www.ashinagaconnect.org
www.askalumni.gre.ac.uk
www.aswalumni.org
www.atlanticcollegeconnect.com
www.atlanticconnect.org
www.auafconnect.net
www.auralumni.com
www.aurconnect.com
www.autconnect.com
www.aveconnect.org

Other certificates including the domain name aaaconnect.co.uk

(limited to 100 certificates)
alumni-haut-lac.ch
m.aaaconnect.co.uk
alumni.ashoka.edu.in
aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
atlanticcollegeconnect.com
alumni.johnsmithtrust.org
alumne.fak.dk
ackworthschoolconnect.com
alumne.fak.dk
m.aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
alumni.dulwich.org
aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
m.aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
alumni.eeg.uminho.pt
aaaconnect.co.uk
alumni.johnsmithtrust.org
aaaconnect.co.uk
aaaconnect.co.uk
alumni.johnsmithtrust.org
alumne.fak.dk
m.aaaconnect.co.uk
alumni.adek.gov.ae
m.aaaconnect.co.uk
m.aaaconnect.co.uk
m.aaaconnect.co.uk
atlanticconnect.org
aaaconnect.co.uk
amitgushdanalumni.com
m.aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
alumnihotelschoolrocmondriaan.nl
m.aaaconnect.co.uk
alumni.novasbe.pt
m.aaaconnect.co.uk
m.aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
atlanticconnect.org
aaaconnect.co.uk
alumni.johnsmithtrust.org
m.aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
alumni.eeg.uminho.pt
aaaconnect.co.uk
alumni.dulwich.org
aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk

Certificate

The complete raw certificate details for aaaconnect.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpTIL4IEJwzyLuS0mVdd
OUj5LYofzhynk1jK1/6JS10C3P1iBBTT5mTBQRweAFksYyH8yCbpoW1WFE7OxfuL
d/A7W7NxyI+97xRtnRwtD41YO3+mv+Z7s+XBEG/vMIHRvusg1D8szden2pwjXQSW
6DBieAeFJOFoLojNWsuDjylTKjAfwaGcWkwRXAvzTAASLEFIPoK+kbYB+Jz8XAXo
L9N0/1NUqSd+3DA9iY6k/kpdlFEH1sgPYq8aIGTYYUsHVT+rTwU7AHlxBLQxqVX1
qUS8VKjfiql2GA7gQ6gOpqYXGJ0hkxRtKe42dQ1qeb+m2+k7BIWTiEe7DeHOn0if
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344845092928685796843423195837251549128923
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-18 11:17:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-18 11:17:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aaaconnect.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16484346771847294436545346922199394709273464782286852938876801617419095611151532033370848160983109061469287422031121807642213706041595283444821460733508683515331990620762649964816417497368842287715818652077315640219071318326673565905091345743899354105357147690930587804794113975634599868496358708350731357928629965657958431604221299361651280494576558017863997086650753369864862630359081294341278535019312880946010709000542471216924185968943084428997336998374114866229313472224038866716220919814850464192992688432814813376740302760158552542544481586988604590603771007954119070618680156376974370696723206151438988779439
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2cd87ca64c35a66f3db7aa633ddb9c4ce83796c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1932 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaaconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abertayalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academicalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acgconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acglobalconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ackworthschoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeseconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiglonlife.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiglonlife2.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiglononline.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aimscommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aisgalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aislagosalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albanetworker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alderleyalumnae.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aluconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumne.fak.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnet.sdu.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni-haut-lac.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.24orebs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.adek.gov.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.bmc.edu.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.champittet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.dulwich.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.eeg.uminho.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.galilcol.ac.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.johnsmithtrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.neurosciences.berlin'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.pharm.chula.ac.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnibeausoleil.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnihotelschoolrocmondriaan.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnirapport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnisb.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniuib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniul.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniultest.manual.graduway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrewsnetwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arel.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashinagaconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'askalumni.gre.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aswalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlanticcollegeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlanticconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auafconnect.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auralumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aveconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aaaconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abertayalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.academicalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acgconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acglobalconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ackworthschoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aeseconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aiglonlife.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aiglonlife2.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aiglononline.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aimscommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aisgalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aislagosalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albanetworker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alderleyalumnae.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aluconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumne.fak.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnet.sdu.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni-haut-lac.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.24orebs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.adek.gov.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.dulwich.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.eeg.uminho.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.pharm.chula.ac.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnibeausoleil.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnihotelschoolrocmondriaan.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnirapport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnisb.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniuib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniul.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andrewsnetwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arel.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashinagaconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.askalumni.gre.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aswalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlanticcollegeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlanticconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auafconnect.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auralumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aurconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aveconnect.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170583b94630000040300473045022058ba27b7255ad2942154096b7bd5c422394d8eb2878e0edda4614bb1e6ec9fbe022100c4acdfcc9220f125b92fc44de9231dee6741c925fe05bb66be0a218a50e6183000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170583b949b0000040300473045022100f41b20a53a9ca5c7fa49ffe7af379c0356ed1e9bdec10dbdb106593e4b91a3f9022023f877d98baaa24f88d58b7cf58501e7dcc36c8e309274abaa8e11f6425387fe
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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