us.prod.campusgroups.com

Issued by R3

About this certificate

This digital certificate with serial number 03:89:77:f7:69:d5:b6:f9:91:d3:e7:fb:ab:1a:f9:b4:c9:40 was issued on by Let's Encrypt.

With 74 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=us.prod.campusgroups.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:89:77:f7:69:d5:b6:f9:91:d3:e7:fb:ab:1a:f9:b4:c9:40
Serial Number (int): 308115004838857007507586206223801102158144
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bd:c9:b3:12:36:45:61:9c:3e:86:f0:18:4b:e3:e7:b4:0e:c7:83:43
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 12:ad:c7:5e:ee:a1:94:a6:35:c4:d0:48:f2:7d:e8:14:56:3b:84:6b
Fingerprint (sha256): 10:23:e8:39:ef:69:88:92:ee:c5:0b:97:b1:db:0e:d4:0b:33:9f:65:ea:49:af:77:af:2b:be:53:eb:39:ff:65

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate us.prod.campusgroups.com

74

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for us.prod.campusgroups.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alumnivillage.vet.ohio-state.edu
ampersand.fandm.edu
anchoredin.lsus.edu
app.thejgsi.org
bcbuzz.bellincollege.edu
bendbeavscentral.osucascades.edu
blueprint.lynn.edu
campusgroups.colorado.edu
campusgroups.nyit.edu
campusgroups.pitt.edu
campusgroups.plattsburgh.edu
campusgroups.una.edu
cg.guttman.cuny.edu
cobberconnect.cord.edu
connect.aucenter.edu
connect.fvcc.edu
connect.simmons.edu
connect.uas.alaska.edu
connections.kansascom.org
dehub.depaul.edu
domore.lcsc.edu
dubnet.tacoma.uw.edu
ducklink.stevens.edu
eaglesync.ewu.edu
engage.bvu.edu
engage.dccc.edu
engage.mcla.edu
engage.uaf.edu
engrconnector.ku.edu
eunion.erau.edu
experience.pitt.edu
gculife.gcu.edu
getinvolved.bergen.edu
gopherlink.umn.edu
hawknest.sou.edu
hogsync.uark.edu
hub.concordia.edu
hub.hotchkiss.org
hub.mhu.edu
huskiehub.niu.edu
involveut.ut.edu
kenyonconnect.campusgroups.kenyon.edu
lawconnect.uchicago.edu
lawdocket.bu.edu
mavcentral.mnsu.edu
myengagement.nku.edu
mywpi.wpi.edu
nuconnect.northwestu.edu
nwuengage.nebrwesleyan.edu
one.illinois.edu
oreconnect.mines.edu
owlconnect.otis.edu
pantherconnect.chapman.edu
pccentral.providence.edu
peacockconnect.saintpeters.edu
penguinsplus.dominican.edu
pridenet-test.springfield.edu
raptorlink.umn.edu
smu360.smu.edu
soco.college.harvard.edu
techconnect.nmt.edu
thegrizz.germanna.edu
thepirateexperience.ecu.edu
uknighted.qc.cuny.edu
umesgroups.umes.edu
us.prod.campusgroups.com
vine.pepperdine.edu
warriorhub.rochesteru.edu
weengage.wellesley.edu
whatsup.mcdaniel.edu
world.wise.iastate.edu
www.clubs.brooklyn.cuny.edu
www.wolfpackconnect.madisoncollege.edu
www.xstudionm.org

Other certificates including the domain name campusgroups.com

(limited to 100 certificates)
us.prod.campusgroups.com
us.prod.campusgroups.com
blog.campusgroups.com
ssl378409.cloudflaressl.com
ssl378409.cloudflaressl.com
eu.prod.campusgroups.com
eu.prod.campusgroups.com
us.prod.campusgroups.com
ssl275802.cloudflaressl.com
au.prod.campusgroups.com
eu.prod.campusgroups.com
us.prod.campusgroups.com
blog.campusgroups.com
us.prod.campusgroups.com
ssl378409.cloudflaressl.com
blog.campusgroups.com
ssl378408.cloudflaressl.com
ssl378410.cloudflaressl.com
eu.prod.campusgroups.com
us.prod.campusgroups.com
ssl378410.cloudflaressl.com
ssl378410.cloudflaressl.com
eu.prod.campusgroups.com
blog.campusgroups.com
ssl378408.cloudflaressl.com
ssl275802.cloudflaressl.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
ssl378409.cloudflaressl.com
us.prod.campusgroups.com
*.campusgroups.com
ssl378408.cloudflaressl.com
us.prod.campusgroups.com
ssl378408.cloudflaressl.com
eu.prod.campusgroups.com
ssl275802.cloudflaressl.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
us.prod.campusgroups.com
us.prod.campusgroups.com
ssl378410.cloudflaressl.com
ssl378409.cloudflaressl.com
ssl378410.cloudflaressl.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
ssl93421.cloudflare.com
ssl378410.cloudflaressl.com
ssl275802.cloudflaressl.com
ssl378408.cloudflaressl.com
ssl378409.cloudflaressl.com
us.prod.campusgroups.com
us.prod.campusgroups.com
ssl378410.cloudflaressl.com
*.campusgroups.com
us.prod.campusgroups.com
us.prod.campusgroups.com
us.prod.campusgroups.com
us.prod.campusgroups.com
*.campusgroups.com
ssl378410.cloudflaressl.com
ssl378408.cloudflaressl.com
blog.campusgroups.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
blog.campusgroups.com
*.campusgroups.com
ssl378410.cloudflaressl.com
blog.campusgroups.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
ssl378410.cloudflaressl.com
ssl378409.cloudflaressl.com
us.prod.campusgroups.com
blog.campusgroups.com
ssl378408.cloudflaressl.com
us.prod.campusgroups.com
ssl275802.cloudflaressl.com
ssl378408.cloudflaressl.com
*.campusgroups.com
eu.prod.campusgroups.com
ssl378410.cloudflaressl.com
ssl378410.cloudflaressl.com
ssl378408.cloudflaressl.com
sni.cloudflaressl.com
eu.prod.campusgroups.com
ssl378408.cloudflaressl.com
eu.prod.campusgroups.com
ssl378410.cloudflaressl.com
*.campusgroups.com
eu.prod.campusgroups.com
ssl378408.cloudflaressl.com
ssl378409.cloudflaressl.com
ssl378410.cloudflaressl.com
ssl378409.cloudflaressl.com
*.campusgroups.com
ssl378409.cloudflaressl.com
*.campusgroups.com
ssl378409.cloudflaressl.com
ssl378408.cloudflaressl.com
ssl378410.cloudflaressl.com

Certificate

The complete raw certificate details for us.prod.campusgroups.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs47L6sFnlg7W5HVgVJ+X
o5WKyTcNHySbP0b7qvvttXMJ6ZmxSviTb+isXLSCxhkw/U1F0QoU2/3BHn5JV6YK
opvKLH/2g946HwsqZse11AyVKoUdlJelOgag6Z6/66eFjgHFQ+8QCPBsyoF9sxWO
RIK5s7RX4CuEVzWN0fCcYjUYp67peHcDVXClehCH041K7xHJneHZ920K6S3v9chw
x34rKOIvCpCrUjZQhcXXdk8iQGOMcBihtEBegEroAgAMIkLz1mrGZCwawR4Ls1e6
pzmx2J5GZXMr7wfVKAno8Jz0hJ1nLZTEJQhB/HOm4XnQd04/4Ze64NMTbhl/6zBL
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308115004838857007507586206223801102158144
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-19 13:30:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-18 13:30:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'us.prod.campusgroups.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22667072192566451338139841174621280756581282799092106872314827949332913751111877138323023378744975600901193804156428541600493825511045592635183120933389324708948642280841179869819893175549693777508216881950035205542024762472195339994716654662790768572203110315124101013151201984020520263974731249495161262042665007094024041115536339577370243041318657020282698230221735835002581348031033061902521301447536454180927797531021784895408749490414552719972721174523944624259710385151337199427427083613734181177158726805903476991462990850918996857149563945203440129066587194677882496898076768676501493066779913026398676077521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bdc9b3123645619c3e86f0184be3e7b40ec78343
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1679 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnivillage.vet.ohio-state.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ampersand.fandm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anchoredin.lsus.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.thejgsi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcbuzz.bellincollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bendbeavscentral.osucascades.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blueprint.lynn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusgroups.colorado.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusgroups.nyit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusgroups.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusgroups.plattsburgh.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusgroups.una.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cg.guttman.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cobberconnect.cord.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.aucenter.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.fvcc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.simmons.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.uas.alaska.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connections.kansascom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dehub.depaul.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domore.lcsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dubnet.tacoma.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ducklink.stevens.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eaglesync.ewu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.bvu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.dccc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.mcla.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engrconnector.ku.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eunion.erau.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gculife.gcu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getinvolved.bergen.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gopherlink.umn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawknest.sou.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hogsync.uark.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.concordia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.hotchkiss.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.mhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huskiehub.niu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'involveut.ut.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kenyonconnect.campusgroups.kenyon.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawconnect.uchicago.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawdocket.bu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mavcentral.mnsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myengagement.nku.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywpi.wpi.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuconnect.northwestu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwuengage.nebrwesleyan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'one.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oreconnect.mines.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owlconnect.otis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pantherconnect.chapman.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pccentral.providence.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peacockconnect.saintpeters.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penguinsplus.dominican.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pridenet-test.springfield.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raptorlink.umn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smu360.smu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soco.college.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techconnect.nmt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegrizz.germanna.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepirateexperience.ecu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uknighted.qc.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umesgroups.umes.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.prod.campusgroups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vine.pepperdine.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warriorhub.rochesteru.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weengage.wellesley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatsup.mcdaniel.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'world.wise.iastate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubs.brooklyn.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wolfpackconnect.madisoncollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xstudionm.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d2221496b0000040300473045022100d2e53ef3239a05d1437f6307109bbfc8524a03424b48a5ddd36ef15b51f1f810022039411c69abc4f2531d570f6c1befa674e493e8b2aa588781c2aed3dda710a91200760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d222149a200000403004730450220696b3a5e18e6017c57f1aec983e383c7012c2f0a61be2cc1da5aa86a2e7180f8022100959d968b96c61a73c208d59d62e3ef572a2f5b3be76fd4d368a1625d861d705e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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