us.prod.campusgroups.com

Issued by R3

About this certificate

This digital certificate with serial number 03:04:fa:cf:cc:e7:63:64:59:b8:49:61:9c:9c:69:16:e4:2f was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=us.prod.campusgroups.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:04:fa:cf:cc:e7:63:64:59:b8:49:61:9c:9c:69:16:e4:2f
Serial Number (int): 263031373223304464489250463173798515893295
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 82:ae:9b:cc:6e:fa:88:cc:a8:fe:fb:2f:76:de:38:92:9f:55:e0:8c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 31:6b:87:63:d9:e0:ea:66:c6:1c:d2:9b:ac:ba:8e:65:e7:f0:d5:b1
Fingerprint (sha256): 11:1d:b6:73:a9:b6:86:8f:34:e2:44:3b:59:ef:ff:8d:95:70:3d:5d:ed:ce:6a:08:34:00:fa:36:67:7a:69:b7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate us.prod.campusgroups.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for us.prod.campusgroups.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1850.udayton.edu
activities.upike.edu
aggielife.ucdavis.edu
alumnigroups.som.yale.edu
archway.ramapo.edu
beinvolved.jmu.edu
belong.babson.edu
bengaged.binghamton.edu
blugoldconnect.uwec.edu
bridge.loyola.edu
bullsconnect.usf.edu
campusconnect.kaust.edu.sa
campusgroups.erau.edu
campusgroups.rit.edu
campusgroups.rivier.edu
campusgroups.uci.edu
cardinalengage.stanford.edu
ccc.rochester.edu
clubs.marshall.usc.edu
clubs.washcoll.edu
community.case.edu
connect.altoona.psu.edu
connect.crown.edu
connect.fvtc.edu
connect.lassonde.yorku.ca
connect.law.columbia.edu
connect.ung.edu
connect.uwstout.edu
connect.westvalley.edu
crimsonconnect.du.edu
dukegroups.com
eagleconnect.lasierra.edu
eagleengage.tntech.edu
eaglelife.erau.edu
embark.mtholyoke.edu
engage.abington.psu.edu
engage.bates.edu
engage.bridgew.edu
engage.colum.edu
engage.gettysburg.edu
engage.missouri.edu
engage.mit.edu
engage.mmm.edu
engage.ualr.edu
engage.usc.edu
getinvolved.wsc.edu
giesgroups.illinois.edu
group.aaaafoundation.org
groups.ccny.cuny.edu
groups.chicagobooth.edu
groups.gsb.columbia.edu
groups.som.yale.edu
groups.wharton.upenn.edu
hub.houghton.edu
ibelong.byui.edu
involvement.ubalt.edu
jacketconnect.bw.edu
lionconnect.sl.psu.edu
luhub.lamar.edu
manesync.tamuc.edu
mason360.gmu.edu
minerlink.mst.edu
my.princeton.edu
my.snc.edu
myfletcher.tufts.edu
myhc.holycross.edu
mylim.limcollege.edu
mypnwlife.pnw.edu
myraft.csumb.edu
oneschulich.yorku.ca
orgcentral.k-state.edu
ourcampus.lafayette.edu
pantherportal.acphs.edu
questromcommon.bu.edu
ramconnect.wcupa.edu
roogroups.umkc.edu
royalsync.scranton.edu
saintsconnect.flagler.edu
saintslife.css.edu
shiplink.ship.edu
shoreline.ucsb.edu
sloangroups.mit.edu
students.grainger.illinois.edu
tartanconnect.cmu.edu
thehub.nmu.edu
theyard.bowiestate.edu
tigerlink.lsu.edu
tritonconnect.umsl.edu
ucore.uco.edu
ugroups.ucollege.edu
us.prod.campusgroups.com
virtualfairs.ucsd.edu
warriorlife.csustan.edu
yaleconnect.yale.edu

Other certificates including the domain name campusgroups.com

(limited to 100 certificates)
us.prod.campusgroups.com
us.prod.campusgroups.com
blog.campusgroups.com
ssl378409.cloudflaressl.com
ssl378409.cloudflaressl.com
eu.prod.campusgroups.com
eu.prod.campusgroups.com
us.prod.campusgroups.com
ssl275802.cloudflaressl.com
au.prod.campusgroups.com
eu.prod.campusgroups.com
us.prod.campusgroups.com
blog.campusgroups.com
us.prod.campusgroups.com
ssl378409.cloudflaressl.com
blog.campusgroups.com
ssl378408.cloudflaressl.com
ssl378410.cloudflaressl.com
eu.prod.campusgroups.com
us.prod.campusgroups.com
ssl378410.cloudflaressl.com
ssl378410.cloudflaressl.com
eu.prod.campusgroups.com
ssl378408.cloudflaressl.com
ssl275802.cloudflaressl.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
ssl378409.cloudflaressl.com
us.prod.campusgroups.com
*.campusgroups.com
ssl378408.cloudflaressl.com
us.prod.campusgroups.com
ssl378408.cloudflaressl.com
eu.prod.campusgroups.com
ssl275802.cloudflaressl.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
us.prod.campusgroups.com
us.prod.campusgroups.com
ssl378410.cloudflaressl.com
ssl378409.cloudflaressl.com
ssl378410.cloudflaressl.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
ssl93421.cloudflare.com
ssl378410.cloudflaressl.com
ssl275802.cloudflaressl.com
ssl378408.cloudflaressl.com
ssl378409.cloudflaressl.com
us.prod.campusgroups.com
us.prod.campusgroups.com
ssl378410.cloudflaressl.com
*.campusgroups.com
us.prod.campusgroups.com
us.prod.campusgroups.com
us.prod.campusgroups.com
us.prod.campusgroups.com
*.campusgroups.com
ssl378410.cloudflaressl.com
ssl378408.cloudflaressl.com
blog.campusgroups.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
blog.campusgroups.com
*.campusgroups.com
ssl378410.cloudflaressl.com
blog.campusgroups.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
ssl378410.cloudflaressl.com
ssl378409.cloudflaressl.com
us.prod.campusgroups.com
blog.campusgroups.com
ssl378408.cloudflaressl.com
us.prod.campusgroups.com
ssl275802.cloudflaressl.com
ssl378408.cloudflaressl.com
*.campusgroups.com
eu.prod.campusgroups.com
ssl378410.cloudflaressl.com
ssl378410.cloudflaressl.com
ssl378408.cloudflaressl.com
sni.cloudflaressl.com
eu.prod.campusgroups.com
ssl378408.cloudflaressl.com
eu.prod.campusgroups.com
ssl378410.cloudflaressl.com
*.campusgroups.com
eu.prod.campusgroups.com
ssl378408.cloudflaressl.com
ssl378409.cloudflaressl.com
ssl378410.cloudflaressl.com
ssl378409.cloudflaressl.com
*.campusgroups.com
ssl378409.cloudflaressl.com
*.campusgroups.com
ssl378409.cloudflaressl.com
ssl378408.cloudflaressl.com
ssl378410.cloudflaressl.com
ca.prod.campusgroups.com

Certificate

The complete raw certificate details for us.prod.campusgroups.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11QSWYGXF/Kxe7wOjFMA
IUoITIOsfhZDFGpsMYv6L2JKuRee/GU4Z+gEwfBUegQFIQyj1FqGpjnHb/dIYbHm
T0mjDj4QSfWKYpQibyN7E5mKW3k1STmV27KCRIYIvd/lceS86/SYSw36RRkx5Vfj
VdUitmi8mGBeCYgWk/+7f5sGs0I+nRWHJV9HDr1zVuPssIRYM0qAdSJtKtGky7d8
dTAK1e9VReSh7iT1rs/MmntYMMkJGXpL8mqAZ3Iqem9g17y4WIRCEdkb2elqzVAQ
varPPhD7Jpj5AOPmm/yFcTd73VJVo8nE3vEGNaNffbQJH/Gg3ZUa49NLb30hBEiV
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263031373223304464489250463173798515893295
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-12 12:25:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-10 12:25:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'us.prod.campusgroups.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27182692857385183503444913858591714648087093938483269213520053304027787351446185869464082212086524957448725063865124693045172405565673104453707393293119002130890679624757158182812298426252186907712733751690549351246307134200264735951114324074490481260791534193897785186618922629048237779962329803893905405230736494580803957326028797729755813105234731356526851578891745051509124561986163333438982586682644341236635968409664063656553773586053179104501508645648196627019363335529519288740729491512362870647646627227252218155798150603588230992431091065711644632990281834445982914312684323400064235622343529595074352026947
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							82ae9bcc6efa88cca8fefb2f76de38929f55e08c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2039 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1850.udayton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activities.upike.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aggielife.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnigroups.som.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archway.ramapo.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beinvolved.jmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belong.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bengaged.binghamton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blugoldconnect.uwec.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridge.loyola.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bullsconnect.usf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusconnect.kaust.edu.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusgroups.erau.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusgroups.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusgroups.rivier.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusgroups.uci.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardinalengage.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccc.rochester.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubs.marshall.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubs.washcoll.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.case.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.altoona.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.crown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.fvtc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.lassonde.yorku.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.law.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.ung.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.uwstout.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.westvalley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crimsonconnect.du.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dukegroups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eagleconnect.lasierra.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eagleengage.tntech.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eaglelife.erau.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embark.mtholyoke.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.abington.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.bates.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.bridgew.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.colum.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.gettysburg.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.missouri.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.mit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.mmm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.ualr.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getinvolved.wsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giesgroups.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'group.aaaafoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groups.ccny.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groups.chicagobooth.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groups.gsb.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groups.som.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groups.wharton.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.houghton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibelong.byui.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'involvement.ubalt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacketconnect.bw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lionconnect.sl.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luhub.lamar.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manesync.tamuc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mason360.gmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minerlink.mst.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.snc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfletcher.tufts.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhc.holycross.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylim.limcollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypnwlife.pnw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myraft.csumb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneschulich.yorku.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orgcentral.k-state.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourcampus.lafayette.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pantherportal.acphs.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'questromcommon.bu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramconnect.wcupa.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roogroups.umkc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalsync.scranton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintsconnect.flagler.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintslife.css.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shiplink.ship.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoreline.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sloangroups.mit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'students.grainger.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tartanconnect.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehub.nmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theyard.bowiestate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tigerlink.lsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tritonconnect.umsl.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucore.uco.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ugroups.ucollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.prod.campusgroups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualfairs.ucsd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warriorlife.csustan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yaleconnect.yale.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc78400000181f29668800000040300483046022100906c602dc1c541d749f57c12fea719ceadc0b723e24ae09749453fc152665f9c022100e23541f42a5b71e17d33a51509ab3a5c2c06c852432000aebaa3fa0ad93d803300760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f600000181f29668ca000004030047304502207e189df195859fa64c8df1a3cea96a0aae55be7378d395a6fa1d3bb28cfa9806022100ab07b5bca9190ae6a7ab2885deca1723b44d9ee44cc41eba662649827114beb3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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