aatlconnected.com

Issued by R3

About this certificate

This digital certificate with serial number 04:8d:a2:dd:9e:b0:1f:fd:38:e0:92:06:90:a3:49:9d:04:52 was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aatlconnected.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8d:a2:dd:9e:b0:1f:fd:38:e0:92:06:90:a3:49:9d:04:52
Serial Number (int): 396645443114390976644754130209726705501266
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 38:3d:78:54:e2:4b:36:54:a0:52:e0:a8:ac:f5:de:cd:83:81:10:19
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1a:74:b1:09:c5:0f:b8:10:15:ba:3d:ce:37:70:23:01:c2:5e:e4:cb
Fingerprint (sha256): e7:e2:e1:fc:a3:03:1e:31:ca:94:29:f1:83:0b:35:6f:e9:1b:86:6f:ac:70:b8:e3:12:d8:ce:7e:25:4f:f3:4b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate aatlconnected.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aatlconnected.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aatlconnected.com
abingtonfriendsconnect.com
acacia.network
access.fortefoundation.org
acfcampusconnect.org
aclubtemp.com
acomconnect.com
acsconnects.org
adenalumni.net
aexrochester.org
africanhumanities.org
ahlefconnect.com
ahscommunity.org
allhandsandheartsalumni.org
alphaphinetwork.com
alumni.bcm.edu
alumni.brandman.edu
alumni.cayetano.edu.pe
alumni.cdl.ch
alumni.estacio.br
alumni.facamp.com.br
alumni.fia.com.br
alumni.fundacao.bradesco
alumni.harding.edu
alumni.harpercollege.edu
alumni.maua.br
alumni.nonprofitpractice.org
alumni.pcci.edu
alumni.puc-campinas.edu.br
alumni.siebelinstitute.com
alumni.thrivescholars.org
alumni.udsm.ac.tz
alumni.unach.cl
alumni.unicamp.br
alumni.univali.br
alumniatbhs.com
alumnigsb.com
alumniknightnetwork.com
alumnisabana.com
alumniucsh.com
alumniupaep.mx
andoveralumni.org
andrewsnetwork.org
apuconnect.com
aqsaintsnetwork.com
arrowsconnect.org
asfmalumni.com
athenianlink.com
avonoldfarmsalumni.com
www.aatlconnected.com
www.abingtonfriendsconnect.com
www.acacia.network
www.acfcampusconnect.org
www.aclubtemp.com
www.acomconnect.com
www.acsconnects.org
www.adenalumni.net
www.aexrochester.org
www.africanhumanities.org
www.ahlefconnect.com
www.ahscommunity.org
www.allhandsandheartsalumni.org
www.alphaphinetwork.com
www.alumni.brandman.edu
www.alumni.cayetano.edu.pe
www.alumni.estacio.br
www.alumni.facamp.com.br
www.alumni.fia.com.br
www.alumni.fundacao.bradesco
www.alumni.harding.edu
www.alumni.harpercollege.edu
www.alumni.maua.br
www.alumni.nonprofitpractice.org
www.alumni.pcci.edu
www.alumni.puc-campinas.edu.br
www.alumni.thrivescholars.org
www.alumni.udsm.ac.tz
www.alumni.unach.cl
www.alumni.unicamp.br
www.alumni.univali.br
www.alumniatbhs.com
www.alumnigsb.com
www.alumniknightnetwork.com
www.alumnisabana.com
www.alumniucsh.com
www.alumniupaep.mx
www.andoveralumni.org
www.andrewsnetwork.org
www.apuconnect.com
www.aqsaintsnetwork.com
www.arrowsconnect.org
www.asfmalumni.com
www.athenianlink.com
www.avonoldfarmsalumni.com

Other certificates including the domain name aatlconnected.com

(limited to 100 certificates)
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
alumni.pcci.edu
alumni.pcci.edu
aatlconnected.com
alumni.facamp.com.br
aatlconnected.com
alumni.pcci.edu
alumni.nonprofitpractice.org
alumni.thrivescholars.org
aatlconnected.com
alumni.facamp.com.br
aatlconnected.com
aatlconnected.com
alumni.pcci.edu
aatlconnected.com
alumni.pcci.edu
aatlconnected.com
aatlconnected.com
aatlconnected.com
alumni.facamp.com.br
aatlconnected.com
aatlconnected.com
aatlconnected.com
aatlconnected.com
alumni.pcci.edu
alumni.pcci.edu
aatlconnected.com
alumni.pcci.edu
aatlconnected.com
aatlconnected.com
aatlconnected.com
alumni.nonprofitpractice.org
alumni.facamp.com.br
aatlconnected.com
alumni.pcci.edu
aatlconnected.com
alumni.pcci.edu
aatlconnected.com
alumni.pcci.edu
aatlconnected.com
aatlconnected.com
aatlconnected.com
alumni.pcci.edu
aatlconnected.com
alumni.pcci.edu
aatlconnected.com
alumni.pcci.edu
alumni.facamp.com.br
alumni.thrivescholars.org
aatlconnected.com
aatlconnected.com
alumni.facamp.com.br
aatlconnected.com

Certificate

The complete raw certificate details for aatlconnected.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcG0BqnwlhXJuhm1o7uc
cUc45Cc2qSDgliQbF/Ide4OHC7cqYY6rNQYw2fQmqx1GqR+ZshEnXDnsshrZUj8K
5Hj7bbs1LF+whX3FKi10eou3QhS9BZwaoHLYqOK9Q6xcaErM4yE7a2dH7OzIU4li
wp3ISd3rgvbGPk8cX7r6MIYy04HAgPNhSvZZCaQSnc64TzIoiNou4cLwcoKZhW/Q
xXltW0yDSAlpno+e7sk385nL+qEA4nm7h61OB2Tt44k58AqxEJU9/TmANNXHoyst
AX6OgApO4GvhRKXArdbYIO4A1mcmOjCFv8JZb0yQKeMHv7+PZ+FtPLH/r0oxv7cU
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 396645443114390976644754130209726705501266
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-01 04:14:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-29 04:14:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aatlconnected.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16380259961726186175544204601495520798944309338296932108118140401574121068481650546180060600256173788722258183050027272192483839229077710126576025551548447298751787033648203489808542599374580315773590521761864376405333654209694199485037854185310443124270389825713218273205497692186705285709013720426306189138592148930642183584149472324633186745145483124671281891988816971944114795112145386392592879192634837700515101647586752009688065570869522742778993540948876579941552090562434255337344165988576485350845209443060456012424606614445450284664478032850056689016725322281656010296941187067645787802904910645766598890729
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							383d7854e24b3654a052e0a8acf5decd83811019
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2083 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aatlconnected.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abingtonfriendsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acacia.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access.fortefoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acfcampusconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aclubtemp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acomconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acsconnects.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adenalumni.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aexrochester.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africanhumanities.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahlefconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahscommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allhandsandheartsalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alphaphinetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.bcm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.brandman.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.cayetano.edu.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.cdl.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.estacio.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.facamp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.fia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.fundacao.bradesco'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.harding.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.harpercollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.maua.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.nonprofitpractice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.pcci.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.puc-campinas.edu.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.siebelinstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.thrivescholars.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.udsm.ac.tz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.unach.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.unicamp.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.univali.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniatbhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnigsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniknightnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnisabana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniucsh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniupaep.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andoveralumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrewsnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqsaintsnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arrowsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asfmalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athenianlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avonoldfarmsalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aatlconnected.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abingtonfriendsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acacia.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acfcampusconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aclubtemp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acomconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acsconnects.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adenalumni.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aexrochester.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.africanhumanities.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahlefconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahscommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allhandsandheartsalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alphaphinetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.brandman.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.cayetano.edu.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.estacio.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.facamp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.fia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.fundacao.bradesco'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.harding.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.harpercollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.maua.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.nonprofitpractice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.pcci.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.puc-campinas.edu.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.thrivescholars.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.udsm.ac.tz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.unach.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.unicamp.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.univali.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniatbhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnigsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniknightnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnisabana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniucsh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniupaep.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andoveralumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andrewsnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aqsaintsnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arrowsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asfmalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athenianlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avonoldfarmsalumni.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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