aaaconnect.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:52:82:91:de:10:da:f0:e3:bb:54:2f:8d:56:9a:dd:c0:f4 was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aaaconnect.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:52:82:91:de:10:da:f0:e3:bb:54:2f:8d:56:9a:dd:c0:f4
Serial Number (int): 376525854841084808764645570888929589969140
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 55:d7:f6:d3:fc:d9:f3:46:4f:16:de:ab:fc:d6:f8:5d:7f:b4:b9:bf
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6b:7c:0c:81:46:da:e0:0d:14:64:62:8f:79:50:a3:d6:77:5f:e5:ab
Fingerprint (sha256): 74:42:7a:36:3d:8a:7c:f2:d4:2c:c7:3a:be:d1:f2:ed:13:e2:04:4a:19:11:64:26:9e:41:92:83:d1:f5:0e:20

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aaaconnect.co.uk

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aaaconnect.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aaaconnect.co.uk
abertayalumni.com
academicalsconnect.com
acgconnect.org
acglobalconnect.com
ackworthschoolconnect.com
aeseconnect.com
aiglonlife.ch
aiglonlife2.ch
aiglononline.ch
aimscommunity.org
aisgalumni.org
aislagosalumni.org
albanetworker.com
alderleyalumnae.co.uk
aluconnect.org
alumne.fak.dk
alumnet.sdu.dk
alumni-haut-lac.ch
alumni.24orebs.com
alumni.adek.gov.ae
alumni.ashoka.edu.in
alumni.bmc.edu.sa
alumni.champittet.ch
alumni.dulwich.org
alumni.eeg.uminho.pt
alumni.galilcol.ac.il
alumni.johnsmithtrust.org
alumni.neurosciences.berlin
alumni.pharm.chula.ac.th
alumnibeausoleil.ch
alumnihotelschoolrocmondriaan.nl
alumnirapport.com
alumnisb.be
alumniuib.com
alumniul.online
alumniultest.manual.graduway.com
andrewsnetwork.co.uk
ansaalumni.no
ansanetwork.no
arel.network
ashinagaconnect.org
askalumni.gre.ac.uk
aswalumni.org
atlanticcollegeconnect.com
atlanticconnect.org
auafconnect.net
auralumni.com
aurconnect.com
autconnect.com
aveconnect.org
www.aaaconnect.co.uk
www.abertayalumni.com
www.academicalsconnect.com
www.acgconnect.org
www.acglobalconnect.com
www.ackworthschoolconnect.com
www.aeseconnect.com
www.aiglonlife.ch
www.aiglonlife2.ch
www.aiglononline.ch
www.aimscommunity.org
www.aisgalumni.org
www.aislagosalumni.org
www.albanetworker.com
www.alderleyalumnae.co.uk
www.aluconnect.org
www.alumne.fak.dk
www.alumnet.sdu.dk
www.alumni-haut-lac.ch
www.alumni.24orebs.com
www.alumni.adek.gov.ae
www.alumni.ashoka.edu.in
www.alumni.dulwich.org
www.alumni.eeg.uminho.pt
www.alumni.pharm.chula.ac.th
www.alumnibeausoleil.ch
www.alumnihotelschoolrocmondriaan.nl
www.alumnirapport.com
www.alumnisb.be
www.alumniuib.com
www.alumniul.online
www.andrewsnetwork.co.uk
www.ansaalumni.no
www.ansanetwork.no
www.arel.network
www.ashinagaconnect.org
www.askalumni.gre.ac.uk
www.aswalumni.org
www.atlanticcollegeconnect.com
www.atlanticconnect.org
www.auafconnect.net
www.auralumni.com
www.aurconnect.com
www.autconnect.com
www.aveconnect.org

Other certificates including the domain name aaaconnect.co.uk

(limited to 100 certificates)
alumni-haut-lac.ch
m.aaaconnect.co.uk
alumni.ashoka.edu.in
aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
atlanticcollegeconnect.com
alumni.johnsmithtrust.org
alumne.fak.dk
ackworthschoolconnect.com
alumne.fak.dk
m.aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
alumni.dulwich.org
aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
m.aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
alumni.eeg.uminho.pt
aaaconnect.co.uk
alumni.johnsmithtrust.org
aaaconnect.co.uk
aaaconnect.co.uk
alumni.johnsmithtrust.org
alumne.fak.dk
m.aaaconnect.co.uk
alumni.adek.gov.ae
m.aaaconnect.co.uk
m.aaaconnect.co.uk
m.aaaconnect.co.uk
atlanticconnect.org
aaaconnect.co.uk
amitgushdanalumni.com
m.aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
alumnihotelschoolrocmondriaan.nl
m.aaaconnect.co.uk
alumni.novasbe.pt
m.aaaconnect.co.uk
m.aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
atlanticconnect.org
aaaconnect.co.uk
alumni.johnsmithtrust.org
m.aaaconnect.co.uk
aaaconnect.co.uk
aaaconnect.co.uk
alumni.eeg.uminho.pt
aaaconnect.co.uk
alumni.dulwich.org
aaaconnect.co.uk
aaaconnect.co.uk
m.aaaconnect.co.uk
m.aaaconnect.co.uk
aaaconnect.co.uk

Certificate

The complete raw certificate details for aaaconnect.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskpoMjYT2b/GYhrN/jtK
ROxQaiy3OSkDZ2Lkn0upNPEOLurQzHMGDgs6G+8eE1RGf/b68bfdLSfyDzyWg5nD
SKx8EvD77SFcw3TDJ41eXGI1xnZjlDs0ahIUA6Uk1KUhD+IC4eDCtlYIdG/zv8ox
Mu5BQtJtmRlVJLRAWgYwaNn77yJDZNVjGqz7vio86kTLkFqBlEmNWGM6DlN8UM8f
lw2oXbR1EWyvofsqkVRrlHAgpU6xp7kdRjMgh1ZlA7mXUQQ5GZrzc+YVsTK5NKib
jVKB08WltBkB/Jdxmd3e036g8rkoWyvE3lc2qYB5e+xgPXIu8K7tZB5cctVD5VSd
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 376525854841084808764645570888929589969140
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-11 08:58:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-09 08:58:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aaaconnect.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22507109751137984093214614317219420306962920004004609892612930306421691448582649238415535444156321321175144197558849002742241253423004647323785167150831010051315875382591074052652313183733542347279635264927419747454303897061793105635361630507691301316151511135324330255033313816752341984178314640564604789717436616267536991526761058800902749929361607131648082985168248142175780588318096230968878736765510158234435167260693793870642456155965668504463885176877104998895065518590194157469137382995554797475594548299679634944165923767489998444451753048941868183510385984334707007833131030137091730195249099037761191845233
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							55d7f6d3fcd9f3464f16deabfcd6f85d7fb4b9bf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2050 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaaconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abertayalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academicalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acgconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acglobalconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ackworthschoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeseconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiglonlife.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiglonlife2.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiglononline.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aimscommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aisgalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aislagosalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albanetworker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alderleyalumnae.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aluconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumne.fak.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnet.sdu.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni-haut-lac.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.24orebs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.adek.gov.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.ashoka.edu.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.bmc.edu.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.champittet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.dulwich.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.eeg.uminho.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.galilcol.ac.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.johnsmithtrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.neurosciences.berlin'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.pharm.chula.ac.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnibeausoleil.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnihotelschoolrocmondriaan.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnirapport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnisb.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniuib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniul.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniultest.manual.graduway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrewsnetwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ansaalumni.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ansanetwork.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arel.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashinagaconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'askalumni.gre.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aswalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlanticcollegeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlanticconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auafconnect.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auralumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aveconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aaaconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abertayalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.academicalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acgconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acglobalconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ackworthschoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aeseconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aiglonlife.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aiglonlife2.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aiglononline.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aimscommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aisgalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aislagosalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albanetworker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alderleyalumnae.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aluconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumne.fak.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnet.sdu.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni-haut-lac.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.24orebs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.adek.gov.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.ashoka.edu.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.dulwich.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.eeg.uminho.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.pharm.chula.ac.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnibeausoleil.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnihotelschoolrocmondriaan.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnirapport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnisb.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniuib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniul.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andrewsnetwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ansaalumni.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ansanetwork.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arel.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashinagaconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.askalumni.gre.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aswalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlanticcollegeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlanticconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auafconnect.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auralumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aurconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aveconnect.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170c9081c970000040300483046022100c2c881264ddcffcf0d8d931edf7e40856fb223089f6aef635ef7c9ff3afa4f6d022100c5bcbad55cd33c1f202adcf08102c18fcf4b0db6bb71b60beca10ccfe2f46caa00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170c9081cea0000040300473045022100b150b0f3c52998a0fbcd7da513e7379a8bee5f1d91bf0b65569d0a1bdc170c8102200fb870b8ac4deff040c888eacad8f804c0d1e339ba93e70939e9293c03f879d9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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