campionalumni.org

Issued by R3

About this certificate

This digital certificate with serial number 03:67:3f:49:9d:7e:34:61:ab:81:ba:91:73:c7:05:f7:4a:29 was issued on by Let's Encrypt.

With 62 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=campionalumni.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:67:3f:49:9d:7e:34:61:ab:81:ba:91:73:c7:05:f7:4a:29
Serial Number (int): 296470065183879791965351623513087608834601
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8d:93:b9:73:2d:5b:e0:fd:9c:ec:c8:90:7b:b7:74:a3:c6:ee:0c:ff
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7d:90:69:21:8b:57:f0:29:94:26:e6:0c:cc:82:30:d0:4f:c2:a3:df
Fingerprint (sha256): 0a:ef:a1:5e:ef:28:a9:0b:17:73:9e:b8:1d:9d:0c:2d:03:eb:b9:57:9f:6a:93:f7:e3:b4:6e:5f:f5:58:dd:2f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate campionalumni.org

62

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for campionalumni.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

campionalumni.org
campusnetzwerk.ac.at
casscommunity.co.uk
caterhamconnected.co.uk
caterhamschoolsociety.co.uk
centralecommunity.com
cettalumni.com
cettconnect.es
challonersconnected.com
challonershighnetwork.com
charterhouseconnect.org.uk
cheveningconnect.com
choba.org
chsnetwork.co.uk
cisvalumni-connect.org
citizensconnect.co.uk
cityshefalumni.org
cjlmentorship360.com
clarehallconnect.uk
clubdanetwork.com
colfesnet.com
columbansconnect.org
community.alumniportal-deutschland.org
community.birthrightexcel.com
community.bpp.com
community.mancosa.co.za
connect.isbasel.ch
connect.regent.ac.za
connected.cardiff.ac.uk
csfcalumni.com
cumbrianetwork.global
www.campionalumni.org
www.campusnetzwerk.ac.at
www.casscommunity.co.uk
www.caterhamconnected.co.uk
www.caterhamschoolsociety.co.uk
www.centralecommunity.com
www.cettalumni.com
www.cettconnect.es
www.challonersconnected.com
www.challonershighnetwork.com
www.charterhouseconnect.org.uk
www.cheveningconnect.com
www.choba.org
www.chsnetwork.co.uk
www.cisvalumni-connect.org
www.citizensconnect.co.uk
www.cityshefalumni.org
www.cjlmentorship360.com
www.clarehallconnect.uk
www.clubdanetwork.com
www.colfesnet.com
www.columbansconnect.org
www.community.alumniportal-deutschland.org
www.community.birthrightexcel.com
www.community.bpp.com
www.community.mancosa.co.za
www.connect.isbasel.ch
www.connect.regent.ac.za
www.connected.cardiff.ac.uk
www.csfcalumni.com
www.cumbrianetwork.global

Other certificates including the domain name campionalumni.org

(limited to 100 certificates)
cumbrianetwork.global
campionalumni.org
campionalumni.org
campionalumni.org
community.mancosa.co.za
campionalumni.org
connected.cardiff.ac.uk
ulaw-alumni.com
campionalumni.org
ulaw-alumni.com
community.mancosa.co.za
challonershighnetwork.com
campionalumni.org
casscommunity.co.uk
ulaw-alumni.com
choba.org
campionalumni.org
campionalumni.org
cettalumni.com
campionalumni.org
ulaw-alumni.com
caterhamschoolsociety.co.uk
ulaw-alumni.com
cettalumni.com
campionalumni.org
campionalumni.org
campionalumni.org
colfesnet.com
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
ulaw-alumni.com
challonershighnetwork.com
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
choba.org
ulaw-alumni.com
campionalumni.org
campionalumni.org
ulaw-alumni.com
ulaw-alumni.com
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
charterhouseconnect.org.uk
campionalumni.org
campionalumni.org
campionalumni.org
community.mancosa.co.za
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
ulaw-alumni.com
connected.cardiff.ac.uk
campionalumni.org
caterhamschoolsociety.co.uk
challonershighnetwork.com
cettalumni.com
challonershighnetwork.com
campionalumni.org
ulaw-alumni.com
campionalumni.org
ulaw-alumni.com
campionalumni.org
ulaw-alumni.com
charterhouseconnecttest.manual.graduway.com
campionalumni.org
caterhamschoolsociety.co.uk
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
ulaw-alumni.com
campionalumni.org
community.mancosa.co.za
corpusalumni.com
community.mancosa.co.za
campionalumni.org
community.mancosa.co.za
ulaw-alumni.com
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
ulaw-alumni.com
community.mancosa.co.za
campionalumni.org
campionalumni.org
campionalumni.org
ulaw-alumni.com
cityshefalumni.org
cettalumni.com
connected.cardiff.ac.uk
campionalumni.org
campionalumni.org

Certificate

The complete raw certificate details for campionalumni.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIK+DCCCeCgAwIBAgISA2c/SZ1+NGGrgbqRc8cF90opMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTA0MjkxNDM3MjhaFw0yMTA3MjgxNDM3MjhaMBwxGjAYBgNVBAMT
EWNhbXBpb25hbHVtbmkub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkYirY51ukQnTIH8iKDJNHQh/yyoJgMV0Lt+x6vi9SDJtSgj3FW+kiduU39Cj
r76Rn3FyNsJXpRxqn3W5IDCkCGnDjVqR+5uVarLnwTiJd8pp/73nFaJfr9/4fAwK
0HE0K7EwiFDNVBngt3g5AsYmT38PnET+EOzZ3NV+VJHbEsdlmuxanvsFTT7fmuVL
zhpvdfrDPhH6Uw4HjPp0t55iXLE6hiZ0ik2CrbkxNJcgLaqEFJVH41Nkeb3bBEGA
XenupgUAm4OPTm2CZgolpczl3K5xYkJ1iKbtn0hWGFl+Y04Uln+0It3dgZyb0O8v
ICeOjGyJmIaVxKGUJfhFnNCaTQIDAQABo4IIHDCCCBgwDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G
A1UdDgQWBBSNk7lzLVvg/ZzsyJB7t3Sjxu4M/zAfBgNVHSMEGDAWgBQULrMXt1hW
y65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6
Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iu
b3JnLzCCBesGA1UdEQSCBeIwggXeghFjYW1waW9uYWx1bW5pLm9yZ4IUY2FtcHVz
bmV0endlcmsuYWMuYXSCE2Nhc3Njb21tdW5pdHkuY28udWuCF2NhdGVyaGFtY29u
bmVjdGVkLmNvLnVrghtjYXRlcmhhbXNjaG9vbHNvY2lldHkuY28udWuCFWNlbnRy
YWxlY29tbXVuaXR5LmNvbYIOY2V0dGFsdW1uaS5jb22CDmNldHRjb25uZWN0LmVz
ghdjaGFsbG9uZXJzY29ubmVjdGVkLmNvbYIZY2hhbGxvbmVyc2hpZ2huZXR3b3Jr
LmNvbYIaY2hhcnRlcmhvdXNlY29ubmVjdC5vcmcudWuCFGNoZXZlbmluZ2Nvbm5l
Y3QuY29tggljaG9iYS5vcmeCEGNoc25ldHdvcmsuY28udWuCFmNpc3ZhbHVtbmkt
Y29ubmVjdC5vcmeCFWNpdGl6ZW5zY29ubmVjdC5jby51a4ISY2l0eXNoZWZhbHVt
bmkub3JnghRjamxtZW50b3JzaGlwMzYwLmNvbYITY2xhcmVoYWxsY29ubmVjdC51
a4IRY2x1YmRhbmV0d29yay5jb22CDWNvbGZlc25ldC5jb22CFGNvbHVtYmFuc2Nv
bm5lY3Qub3JngiZjb21tdW5pdHkuYWx1bW5pcG9ydGFsLWRldXRzY2hsYW5kLm9y
Z4IdY29tbXVuaXR5LmJpcnRocmlnaHRleGNlbC5jb22CEWNvbW11bml0eS5icHAu
Y29tghdjb21tdW5pdHkubWFuY29zYS5jby56YYISY29ubmVjdC5pc2Jhc2VsLmNo
ghRjb25uZWN0LnJlZ2VudC5hYy56YYIXY29ubmVjdGVkLmNhcmRpZmYuYWMudWuC
DmNzZmNhbHVtbmkuY29tghVjdW1icmlhbmV0d29yay5nbG9iYWyCFXd3dy5jYW1w
aW9uYWx1bW5pLm9yZ4IYd3d3LmNhbXB1c25ldHp3ZXJrLmFjLmF0ghd3d3cuY2Fz
c2NvbW11bml0eS5jby51a4Ibd3d3LmNhdGVyaGFtY29ubmVjdGVkLmNvLnVrgh93
d3cuY2F0ZXJoYW1zY2hvb2xzb2NpZXR5LmNvLnVrghl3d3cuY2VudHJhbGVjb21t
dW5pdHkuY29tghJ3d3cuY2V0dGFsdW1uaS5jb22CEnd3dy5jZXR0Y29ubmVjdC5l
c4Ibd3d3LmNoYWxsb25lcnNjb25uZWN0ZWQuY29tgh13d3cuY2hhbGxvbmVyc2hp
Z2huZXR3b3JrLmNvbYIed3d3LmNoYXJ0ZXJob3VzZWNvbm5lY3Qub3JnLnVrghh3
d3cuY2hldmVuaW5nY29ubmVjdC5jb22CDXd3dy5jaG9iYS5vcmeCFHd3dy5jaHNu
ZXR3b3JrLmNvLnVrghp3d3cuY2lzdmFsdW1uaS1jb25uZWN0Lm9yZ4IZd3d3LmNp
dGl6ZW5zY29ubmVjdC5jby51a4IWd3d3LmNpdHlzaGVmYWx1bW5pLm9yZ4IYd3d3
LmNqbG1lbnRvcnNoaXAzNjAuY29tghd3d3cuY2xhcmVoYWxsY29ubmVjdC51a4IV
d3d3LmNsdWJkYW5ldHdvcmsuY29tghF3d3cuY29sZmVzbmV0LmNvbYIYd3d3LmNv
bHVtYmFuc2Nvbm5lY3Qub3Jngip3d3cuY29tbXVuaXR5LmFsdW1uaXBvcnRhbC1k
ZXV0c2NobGFuZC5vcmeCIXd3dy5jb21tdW5pdHkuYmlydGhyaWdodGV4Y2VsLmNv
bYIVd3d3LmNvbW11bml0eS5icHAuY29tght3d3cuY29tbXVuaXR5Lm1hbmNvc2Eu
Y28uemGCFnd3dy5jb25uZWN0LmlzYmFzZWwuY2iCGHd3dy5jb25uZWN0LnJlZ2Vu
dC5hYy56YYIbd3d3LmNvbm5lY3RlZC5jYXJkaWZmLmFjLnVrghJ3d3cuY3NmY2Fs
dW1uaS5jb22CGXd3dy5jdW1icmlhbmV0d29yay5nbG9iYWwwTAYDVR0gBEUwQzAI
BgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nw
cy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQBElGUu
sO7Or8RAB9io/ijA2uaCvtjLMbU/0zOWtbaBqAAAAXkeRx/NAAAEAwBGMEQCIDeU
mlbKtvXiAnsciQOm2CQ/jJ8f4eEDYo0ERxv+XbyDAiAqoqZ0SzDOfjQdaeu4oc27
CZAdrIhB9U/WeqJ7HJd3zgB2APZclC/RdzAiFFQYCDCUVo7jTRMZM7/fDC8gC8xO
8WTjAAABeR5HH8QAAAQDAEcwRQIhAOQop1F7+38vpM31zR8xt+v8TVuLfMNIN/yO
wtG11qmCAiBA6AyA0KMoc/W70GzJTW/aCac/se+mU/j7x5QhM6b2OTANBgkqhkiG
9w0BAQsFAAOCAQEADcQbtPnmGqAQWAXkcoSZIDq+YCHNkDWBeAAnjJqDs+/Zz9R9
drX3lhhRx6KYShmMRlLR3po7LptWLXFukuG/QrGoo8cF36oRWaHKCgS6HFU0P6mj
9LkKKIesHdurzJfAjZ4eQ5AVxRGdqoezg+e8CEUcnfGpXWHcB5clf1sc/IzrFGvv
n6Gj6/hGf3sC402kKd4aannGHkHS+8UPjhmgWSFCHe41+XJJteX/7toilTaPBhxm
/A82LeWfC57ikCCc3cQUFOBXTNmh3y5IQo6SDPcc32PNR+wUtJQda6hIdLy/1UzJ
iDZcMsHCP1d3fCwQ/OM9W4e83TBx37wXZ1jDqg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYirY51ukQnTIH8iKDJN
HQh/yyoJgMV0Lt+x6vi9SDJtSgj3FW+kiduU39Cjr76Rn3FyNsJXpRxqn3W5IDCk
CGnDjVqR+5uVarLnwTiJd8pp/73nFaJfr9/4fAwK0HE0K7EwiFDNVBngt3g5AsYm
T38PnET+EOzZ3NV+VJHbEsdlmuxanvsFTT7fmuVLzhpvdfrDPhH6Uw4HjPp0t55i
XLE6hiZ0ik2CrbkxNJcgLaqEFJVH41Nkeb3bBEGAXenupgUAm4OPTm2CZgolpczl
3K5xYkJ1iKbtn0hWGFl+Y04Uln+0It3dgZyb0O8vICeOjGyJmIaVxKGUJfhFnNCa
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296470065183879791965351623513087608834601
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-29 14:37:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-28 14:37:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'campionalumni.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18371948456800594851073589450600133623736972673266965849310985762176104112270085536495612495854153931992064859374005427185880151246884923581792550432951174171108475143563308696209651552346620499419725476026452679862337449366874086955303935043802393041924273104749283193884992826385971252853505017476356473684516662732210429706892202827459788210795420864389684099391519061491863924457127787722106222550898778591554433861568704829883485335237074336908523402624285112897964143123139802289010526725250480673213295784052381632849845922930908883685018373734255581356948050461176452712610160135598342831159516384262506977869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8d93b9732d5be0fd9cecc8907bb774a3c6ee0cff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1506 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campionalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusnetzwerk.ac.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casscommunity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caterhamconnected.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caterhamschoolsociety.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralecommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cettalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cettconnect.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'challonersconnected.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'challonershighnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charterhouseconnect.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheveningconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'choba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chsnetwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cisvalumni-connect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citizensconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityshefalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cjlmentorship360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clarehallconnect.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubdanetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colfesnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbansconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.alumniportal-deutschland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.birthrightexcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.bpp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.mancosa.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.isbasel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.regent.ac.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connected.cardiff.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csfcalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cumbrianetwork.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campionalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campusnetzwerk.ac.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casscommunity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caterhamconnected.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caterhamschoolsociety.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralecommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cettalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cettconnect.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.challonersconnected.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.challonershighnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charterhouseconnect.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheveningconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.choba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chsnetwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cisvalumni-connect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citizensconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityshefalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cjlmentorship360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clarehallconnect.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubdanetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colfesnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbansconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.community.alumniportal-deutschland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.community.birthrightexcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.community.bpp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.community.mancosa.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.isbasel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.regent.ac.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connected.cardiff.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csfcalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cumbrianetwork.global'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a8000001791e471fcd0000040300463044022037949a56cab6f5e2027b1c8903a6d8243f8c9f1fe1e103628d04471bfe5dbc8302202aa2a6744b30ce7e341d69ebb8a1cdbb09901dac8841f54fd67aa27b1c9777ce007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001791e471fc40000040300473045022100e428a7517bfb7f2fa4cdf5cd1f31b7ebfc4d5b8b7cc34837fc8ec2d1b5d6a982022040e80c80d0a32873f5bbd06cc94d6fda09a73fb1efa653f8fbc7942133a6f639
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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