akcoatings.com

Issued by R3

About this certificate

This digital certificate with serial number 04:a5:d0:39:45:59:36:7c:ff:33:a5:a2:1a:27:5f:26:19:8a was issued on by Let's Encrypt.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=akcoatings.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a5:d0:39:45:59:36:7c:ff:33:a5:a2:1a:27:5f:26:19:8a
Serial Number (int): 404872511059594464462914168699353636936074
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 58:df:5d:05:27:38:c1:b5:e4:06:b3:3d:f2:0f:0a:3e:04:6b:80:9b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8a:f6:41:44:87:51:dc:d3:97:a8:4a:62:ae:24:f8:7f:b6:91:e9:91
Fingerprint (sha256): 73:9d:4f:cb:a7:ff:f1:1e:e3:e9:d6:a4:c8:82:b3:d1:5e:b2:57:b0:ce:2a:29:a6:41:32:f9:aa:38:07:07:0a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate akcoatings.com

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for akcoatings.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

akcoatings.com
aspu.com
cancergenetics.com
capstonefinance.com
careers.pieris.com
eminvestor.exxonmobil.com
gladstoneacquisition.com
greggumbel.com
investor.travelandleisureco.com
investor.twoharborsinvestment.com
investors.aercap.com
investors.cabalettabio.com
investors.geemedia.com
investors.globaleagleent.com
investors.gpmtreit.com
investors.imediabrands.com
investors.parkerdrilling.com
investors.rexahn.com
investors.tiltholdings.com
ir.adgerobiopharm.com
ir.aethlonmedical.com
ir.algernonpharmaceuticals.com
ir.auriniapharma.com
ir.calwatergroup.com
ir.capstoneturbine.com
ir.cerecor.com
ir.codexis.com
ir.cohbar.com
ir.cymabay.com
ir.evi-ind.com
ir.gladstonecapital.com
ir.gladstonecommercial.com
ir.gladstoneinvestment.com
ir.gladstoneland.com
ir.gnusbrands.com
ir.gulfportenergy.com
ir.heliostechnologies.com
ir.huntsman.com
ir.interpacediagnostics.com
ir.interpacedx.com
ir.libertybroadband.com
ir.libertymedia.com
ir.libertytripadvisorholdings.com
ir.lmfunding.com
ir.mainstcapital.com
ir.midwestemissions.com
ir.nationalstorageaffiliates.com
ir.oneworldpharma.com
ir.owlrockcapitalcorporation.com
ir.pharmacytebiotech.com
ir.pieris.com
ir.promisneurosciences.com
ir.qurateretail.com
ir.redwoodtrust.com
ir.relmada.com
ir.rigel.com
ir.riotblockchain.com
ir.sm-energy.com
irisife.com
itkg.net
joinladenburg.com
kcsa-cannabis.com
nclhltdinvestor.com
nclhltdmedia.com
proxyvote.equitystock.com
reporting.vfc.com
sec.gceholdings.com
terratechcorp.com
venturefoundryvfc.com
vfcfoundation.org
www.akcoatings.com
www.cancergenetics.com
www.capstonefinance.com
www.gladstoneacquisition.com
www.greggumbel.com
www.irisife.com
www.itkg.net
www.joinladenburg.com
www.kcsa-cannabis.com
www.nclhltdinvestor.com
www.nclhltdmedia.com
www.terratechcorp.com
www.venturefoundryvfc.com
www.vfcfoundation.org
www.vfcglobalidentity.com

Other certificates including the domain name akcoatings.com

(limited to 100 certificates)
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
akcoatings.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com
akcoatings.com
a.reinventtechnologypartners.com

Certificate

The complete raw certificate details for akcoatings.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxg2rKm4tNCuEZYWaX1z9
gmo6gh+36p1NI/4Q+7CY+mOhMTjxR7hiz0mvhvuFknMzC8W8HtiwFgoGdssRHpWL
2Pu5aNDFUHVTw0sJc9GxLhY+vFaqT6aQaxLwp6O8ZqqixTu9AE/Qs+AMEuIMA1nB
wT7+AKUoXK+XtJ9Y2Cugs0VRK4uO4q0s3Cydl5HcOmL1rkhqy8i8ROb+M/qeJwon
f0Q64AU4EzukxBVihLJ17wLmC+vDME+JzxWnMjJrmzM4OFG82M1/a9I76LNqeHBu
3x2xA7SLfwWGWOSILTgNTtl6tEvrWxkX4+1nDx2TBx3xGrm94Wr9Ev9cdpYIraZ7
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 404872511059594464462914168699353636936074
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 13:06:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-06 13:06:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'akcoatings.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25001924629133414000835907064004444716538817201015754920477722904853556930529493229112790365327587467660894533842866853496361603484030271987685844068073254754875901720867766273177829739820391348286608361619042479431516596920664051269199864442231758175132862161617933180275353064308983471918818046030332866775126464283271921277143204063641940213102527243148939470180747531683158743952690181397841143726090902056226193376569537582212944739362158138049426923005203615249600540688693410709521986091384242031339936544048218240983861284297962797205353154435402045651429879564435127628701932424683422095756835808780652804897
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							58df5d052738c1b5e406b33df20f0a3e046b809b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1917 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akcoatings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cancergenetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capstonefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.pieris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eminvestor.exxonmobil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gladstoneacquisition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greggumbel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.travelandleisureco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.twoharborsinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.aercap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cabalettabio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.geemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.globaleagleent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.gpmtreit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.imediabrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.parkerdrilling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rexahn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tiltholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.adgerobiopharm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aethlonmedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.algernonpharmaceuticals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.auriniapharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.calwatergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.capstoneturbine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cerecor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.codexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cohbar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cymabay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.evi-ind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gladstonecapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gladstonecommercial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gladstoneinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gladstoneland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gnusbrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gulfportenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.heliostechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.huntsman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.interpacediagnostics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.interpacedx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.libertybroadband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.libertymedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.libertytripadvisorholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lmfunding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mainstcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.midwestemissions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nationalstorageaffiliates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.oneworldpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.owlrockcapitalcorporation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pharmacytebiotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pieris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.promisneurosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.qurateretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.redwoodtrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.relmada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rigel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.riotblockchain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sm-energy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irisife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itkg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joinladenburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcsa-cannabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nclhltdinvestor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nclhltdmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proxyvote.equitystock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reporting.vfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.gceholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terratechcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venturefoundryvfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vfcfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akcoatings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cancergenetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capstonefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gladstoneacquisition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greggumbel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.irisife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itkg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joinladenburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kcsa-cannabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nclhltdinvestor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nclhltdmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terratechcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.venturefoundryvfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vfcfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vfcglobalidentity.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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