canterburycommunity.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:68:7c:79:61:c5:40:c7:8e:eb:f5:9e:77:10:e1:30:d3:f4 was issued on by Let's Encrypt.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=canterburycommunity.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:68:7c:79:61:c5:40:c7:8e:eb:f5:9e:77:10:e1:30:d3:f4
Serial Number (int): 296891678477477280283763281109759523083252
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b7:94:2e:91:ba:23:73:a6:d3:8f:7d:22:e8:17:15:3d:52:bd:d0:f3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8b:1e:5d:8b:20:b8:c0:fb:20:38:41:dd:58:d1:55:17:86:e6:96:9c
Fingerprint (sha256): 04:cf:94:2a:f6:99:eb:4e:df:de:9f:0e:2c:2d:5d:5e:1b:19:d4:db:41:cb:e6:91:fc:da:51:f0:f1:d1:b7:6a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate canterburycommunity.org

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for canterburycommunity.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

canisiusconnect.com
canterburycommunity.org
cardinalsconnect.com
careerdesignlabs.org
carreirasuvv.com
carrollalumni.com
carrollconnect.com
cbumusicconnect.com
cdl-family.org
cdl.sps.columbia.edu
cecconnect.com
centralalumni.com
centrumconnect.com
chadwickconnect.org
chahtascholars.com
champlainconnect.org
chargerconnect.org
churchillconnect.com
cityuconnect.com
cleoconnection.com
clippersconnect.org
cluconnect.com
codalumniconnect.com
cokescholarsconnect.org
collegecrusadenetwork.com
coloradoacademyconnect.org
columbusacademyalumni.org
communikeynetwork.com
connect.cbu.edu
connect.collegetrack.org
connect.harvardae.org
connect.psichi.org
connect.ruw.edu.bh
connect.woodstockacademy.org
connect2bristol.org
connectbumc.com
connectddd.org
connectgettysburg.com
connectlatinschool.org
connects.emory.edu
connectstc.com
cookeconnect.com
cooperalumnione.com
coppeadconnect.com
corviasconnects.com
cpl-alumni.org
crusadersconnect.org
csun.matadormentoring.com
cualumni.network
www.canisiusconnect.com
www.canterburycommunity.org
www.cardinalsconnect.com
www.careerdesignlabs.org
www.carreirasuvv.com
www.carrollalumni.com
www.carrollconnect.com
www.cbumusicconnect.com
www.cdl-family.org
www.cdl.sps.columbia.edu
www.cecconnect.com
www.centralalumni.com
www.centrumconnect.com
www.chadwickconnect.org
www.chahtascholars.com
www.champlainconnect.org
www.chargerconnect.org
www.churchillconnect.com
www.cityuconnect.com
www.cleoconnection.com
www.clippersconnect.org
www.cluconnect.com
www.codalumniconnect.com
www.cokescholarsconnect.org
www.collegecrusadenetwork.com
www.coloradoacademyconnect.org
www.columbusacademyalumni.org
www.communikeynetwork.com
www.connect.cbu.edu
www.connect.collegetrack.org
www.connect.harvardae.org
www.connect.psichi.org
www.connect.ruw.edu.bh
www.connect2bristol.org
www.connectbumc.com
www.connectddd.org
www.connectgettysburg.com
www.connectlatinschool.org
www.connectstc.com
www.cookeconnect.com
www.cooperalumnione.com
www.coppeadconnect.com
www.corviasconnects.com
www.cpl-alumni.org
www.crusadersconnect.org
www.cualumni.network

Other certificates including the domain name canterburycommunity.org

(limited to 100 certificates)
canterburycommunity.org
canterburycommunity.org
canterburycommunity.org
cardinalsconnect.com
canterburycommunity.org
canterburycommunity.org
canterburycommunity.org
canterburycommunity.org
canterburycommunity.org
cardinalsconnect.com

Certificate

The complete raw certificate details for canterburycommunity.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINyjCCDLKgAwIBAgISA2h8eWHFQMeO6/WedxDhMNP0MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMTcxNzU3MjRaFw0y
MDA2MTUxNzU3MjRaMCIxIDAeBgNVBAMTF2NhbnRlcmJ1cnljb21tdW5pdHkub3Jn
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlJNUd5oMLTAce0QxhrM
TVgzdaHd0Eif/qAO9GuCwYaCM4ewHw30bzz7HF3h/Bq9uBE5uxtLZM/jIXuRxYwD
N8dvLeiRz/6Zd8pmLmBi06YqxpCOhyFym9Jn6qDey09m95KgWw2OmwQh55Vs1pE9
DeCY5XY1+tUSyaS02LtQkuXxaFJDdgH8Xn2WCsC6A54y7ztg8rJYG4vjs40kzhQS
YFdRIZaOuljUySaBFBZkcmMdTgtnbzvZqzNpZRSdkaIqFnz3AsMVS8ApFxKbwPFK
N0TfTG++frVqCyLcwtf9ydjMPxDUsCvuR79iza08i8h4SuqwfYCl6nNKNzcze4hz
zQIDAQABo4IK0DCCCswwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
BwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBS3lC6RuiNzptOP
fSLoFxU9Ur3Q8zAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggr
BgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRz
ZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRz
ZW5jcnlwdC5vcmcvMIIIggYDVR0RBIIIeTCCCHWCE2NhbmlzaXVzY29ubmVjdC5j
b22CF2NhbnRlcmJ1cnljb21tdW5pdHkub3JnghRjYXJkaW5hbHNjb25uZWN0LmNv
bYIUY2FyZWVyZGVzaWdubGFicy5vcmeCEGNhcnJlaXJhc3V2di5jb22CEWNhcnJv
bGxhbHVtbmkuY29tghJjYXJyb2xsY29ubmVjdC5jb22CE2NidW11c2ljY29ubmVj
dC5jb22CDmNkbC1mYW1pbHkub3JnghRjZGwuc3BzLmNvbHVtYmlhLmVkdYIOY2Vj
Y29ubmVjdC5jb22CEWNlbnRyYWxhbHVtbmkuY29tghJjZW50cnVtY29ubmVjdC5j
b22CE2NoYWR3aWNrY29ubmVjdC5vcmeCEmNoYWh0YXNjaG9sYXJzLmNvbYIUY2hh
bXBsYWluY29ubmVjdC5vcmeCEmNoYXJnZXJjb25uZWN0Lm9yZ4IUY2h1cmNoaWxs
Y29ubmVjdC5jb22CEGNpdHl1Y29ubmVjdC5jb22CEmNsZW9jb25uZWN0aW9uLmNv
bYITY2xpcHBlcnNjb25uZWN0Lm9yZ4IOY2x1Y29ubmVjdC5jb22CFGNvZGFsdW1u
aWNvbm5lY3QuY29tghdjb2tlc2Nob2xhcnNjb25uZWN0Lm9yZ4IZY29sbGVnZWNy
dXNhZGVuZXR3b3JrLmNvbYIaY29sb3JhZG9hY2FkZW15Y29ubmVjdC5vcmeCGWNv
bHVtYnVzYWNhZGVteWFsdW1uaS5vcmeCFWNvbW11bmlrZXluZXR3b3JrLmNvbYIP
Y29ubmVjdC5jYnUuZWR1ghhjb25uZWN0LmNvbGxlZ2V0cmFjay5vcmeCFWNvbm5l
Y3QuaGFydmFyZGFlLm9yZ4ISY29ubmVjdC5wc2ljaGkub3JnghJjb25uZWN0LnJ1
dy5lZHUuYmiCHGNvbm5lY3Qud29vZHN0b2NrYWNhZGVteS5vcmeCE2Nvbm5lY3Qy
YnJpc3RvbC5vcmeCD2Nvbm5lY3RidW1jLmNvbYIOY29ubmVjdGRkZC5vcmeCFWNv
bm5lY3RnZXR0eXNidXJnLmNvbYIWY29ubmVjdGxhdGluc2Nob29sLm9yZ4ISY29u
bmVjdHMuZW1vcnkuZWR1gg5jb25uZWN0c3RjLmNvbYIQY29va2Vjb25uZWN0LmNv
bYITY29vcGVyYWx1bW5pb25lLmNvbYISY29wcGVhZGNvbm5lY3QuY29tghNjb3J2
aWFzY29ubmVjdHMuY29tgg5jcGwtYWx1bW5pLm9yZ4IUY3J1c2FkZXJzY29ubmVj
dC5vcmeCGWNzdW4ubWF0YWRvcm1lbnRvcmluZy5jb22CEGN1YWx1bW5pLm5ldHdv
cmuCF3d3dy5jYW5pc2l1c2Nvbm5lY3QuY29tght3d3cuY2FudGVyYnVyeWNvbW11
bml0eS5vcmeCGHd3dy5jYXJkaW5hbHNjb25uZWN0LmNvbYIYd3d3LmNhcmVlcmRl
c2lnbmxhYnMub3JnghR3d3cuY2FycmVpcmFzdXZ2LmNvbYIVd3d3LmNhcnJvbGxh
bHVtbmkuY29tghZ3d3cuY2Fycm9sbGNvbm5lY3QuY29tghd3d3cuY2J1bXVzaWNj
b25uZWN0LmNvbYISd3d3LmNkbC1mYW1pbHkub3Jnghh3d3cuY2RsLnNwcy5jb2x1
bWJpYS5lZHWCEnd3dy5jZWNjb25uZWN0LmNvbYIVd3d3LmNlbnRyYWxhbHVtbmku
Y29tghZ3d3cuY2VudHJ1bWNvbm5lY3QuY29tghd3d3cuY2hhZHdpY2tjb25uZWN0
Lm9yZ4IWd3d3LmNoYWh0YXNjaG9sYXJzLmNvbYIYd3d3LmNoYW1wbGFpbmNvbm5l
Y3Qub3JnghZ3d3cuY2hhcmdlcmNvbm5lY3Qub3Jnghh3d3cuY2h1cmNoaWxsY29u
bmVjdC5jb22CFHd3dy5jaXR5dWNvbm5lY3QuY29tghZ3d3cuY2xlb2Nvbm5lY3Rp
b24uY29tghd3d3cuY2xpcHBlcnNjb25uZWN0Lm9yZ4ISd3d3LmNsdWNvbm5lY3Qu
Y29tghh3d3cuY29kYWx1bW5pY29ubmVjdC5jb22CG3d3dy5jb2tlc2Nob2xhcnNj
b25uZWN0Lm9yZ4Idd3d3LmNvbGxlZ2VjcnVzYWRlbmV0d29yay5jb22CHnd3dy5j
b2xvcmFkb2FjYWRlbXljb25uZWN0Lm9yZ4Idd3d3LmNvbHVtYnVzYWNhZGVteWFs
dW1uaS5vcmeCGXd3dy5jb21tdW5pa2V5bmV0d29yay5jb22CE3d3dy5jb25uZWN0
LmNidS5lZHWCHHd3dy5jb25uZWN0LmNvbGxlZ2V0cmFjay5vcmeCGXd3dy5jb25u
ZWN0LmhhcnZhcmRhZS5vcmeCFnd3dy5jb25uZWN0LnBzaWNoaS5vcmeCFnd3dy5j
b25uZWN0LnJ1dy5lZHUuYmiCF3d3dy5jb25uZWN0MmJyaXN0b2wub3JnghN3d3cu
Y29ubmVjdGJ1bWMuY29tghJ3d3cuY29ubmVjdGRkZC5vcmeCGXd3dy5jb25uZWN0
Z2V0dHlzYnVyZy5jb22CGnd3dy5jb25uZWN0bGF0aW5zY2hvb2wub3JnghJ3d3cu
Y29ubmVjdHN0Yy5jb22CFHd3dy5jb29rZWNvbm5lY3QuY29tghd3d3cuY29vcGVy
YWx1bW5pb25lLmNvbYIWd3d3LmNvcHBlYWRjb25uZWN0LmNvbYIXd3d3LmNvcnZp
YXNjb25uZWN0cy5jb22CEnd3dy5jcGwtYWx1bW5pLm9yZ4IYd3d3LmNydXNhZGVy
c2Nvbm5lY3Qub3JnghR3d3cuY3VhbHVtbmkubmV0d29yazBMBgNVHSAERTBDMAgG
BmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz
LmxldHNlbmNyeXB0Lm9yZzCCAQYGCisGAQQB1nkCBAIEgfcEgfQA8gB3AG9Tdqwx
8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABcOnbi0wAAAQDAEgwRgIhAN2S
HgQljbePyPtBgzH0nTYtvPxlde0HLXTBCohsf7QqAiEA3VWzaW7LVN88ni2quai6
D8uTxDeykJioA6H4YPSyZYQAdwAHt1wb5X1o//Gwxh0jFce65ld8V5S3au68YToa
adOiHAAAAXDp24tPAAAEAwBIMEYCIQDXzJGEIJ/B26cFdza818BIQDkUuJWjDP+F
d8kzSO5TGgIhAKbj9RcNonRTEhq7BmeC86NnSZxyvEhjHIpzxMIlV71cMA0GCSqG
SIb3DQEBCwUAA4IBAQBptaYtCtnZpEVrcuHehalV2Pu+vLpy1F8WR5T0Gc4vDFqh
uFHBfGCBnJ0kEo7K5FVvpIRkg0691nwTkCTbAmNdXg7SQxJmX9/ZIKW59vt7/Y2H
XoiEWId0gZXNPtPsLvhkRMkvCzZ7yvlHfskdd+IiWXe9qpA4420jZ9/4TqSZvcRA
CV3rHPVRFuJhD3og5PLFOrWHUa4q9dSmknYn0sKqOg9S4jpplmpuZw7Uw9qcjFHO
ipuBXU0Y1bJo6/EopsWYtePJROncPWNLND5nHTyNMaz76EGin8wYmpn1BVi0fucY
9Sawcm9aFwtsWPoibOOcEpKtGk5H4fKWwgoIi5ad
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlJNUd5oMLTAce0QxhrM
TVgzdaHd0Eif/qAO9GuCwYaCM4ewHw30bzz7HF3h/Bq9uBE5uxtLZM/jIXuRxYwD
N8dvLeiRz/6Zd8pmLmBi06YqxpCOhyFym9Jn6qDey09m95KgWw2OmwQh55Vs1pE9
DeCY5XY1+tUSyaS02LtQkuXxaFJDdgH8Xn2WCsC6A54y7ztg8rJYG4vjs40kzhQS
YFdRIZaOuljUySaBFBZkcmMdTgtnbzvZqzNpZRSdkaIqFnz3AsMVS8ApFxKbwPFK
N0TfTG++frVqCyLcwtf9ydjMPxDUsCvuR79iza08i8h4SuqwfYCl6nNKNzcze4hz
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296891678477477280283763281109759523083252
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-17 17:57:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-15 17:57:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'canterburycommunity.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23015956147657029481394486661752308302936666663423864279014196222081744433835228203457215809930671544210004928746982375613208828673124239154554464600785909238352741610607932153878202778261807099308570179649260420877959969353208805211628334597293588711267126328228458753006469458370058588103983107949804864579513198285588960753680147221525005029206504112755380535454962757309316559253278839335100832810088739460610198143861541382163430037665466186991177206018103230868709518305424889407675334696484334247423811311863217406004695141902422203576709274545821930822208460160281454584384794716515611778065284842104065389517
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b7942e91ba2373a6d38f7d22e817153d52bdd0f3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canisiusconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburycommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardinalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careerdesignlabs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carreirasuvv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrollalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrollconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbumusicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdl-family.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdl.sps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cecconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centrumconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chadwickconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chahtascholars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'champlainconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chargerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchillconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleoconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clippersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cluconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cokescholarsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegecrusadenetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradoacademyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbusacademyalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communikeynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.cbu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.collegetrack.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.harvardae.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.psichi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.ruw.edu.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.woodstockacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect2bristol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectbumc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectddd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectgettysburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectlatinschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connects.emory.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectstc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cooperalumnione.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coppeadconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corviasconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpl-alumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crusadersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csun.matadormentoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cualumni.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canisiusconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburycommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardinalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.careerdesignlabs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carreirasuvv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrollalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrollconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbumusicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdl-family.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdl.sps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cecconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centrumconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chadwickconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chahtascholars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.champlainconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chargerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.churchillconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cleoconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clippersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cluconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cokescholarsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegecrusadenetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coloradoacademyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbusacademyalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communikeynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.cbu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.collegetrack.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.harvardae.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.psichi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.ruw.edu.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect2bristol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectbumc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectddd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectgettysburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectlatinschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectstc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cookeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cooperalumnione.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coppeadconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corviasconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpl-alumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crusadersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cualumni.network'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170e9db8b4c0000040300483046022100dd921e04258db78fc8fb418331f49d362dbcfc6575ed072d74c10a886c7fb42a022100dd55b3696ecb54df3c9e2daab9a8ba0fcb93c437b29098a803a1f860f4b2658400770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170e9db8b4f0000040300483046022100d7cc9184209fc1dba7057736bcd7c048403914b895a30cff8577c93348ee531a022100a6e3f5170da27453121abb066782f3a367499c72bc48631c8a73c4c22557bd5c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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