us.prod.campusgroups.com

Issued by R3

About this certificate

This digital certificate with serial number 03:f0:16:97:3b:5a:cd:09:f4:9b:b6:4e:16:91:bb:f3:07:6e was issued on by Let's Encrypt.

With 66 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=us.prod.campusgroups.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f0:16:97:3b:5a:cd:09:f4:9b:b6:4e:16:91:bb:f3:07:6e
Serial Number (int): 343034654112895035783465297432148849133422
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d1:ba:8d:b9:cb:a3:2d:66:2c:6a:25:0b:0f:5c:48:e9:b7:14:b5:e6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2e:68:f6:e8:0b:c7:42:b6:3d:30:b1:81:4c:0c:f3:89:7a:d6:56:04
Fingerprint (sha256): 00:a3:0a:86:3a:a7:72:47:17:be:4c:ec:45:28:84:8c:4e:df:fa:d5:29:25:c8:94:04:cd:8c:15:ea:0d:d4:23

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate us.prod.campusgroups.com

66

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for us.prod.campusgroups.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1850.udayton.edu
activities.upike.edu
alumnigroups.som.yale.edu
archway.ramapo.edu
belong.babson.edu
bengaged.binghamton.edu
bullsconnect.usf.edu
campusconnect.kaust.edu.sa
campusgroups.erau.edu
campusgroups.rit.edu
campusgroups.rivier.edu
campusgroups.uci.edu
cardinalengage.stanford.edu
ccc.rochester.edu
clubs.marshall.usc.edu
clubs.washcoll.edu
community.case.edu
connect.altoona.psu.edu
connect.crown.edu
connect.lassonde.yorku.ca
connect.law.columbia.edu
connect.ung.edu
connect.uwstout.edu
crimsonconnect.du.edu
dukegroups.com
eagleconnect.lasierra.edu
eaglelife.erau.edu
embark.mtholyoke.edu
engage.abington.psu.edu
engage.bridgew.edu
engage.gettysburg.edu
engage.mmm.edu
giesgroups.illinois.edu
group.aaaafoundation.org
groups.ccny.cuny.edu
groups.chicagobooth.edu
groups.gsb.columbia.edu
groups.som.yale.edu
groups.ucsf.edu
groups.wharton.upenn.edu
ibelong.byui.edu
involvement.ubalt.edu
lionconnect.sl.psu.edu
luhub.lamar.edu
mason360.gmu.edu
my.princeton.edu
myfletcher.tufts.edu
myhc.holycross.edu
mylim.limcollege.edu
myraft.csumb.edu
oneschulich.yorku.ca
ourcampus.lafayette.edu
questromcommon.bu.edu
ramconnect.wcupa.edu
saintsconnect.flagler.edu
shiplink.ship.edu
shoreline.ucsb.edu
sloangroups.mit.edu
students.grainger.illinois.edu
thehub.nmu.edu
ucore.uco.edu
ugroups.ucollege.edu
us.prod.campusgroups.com
virtualfairs.ucsd.edu
warriorlife.csustan.edu
yaleconnect.yale.edu

Other certificates including the domain name campusgroups.com

(limited to 100 certificates)
us.prod.campusgroups.com
us.prod.campusgroups.com
blog.campusgroups.com
ssl378409.cloudflaressl.com
ssl378409.cloudflaressl.com
eu.prod.campusgroups.com
eu.prod.campusgroups.com
us.prod.campusgroups.com
ssl275802.cloudflaressl.com
au.prod.campusgroups.com
eu.prod.campusgroups.com
us.prod.campusgroups.com
blog.campusgroups.com
us.prod.campusgroups.com
ssl378409.cloudflaressl.com
blog.campusgroups.com
ssl378408.cloudflaressl.com
ssl378410.cloudflaressl.com
eu.prod.campusgroups.com
us.prod.campusgroups.com
ssl378410.cloudflaressl.com
ssl378410.cloudflaressl.com
eu.prod.campusgroups.com
ssl378408.cloudflaressl.com
ssl275802.cloudflaressl.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
ssl378409.cloudflaressl.com
us.prod.campusgroups.com
*.campusgroups.com
ssl378408.cloudflaressl.com
us.prod.campusgroups.com
ssl378408.cloudflaressl.com
eu.prod.campusgroups.com
ssl275802.cloudflaressl.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
us.prod.campusgroups.com
us.prod.campusgroups.com
ssl378410.cloudflaressl.com
ssl378409.cloudflaressl.com
ssl378410.cloudflaressl.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
ssl93421.cloudflare.com
ssl378410.cloudflaressl.com
ssl275802.cloudflaressl.com
ssl378408.cloudflaressl.com
ssl378409.cloudflaressl.com
us.prod.campusgroups.com
us.prod.campusgroups.com
ssl378410.cloudflaressl.com
*.campusgroups.com
us.prod.campusgroups.com
us.prod.campusgroups.com
us.prod.campusgroups.com
us.prod.campusgroups.com
*.campusgroups.com
ssl378410.cloudflaressl.com
ssl378408.cloudflaressl.com
blog.campusgroups.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
blog.campusgroups.com
*.campusgroups.com
ssl378410.cloudflaressl.com
blog.campusgroups.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
ssl378410.cloudflaressl.com
ssl378409.cloudflaressl.com
us.prod.campusgroups.com
blog.campusgroups.com
ssl378408.cloudflaressl.com
us.prod.campusgroups.com
ssl275802.cloudflaressl.com
ssl378408.cloudflaressl.com
*.campusgroups.com
eu.prod.campusgroups.com
ssl378410.cloudflaressl.com
ssl378410.cloudflaressl.com
ssl378408.cloudflaressl.com
sni.cloudflaressl.com
eu.prod.campusgroups.com
ssl378408.cloudflaressl.com
eu.prod.campusgroups.com
ssl378410.cloudflaressl.com
*.campusgroups.com
eu.prod.campusgroups.com
ssl378408.cloudflaressl.com
ssl378409.cloudflaressl.com
ssl378410.cloudflaressl.com
ssl378409.cloudflaressl.com
*.campusgroups.com
ssl378409.cloudflaressl.com
*.campusgroups.com
ssl378409.cloudflaressl.com
ssl378408.cloudflaressl.com
ssl378410.cloudflaressl.com
ca.prod.campusgroups.com

Certificate

The complete raw certificate details for us.prod.campusgroups.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzFG2Bs3qafjPTbkBEHQ
B0CjT+EVw3kAMq7FRihQdQpr0EQX4OxIcZ+4cuxF1FwmpRZefn9qcfJ+5w38S3ZN
JcX7ZkaPNGcPipgCVXpzfX/+fd8QrJc6hYaxMk3ZDezSwcIHBkuMcU3vvGODDBZH
XF9oDAjtFQbIymLYe8Y31rp3TmxWoLUxOiPxfbKkQI0hY5upO8K5sgdKPI7aZmtv
lz6JuYocHC75DFiPMPqzlYbESPVPq+kjqJunzx06McmSS5anzI2v18q3+SdT/HoZ
VBLCA6yfEgRB/sH4QZPQeyTRlZtmPbyjdoEnbvkQdGH+Gea8LDWov+lMJOzsPbJp
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343034654112895035783465297432148849133422
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-23 09:16:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-21 09:16:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'us.prod.campusgroups.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24135815512201875282615403890119695278728606381599050830063386900717110613805783018174900376551873630606184048155652053341044983921564810005088831321934701262351292521609179550758673166834260147169458510504238701576733920328663179048734576935114036198614199397680235785749800535943688217621088951091751714102786059397311040437370288173301088128258677317298810838197999875515969077090351571534647563118388017764419623419456429373554162907359889605970112035049224731999674343823043064658464546431521708905317359897794021933899428614821977388814158564433558863953541749318981287501823214490452529206110088055777511237929
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d1ba8db9cba32d662c6a250b0f5c48e9b714b5e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1463 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1850.udayton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activities.upike.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnigroups.som.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archway.ramapo.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belong.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bengaged.binghamton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bullsconnect.usf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusconnect.kaust.edu.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusgroups.erau.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusgroups.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusgroups.rivier.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusgroups.uci.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardinalengage.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccc.rochester.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubs.marshall.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubs.washcoll.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.case.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.altoona.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.crown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.lassonde.yorku.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.law.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.ung.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.uwstout.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crimsonconnect.du.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dukegroups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eagleconnect.lasierra.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eaglelife.erau.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embark.mtholyoke.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.abington.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.bridgew.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.gettysburg.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.mmm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giesgroups.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'group.aaaafoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groups.ccny.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groups.chicagobooth.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groups.gsb.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groups.som.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groups.ucsf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groups.wharton.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibelong.byui.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'involvement.ubalt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lionconnect.sl.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luhub.lamar.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mason360.gmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfletcher.tufts.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhc.holycross.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylim.limcollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myraft.csumb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneschulich.yorku.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourcampus.lafayette.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'questromcommon.bu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramconnect.wcupa.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintsconnect.flagler.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shiplink.ship.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoreline.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sloangroups.mit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'students.grainger.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehub.nmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucore.uco.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ugroups.ucollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.prod.campusgroups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualfairs.ucsd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warriorlife.csustan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yaleconnect.yale.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000017ad2de3ab90000040300473045022100d74375a9d1247f121d0c04b2f56868bf19e9c6d5228bb353913c867a8567442d02205fc92929e6f9768bebe50df375cbdc3fe69277c41ec8559c41d5aa90a092074b0076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000017ad2de3aea000004030047304502204ff61e145991fbeaeea5786d6076243a2c2e19c73f8d67ab27000f302b73dc0b022100866d43818f53d20ca32d40435916a9f508b1ab15bf79967a5d5687a26eaa40c2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00734c5ee69d935d5d0f7928b032f2a392ff200b73796621fd384a82324a3e6885dd8a7928a8f3df9191ec48fd23e3b6b80b4e0abfb1231fa88146b36cef69f281c374164b14658450ed5679f4943218de233738ff1a62345a96328953523d03092512dc1f9f73637eca6d2eb1acf4ca3e5a0219f9467f9aa86a541096f6fd0bfdd0cd3ad39c6b0138a49d11558655c62d3b1ded430d2158296a0850c701cd235f1c5b220718438d3bb94523b7af0520d3e70386463b96f530207fa97d478346c37ff98a3fc471b7d83d509c7d021d781a64905ad1f69e3d0db6281e62e5df9d6083b5d24851d775e4306a51652d2f9ae8dba72f65133e7cc926023eb42cce9e48