community.mancosa.co.za

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:c3:de:84:f4:25:74:e4:5c:c1:89:87:3a:e4:73:12:1e:57 was issued on by Let's Encrypt.

With 62 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=community.mancosa.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c3:de:84:f4:25:74:e4:5c:c1:89:87:3a:e4:73:12:1e:57
Serial Number (int): 415099984226749126521174617734228703583831
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 59:f0:fd:93:4b:39:31:5b:05:11:30:11:03:0a:eb:ad:4c:04:07:e7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ac:77:ca:94:4b:85:a9:8a:b0:78:d8:2a:89:0b:76:dd:d1:d8:d9:1b
Fingerprint (sha256): 0c:b6:f3:8e:b3:70:b2:e6:57:f2:d6:1a:f6:bd:fc:99:48:32:8d:7b:3f:b2:68:16:c0:be:5c:d1:db:aa:c2:ac

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate community.mancosa.co.za

62

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for community.mancosa.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

campionalumni.org
casscommunity.co.uk
caterhamconnected.co.uk
caterhamschoolsociety.co.uk
centralecommunity.com
cettalumni.com
cettconnect.es
challonersconnected.com
challonershighnetwork.com
charterhouseconnect.org.uk
cheveningconnect.com
choba.org
chsnetwork.co.uk
cisvalumni-connect.org
citizensconnect.co.uk
cityshefalumni.org
clarehallconnect.uk
clubdanetwork.com
colfesnet.com
columbansconnect.org
community.alumniportal-deutschland.org
community.birthrightexcel.com
community.bpp.com
community.mancosa.co.za
connect.isbasel.ch
connect.regent.ac.za
connected.cardiff.ac.uk
corpusalumni.com
csfcalumni.com
cualumni.org
cumbrianetwork.global
www.campionalumni.org
www.casscommunity.co.uk
www.caterhamconnected.co.uk
www.caterhamschoolsociety.co.uk
www.centralecommunity.com
www.cettalumni.com
www.cettconnect.es
www.challonersconnected.com
www.challonershighnetwork.com
www.charterhouseconnect.org.uk
www.cheveningconnect.com
www.choba.org
www.chsnetwork.co.uk
www.cisvalumni-connect.org
www.citizensconnect.co.uk
www.cityshefalumni.org
www.clarehallconnect.uk
www.clubdanetwork.com
www.colfesnet.com
www.columbansconnect.org
www.community.alumniportal-deutschland.org
www.community.birthrightexcel.com
www.community.bpp.com
www.community.mancosa.co.za
www.connect.isbasel.ch
www.connect.regent.ac.za
www.connected.cardiff.ac.uk
www.corpusalumni.com
www.csfcalumni.com
www.cualumni.org
www.cumbrianetwork.global

Other certificates including the domain name mancosa.co.za

(limited to 100 certificates)
campionalumni.org
campionalumni.org
ssl276000.cloudflaressl.com
ssl276000.cloudflaressl.com
community.mancosa.co.za
campionalumni.org
mancosa.co.za
ssl83894.cloudflare.com
mancosa.co.za
skillme.mancosa.co.za
www.mancosa.co.za
campionalumni.org
enrol.mancosa.co.za
enrol.mancosa.co.za
community.mancosa.co.za
ssl83894.cloudflare.com
gsb.mancosa.co.za
campionalumni.org
ssl83894.cloudflare.com
ssl83894.cloudflare.com
admin.babydox.co.za
gsb.mancosa.co.za
*.mancosa.co.za
www.mancosa.co.za
ssl276000.cloudflaressl.com
campionalumni.org
campionalumni.org
sni145963.cloudflaressl.com
mancosa.co.za
sni.cloudflaressl.com
www.mancosa.co.za
*.mancosa.co.za
campusnetzwerk.ac.at
campionalumni.org
campionalumni.org
mancosa.co.za
campusnetzwerk.ac.at
www.mancosa.co.za
ssl276000.cloudflaressl.com
mancosa.co.za
www.mancosa.co.za
campusnetzwerk.ac.at
sni145963.cloudflaressl.com
www.mancosa.co.za
campusnetzwerk.ac.at
campusnetzwerk.ac.at
campionalumni.org
campusnetzwerk.ac.at
www.mancosa.co.za
mancosa.co.za
gsb.mancosa.co.za
ssl83894.cloudflare.com
campionalumni.org
campusnetzwerk.ac.at
campionalumni.org
*.mancosa.co.za
ssl83894.cloudflare.com
enrol.mancosa.co.za
mancosa.co.za
ssl276000.cloudflaressl.com
campionalumni.org
campionalumni.org
enrol.mancosa.co.za
gsb.mancosa.co.za
campionalumni.org
campionalumni.org
gsb.mancosa.co.za
enrol.mancosa.co.za
mancosa.co.za
mancosa.co.za
enrol.mancosa.co.za
gsb.mancosa.co.za
mancosa.co.za
mancosa.co.za
campionalumni.org
www.mancosa.co.za
community.mancosa.co.za
campionalumni.org
campionalumni.org
ssl276000.cloudflaressl.com
campusnetzwerk.ac.at
ssl83894.cloudflare.com
gsb.mancosa.co.za
campionalumni.org
campusnetzwerk.ac.at
campusnetzwerk.ac.at
ssl276000.cloudflaressl.com
campionalumni.org
mancosa.co.za
ssl83894.cloudflare.com
gsb.mancosa.co.za
mancosa.co.za
campusnetzwerk.ac.at
www.mancosa.co.za
ssl276000.cloudflaressl.com
mancosa.co.za
campionalumni.org
enrol.mancosa.co.za
ssl275999.cloudflaressl.com
campionalumni.org

Certificate

The complete raw certificate details for community.mancosa.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgC+xPAW5KAaMqZO6K58H
of38IVEoatEZg2IYGve9PrjBcbbwa9IxP+dix7U+V/UUKGzLv/4hCjURO1ndcNow
maZChfIcB7cXaJf3Pd/gF0Ws4YGqBJKJIYgxw0VpXQSobLYK5rKNn5fHedYw/9pQ
QaaJAZcIEZXzHn1NWqAgySD7XkDjVUeHEAtNCd/8IlrRHWN8XKFPIM9zpfJs7Gzb
Uvl14f+JDgi8Nmbq7FnLc/HYAzxrWTVFecEU6R7oJWHAKloYyOL5RZmgnUAcBZeF
DF6Iffu+NGtNnsE6PXPJwvkkBW1EKaF4wq+0Gtsmnihi7iDQhoqQpGutaC7X26Rb
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 415099984226749126521174617734228703583831
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-13 12:51:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-11 12:51:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'community.mancosa.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16182020996218518526723487026048337596481750895913594964013935868178583901113727469631718251467493052476177676079146869201608647759822876907688867527470699642123390869763504752515187229980847063962356784564370364036567103573379193279123488410880920566362738490749897878246030862753345125822284395137429595494016982930486129636521359659649002329668487625256417232040874664935201075075813255044489103292112139902430722456820696155245012130103271462412569986029656555763999248665546217828397719776658733044824269989976708335684192390816348759360273342546388275999709333744962955130875449067095553643766131008834210388807
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							59f0fd934b39315b05113011030aebad4c0407e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1482 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campionalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casscommunity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caterhamconnected.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caterhamschoolsociety.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralecommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cettalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cettconnect.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'challonersconnected.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'challonershighnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charterhouseconnect.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheveningconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'choba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chsnetwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cisvalumni-connect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citizensconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityshefalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clarehallconnect.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubdanetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colfesnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbansconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.alumniportal-deutschland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.birthrightexcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.bpp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.mancosa.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.isbasel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.regent.ac.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connected.cardiff.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corpusalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csfcalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cualumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cumbrianetwork.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campionalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casscommunity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caterhamconnected.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caterhamschoolsociety.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralecommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cettalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cettconnect.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.challonersconnected.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.challonershighnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charterhouseconnect.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheveningconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.choba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chsnetwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cisvalumni-connect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citizensconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityshefalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clarehallconnect.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubdanetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colfesnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbansconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.community.alumniportal-deutschland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.community.birthrightexcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.community.bpp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.community.mancosa.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.isbasel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.regent.ac.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connected.cardiff.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corpusalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csfcalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cualumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cumbrianetwork.global'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a800000175c1dff10e0000040300473045022100ce7d10da70cf6262cf8d299caf43908401000c22b87e0350021069f71281fefc0220450b68933270897e15bcd56d3312d79c8c6dbdd1d1f444445802f51b0248414d0077007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000175c1dff12d0000040300483046022100ba04dc858966fc36d714de0725a6083c26144504ee4a29f53a850f344ca5f269022100eb4bfec398f219ac3f4f590f18e9e8d9ba42a196b89114e05f35eb4578c68896
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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