us.prod.campusgroups.com

Issued by R3

About this certificate

This digital certificate with serial number 03:ce:0b:a3:90:35:db:fb:e3:42:32:3b:34:a0:64:95:b7:ec was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=us.prod.campusgroups.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:ce:0b:a3:90:35:db:fb:e3:42:32:3b:34:a0:64:95:b7:ec
Serial Number (int): 331450496158269795934658705034805880666092
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fb:10:4f:d1:66:e1:1b:9a:2d:f6:7f:71:45:92:6b:cf:a7:f8:b6:fd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 68:37:c6:6f:f0:14:ec:46:30:21:5a:3e:30:47:17:d1:46:43:cc:dc
Fingerprint (sha256): 13:0b:dc:90:9a:a2:d9:c8:56:00:3e:55:8f:e0:1c:bd:04:54:48:60:73:61:ce:e1:c1:58:50:ad:9f:fd:a9:75

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate us.prod.campusgroups.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for us.prod.campusgroups.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1850.udayton.edu
activities.upike.edu
aggielife.ucdavis.edu
archway.ramapo.edu
beinvolved.jmu.edu
belong.babson.edu
bengaged.binghamton.edu
blugoldconnect.uwec.edu
bridge.loyola.edu
bullsconnect.usf.edu
campusconnect.kaust.edu.sa
campusconnections.umflint.edu
campusgroups.brandeis.edu
campusgroups.erau.edu
campusgroups.rit.edu
campusgroups.rivier.edu
campusgroups.uci.edu
cardinalengage.stanford.edu
ccc.rochester.edu
clubs.marshall.usc.edu
clubs.washcoll.edu
community.case.edu
connect.altoona.psu.edu
connect.crown.edu
connect.evangel.edu
connect.fvtc.edu
connect.lassonde.yorku.ca
connect.law.columbia.edu
connect.ung.edu
connect.uwstout.edu
connect.westvalley.edu
crimsonconnect.du.edu
dartmouthgroups.dartmouth.edu
dukegroups.com
eagleconnect.lasierra.edu
eagleengage.tntech.edu
eaglelife.erau.edu
embark.mtholyoke.edu
engage.abington.psu.edu
engage.acphs.edu
engage.bates.edu
engage.bridgew.edu
engage.colum.edu
engage.gettysburg.edu
engage.missouri.edu
engage.mit.edu
engage.mmm.edu
engage.ualr.edu
engage.usc.edu
getinvolved.wsc.edu
giesgroups.illinois.edu
group.aaaafoundation.org
groups.ccny.cuny.edu
groups.chicagobooth.edu
groups.gsb.columbia.edu
groups.som.yale.edu
groups.wharton.upenn.edu
hub.houghton.edu
ibelong.byui.edu
involvement.ubalt.edu
jacketconnect.bw.edu
luhub.lamar.edu
manesync.tamuc.edu
mason360.gmu.edu
minerlink.mst.edu
my.princeton.edu
my.snc.edu
myfletcher.tufts.edu
myhc.holycross.edu
mylim.limcollege.edu
mypnwlife.pnw.edu
myraft.csumb.edu
oneschulich.yorku.ca
orgcentral.k-state.edu
ourcampus.lafayette.edu
questromcommon.bu.edu
ramconnect.wcupa.edu
roogroups.umkc.edu
royalsync.scranton.edu
saintsconnect.flagler.edu
saintslife.css.edu
shiplink.ship.edu
shoreline.ucsb.edu
sloangroups.mit.edu
sokannect.soka.edu
students.grainger.illinois.edu
swedecentral.bethanylb.edu
tartanconnect.cmu.edu
thehub.nmu.edu
theyard.bowiestate.edu
thrivegroups.sbathrive.com
tigerlink.lsu.edu
tritonconnect.umsl.edu
ucore.uco.edu
ugroups.ucollege.edu
us.prod.campusgroups.com
virtualfairs.ucsd.edu
warriorlife.csustan.edu
whattodu.denison.edu
yaleconnect.yale.edu

Other certificates including the domain name campusgroups.com

(limited to 100 certificates)
us.prod.campusgroups.com
us.prod.campusgroups.com
blog.campusgroups.com
ssl378409.cloudflaressl.com
ssl378409.cloudflaressl.com
eu.prod.campusgroups.com
eu.prod.campusgroups.com
us.prod.campusgroups.com
ssl275802.cloudflaressl.com
au.prod.campusgroups.com
eu.prod.campusgroups.com
us.prod.campusgroups.com
blog.campusgroups.com
us.prod.campusgroups.com
ssl378409.cloudflaressl.com
blog.campusgroups.com
ssl378408.cloudflaressl.com
ssl378410.cloudflaressl.com
eu.prod.campusgroups.com
us.prod.campusgroups.com
ssl378410.cloudflaressl.com
ssl378410.cloudflaressl.com
eu.prod.campusgroups.com
blog.campusgroups.com
ssl378408.cloudflaressl.com
ssl275802.cloudflaressl.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
ssl378409.cloudflaressl.com
us.prod.campusgroups.com
*.campusgroups.com
ssl378408.cloudflaressl.com
us.prod.campusgroups.com
ssl378408.cloudflaressl.com
eu.prod.campusgroups.com
ssl275802.cloudflaressl.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
us.prod.campusgroups.com
us.prod.campusgroups.com
ssl378410.cloudflaressl.com
ssl378409.cloudflaressl.com
ssl378410.cloudflaressl.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
ssl93421.cloudflare.com
ssl378410.cloudflaressl.com
ssl275802.cloudflaressl.com
ssl378408.cloudflaressl.com
ssl378409.cloudflaressl.com
us.prod.campusgroups.com
us.prod.campusgroups.com
ssl378410.cloudflaressl.com
*.campusgroups.com
us.prod.campusgroups.com
us.prod.campusgroups.com
us.prod.campusgroups.com
us.prod.campusgroups.com
*.campusgroups.com
ssl378410.cloudflaressl.com
ssl378408.cloudflaressl.com
blog.campusgroups.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
blog.campusgroups.com
*.campusgroups.com
ssl378410.cloudflaressl.com
blog.campusgroups.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
ssl378410.cloudflaressl.com
ssl378409.cloudflaressl.com
us.prod.campusgroups.com
blog.campusgroups.com
ssl378408.cloudflaressl.com
us.prod.campusgroups.com
ssl275802.cloudflaressl.com
ssl378408.cloudflaressl.com
*.campusgroups.com
eu.prod.campusgroups.com
ssl378410.cloudflaressl.com
ssl378410.cloudflaressl.com
ssl378408.cloudflaressl.com
sni.cloudflaressl.com
eu.prod.campusgroups.com
ssl378408.cloudflaressl.com
eu.prod.campusgroups.com
ssl378410.cloudflaressl.com
*.campusgroups.com
eu.prod.campusgroups.com
ssl378408.cloudflaressl.com
ssl378409.cloudflaressl.com
ssl378410.cloudflaressl.com
ssl378409.cloudflaressl.com
*.campusgroups.com
ssl378409.cloudflaressl.com
*.campusgroups.com
ssl378409.cloudflaressl.com
ssl378408.cloudflaressl.com
ssl378410.cloudflaressl.com

Certificate

The complete raw certificate details for us.prod.campusgroups.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoNZksuNywhgIh4/w+XC
f1v/705ktu1JD+/N2hNyx6pNfqY+Qmh3HmTXRoYjnXZB3g6Rr8AfFB4C4eUAKEZ2
o3Zm1j+yAf4hJ13RR3lGjVCi5tZYnKCiV9Kz/HidFU5JDQbzXqcttV97tTQomsjM
u2OD3yv7ZWPYIz6tWRH+Mf0FoYHgL2CaQXRygayVKjU/dAEZZk5bVrI4OpIRtbvp
Wlm1tf1kOpdAAD2eEdpjpGH4e6AjlPM1njK3Cm3vzHhHpD0My9TN4TqyTNInzFOT
aebJ/vx5UMceLliMf5Dw/3oxLN9VjFBIMxWu9M1S7NUTmntJRvAxT6Tk3buvxZKL
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331450496158269795934658705034805880666092
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 13:30:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-13 13:30:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'us.prod.campusgroups.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24050048991400585756164762787816964289895728568963056613853601517745354115141853333891058624894050119187488592423292093050100300663645254971085891043352153794468618640802481537911279919676230815121298659764709518743723779009061878299044552834458127233976934541283235661852909393127341922616040673038628939413213969011238959182234265049433414793532072872688813496901328474639945048322908653995289121443103293434479803746979388635737881900365272774879173585248448496461943569132563542480760253940957648148920746259331060834351293147257766166606511780392135472262331152741013860508799521267395644546250171340039809829663
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fb104fd166e11b9a2df67f7145926bcfa7f8b6fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2189 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1850.udayton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activities.upike.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aggielife.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archway.ramapo.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beinvolved.jmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belong.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bengaged.binghamton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blugoldconnect.uwec.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridge.loyola.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bullsconnect.usf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusconnect.kaust.edu.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusconnections.umflint.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusgroups.brandeis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusgroups.erau.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusgroups.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusgroups.rivier.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusgroups.uci.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardinalengage.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccc.rochester.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubs.marshall.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubs.washcoll.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.case.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.altoona.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.crown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.evangel.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.fvtc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.lassonde.yorku.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.law.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.ung.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.uwstout.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.westvalley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crimsonconnect.du.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dartmouthgroups.dartmouth.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dukegroups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eagleconnect.lasierra.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eagleengage.tntech.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eaglelife.erau.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embark.mtholyoke.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.abington.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.acphs.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.bates.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.bridgew.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.colum.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.gettysburg.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.missouri.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.mit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.mmm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.ualr.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getinvolved.wsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giesgroups.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'group.aaaafoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groups.ccny.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groups.chicagobooth.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groups.gsb.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groups.som.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groups.wharton.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.houghton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibelong.byui.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'involvement.ubalt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacketconnect.bw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luhub.lamar.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manesync.tamuc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mason360.gmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minerlink.mst.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.snc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfletcher.tufts.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhc.holycross.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylim.limcollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypnwlife.pnw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myraft.csumb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneschulich.yorku.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orgcentral.k-state.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourcampus.lafayette.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'questromcommon.bu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramconnect.wcupa.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roogroups.umkc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalsync.scranton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintsconnect.flagler.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintslife.css.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shiplink.ship.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoreline.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sloangroups.mit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sokannect.soka.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'students.grainger.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swedecentral.bethanylb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tartanconnect.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehub.nmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theyard.bowiestate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thrivegroups.sbathrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tigerlink.lsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tritonconnect.umsl.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucore.uco.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ugroups.ucollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.prod.campusgroups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualfairs.ucsd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warriorlife.csustan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whattodu.denison.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yaleconnect.yale.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e42857a8d0000040300473045022100e0525d97e49a950bbcb3be55b9f942d8c20dee2df94b8d77097131494b06af0502200b52caf6cb5f6c31ea5ab2a726cffb8261e9dc7a92d8b7e4b9dd20ed6c3cabb9007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e42857aeb00000403004830460221009f94d07603519ad7134b29db74a36df4a5c6f08e9d2090b79b770499bbd115fd022100ef42ad63c3006ea0d2eb68d219b5df4cd78c6d701dbe886eebdab8a19c000295
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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