connectlatinschool.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9e:cd:4d:9f:eb:9a:b6:06:79:d1:f4:b1:04:de:93:35:41 was issued on by Let's Encrypt.

With 78 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=connectlatinschool.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9e:cd:4d:9f:eb:9a:b6:06:79:d1:f4:b1:04:de:93:35:41
Serial Number (int): 315374366558352658020818321364400823547201
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 95:5c:60:73:2e:5c:76:99:84:41:95:93:aa:38:a8:8c:10:bb:22:8c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c5:2c:70:75:aa:3d:0e:1b:4d:3e:f7:7a:f0:9e:cb:be:61:ba:d7:d6
Fingerprint (sha256): 14:d2:43:4b:4f:1c:2f:1f:46:e2:19:02:4c:b1:e1:6f:58:ef:1c:31:6c:b6:6a:4a:3b:7a:99:04:07:ba:58:cc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate connectlatinschool.org

78

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for connectlatinschool.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

calvertconnect.com
canfordglobalconnect.com
canisiusconnect.com
cardinalsconnect.com
careerdesignlabs.org
carreirasuvv.com
carrollalumni.com
carrollconnect.com
cbumusicconnect.com
cdl-family.org
cdl.sps.columbia.edu
centralalumni.com
centrumconnect.com
chadwickconnect.org
chahtascholars.com
champlainconnect.org
chargerconnect.org
churchillconnect.com
cityuconnect.com
cleoconnection.com
clippersconnect.org
cluconnect.com
codalumniconnect.com
cokescholarsconnect.org
collegetrackconnect.com
coloradoacademyconnect.org
columbusacademyalumni.org
communikeynetwork.com
connect.cbu.edu
connect.harvardae.org
connect.pepperdine.edu
connect.psichi.org
connect.ruw.edu.bh
connect.woodstockacademy.org
connect2bristol.org
connectbumc.com
connectddd.org
connectgettysburg.com
connectlatinschool.org
connects.emory.edu
www.calvertconnect.com
www.canfordglobalconnect.com
www.canisiusconnect.com
www.cardinalsconnect.com
www.careerdesignlabs.org
www.carreirasuvv.com
www.carrollalumni.com
www.carrollconnect.com
www.cbumusicconnect.com
www.cdl-family.org
www.cdl.sps.columbia.edu
www.centralalumni.com
www.centrumconnect.com
www.chadwickconnect.org
www.chahtascholars.com
www.champlainconnect.org
www.chargerconnect.org
www.churchillconnect.com
www.cityuconnect.com
www.cleoconnection.com
www.clippersconnect.org
www.cluconnect.com
www.codalumniconnect.com
www.cokescholarsconnect.org
www.collegetrackconnect.com
www.coloradoacademyconnect.org
www.columbusacademyalumni.org
www.communikeynetwork.com
www.connect.cbu.edu
www.connect.harvardae.org
www.connect.pepperdine.edu
www.connect.psichi.org
www.connect.ruw.edu.bh
www.connect2bristol.org
www.connectbumc.com
www.connectddd.org
www.connectgettysburg.com
www.connectlatinschool.org

Other certificates including the domain name connectlatinschool.org

(limited to 100 certificates)
canterburycommunity.org
connectlatinschool.org
connectlatinschool.org
connectlatinschool.org
cecconnect.com
connectlatinschool.org
canisiusconnect.com
canisiusconnect.com
cecconnect.com
canterburycommunity.org
www.auconnect.net
cecconnect.com
auconnect.net
cadetcommunity.com
connectlatinschool.org
connectgettysburg.com
auconnect.net
auconnect.net
cecconnect.com
auconnect.net
cecconnect.com
connectlatinschool.org
collegecrusadenetwork.com
connectlatinschool.org
canterburycommunity.org
cecconnect.com
cualumni.network
connectlatinschool.org
cardinalsconnect.com
connectlatinschool.org
canisiusconnect.com
connectlatinschool.org
cadetcommunity.com
canterburycommunity.org
connectlatinschool.org
canterburycommunity.org
canterburycommunity.org
auconnect.net
auconnect.net
connectlatinschool.org
connectlatinschool.org
connectlatinschool.org
connectlatinschool.org
cecconnect.com
cecconnect.com
canisiusconnect.com
connectlatinschool.org
cardinalsconnect.com
collegecrusadenetwork.com
cardinalsconnect.com
connectlatinschool.org
canterburycommunity.org
cecconnect.com
cecconnect.com
collegecrusadenetwork.com
canterburycommunity.org
collegecrusadenetwork.com
connectlatinschool.org
connectlatinschool.org
www.auconnect.net
auconnect.net
collegecrusadenetwork.com
cardinalsconnect.com
connectlatinschool.org
cecconnect.com
auconnect.net
canisiusconnect.com
connectlatinschool.org
connectlatinschool.org
connectlatinschool.org
connectlatinschool.org
connectlatinschool.org
collegecrusadenetwork.com
collegecrusadenetwork.com

Certificate

The complete raw certificate details for connectlatinschool.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMXjCCC0agAwIBAgISA57NTZ/rmrYGedH0sQTekzVBMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjMxMjExNTJaFw0x
OTEwMjExMjExNTJaMCExHzAdBgNVBAMTFmNvbm5lY3RsYXRpbnNjaG9vbC5vcmcw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFXNjm1mYCVcDYi8OrrsnY
TvUrFJJSWOgDybCpsJ8cU7R31gV2hh6FkDYagrmqq5SE4HIdRFew3suZkQZOLuqm
ncl+5mGbC8Hr//YcR91LHPYDQ/4BdTNxI3U45zC7ZZ8x+KNhP7l3osGvg1nqHH5C
6HF8v2kxdghXYX+apgj92EAk7npfLvpkXjvCczdrMNLO3o/PHnGwBby5S3CX3xqz
3Gha29zRJpV1/OYdmfM9DDa07XSMaxCOAhmP0EBmbswZhma5F1pI6YGadXML6HDy
YICVeNepB/fJCmd9G5pqkZIAUMMl4ieJTDCn5mzFHRgaJzVLHVgKRLmsWWFPLRxh
AgMBAAGjggllMIIJYTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJVcYHMuXHaZhEGV
k6o4qIwQuyKMMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsG
AQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNl
bmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNl
bmNyeXB0Lm9yZy8wggcZBgNVHREEggcQMIIHDIISY2FsdmVydGNvbm5lY3QuY29t
ghhjYW5mb3JkZ2xvYmFsY29ubmVjdC5jb22CE2NhbmlzaXVzY29ubmVjdC5jb22C
FGNhcmRpbmFsc2Nvbm5lY3QuY29tghRjYXJlZXJkZXNpZ25sYWJzLm9yZ4IQY2Fy
cmVpcmFzdXZ2LmNvbYIRY2Fycm9sbGFsdW1uaS5jb22CEmNhcnJvbGxjb25uZWN0
LmNvbYITY2J1bXVzaWNjb25uZWN0LmNvbYIOY2RsLWZhbWlseS5vcmeCFGNkbC5z
cHMuY29sdW1iaWEuZWR1ghFjZW50cmFsYWx1bW5pLmNvbYISY2VudHJ1bWNvbm5l
Y3QuY29tghNjaGFkd2lja2Nvbm5lY3Qub3JnghJjaGFodGFzY2hvbGFycy5jb22C
FGNoYW1wbGFpbmNvbm5lY3Qub3JnghJjaGFyZ2VyY29ubmVjdC5vcmeCFGNodXJj
aGlsbGNvbm5lY3QuY29tghBjaXR5dWNvbm5lY3QuY29tghJjbGVvY29ubmVjdGlv
bi5jb22CE2NsaXBwZXJzY29ubmVjdC5vcmeCDmNsdWNvbm5lY3QuY29tghRjb2Rh
bHVtbmljb25uZWN0LmNvbYIXY29rZXNjaG9sYXJzY29ubmVjdC5vcmeCF2NvbGxl
Z2V0cmFja2Nvbm5lY3QuY29tghpjb2xvcmFkb2FjYWRlbXljb25uZWN0Lm9yZ4IZ
Y29sdW1idXNhY2FkZW15YWx1bW5pLm9yZ4IVY29tbXVuaWtleW5ldHdvcmsuY29t
gg9jb25uZWN0LmNidS5lZHWCFWNvbm5lY3QuaGFydmFyZGFlLm9yZ4IWY29ubmVj
dC5wZXBwZXJkaW5lLmVkdYISY29ubmVjdC5wc2ljaGkub3JnghJjb25uZWN0LnJ1
dy5lZHUuYmiCHGNvbm5lY3Qud29vZHN0b2NrYWNhZGVteS5vcmeCE2Nvbm5lY3Qy
YnJpc3RvbC5vcmeCD2Nvbm5lY3RidW1jLmNvbYIOY29ubmVjdGRkZC5vcmeCFWNv
bm5lY3RnZXR0eXNidXJnLmNvbYIWY29ubmVjdGxhdGluc2Nob29sLm9yZ4ISY29u
bmVjdHMuZW1vcnkuZWR1ghZ3d3cuY2FsdmVydGNvbm5lY3QuY29tghx3d3cuY2Fu
Zm9yZGdsb2JhbGNvbm5lY3QuY29tghd3d3cuY2FuaXNpdXNjb25uZWN0LmNvbYIY
d3d3LmNhcmRpbmFsc2Nvbm5lY3QuY29tghh3d3cuY2FyZWVyZGVzaWdubGFicy5v
cmeCFHd3dy5jYXJyZWlyYXN1dnYuY29tghV3d3cuY2Fycm9sbGFsdW1uaS5jb22C
Fnd3dy5jYXJyb2xsY29ubmVjdC5jb22CF3d3dy5jYnVtdXNpY2Nvbm5lY3QuY29t
ghJ3d3cuY2RsLWZhbWlseS5vcmeCGHd3dy5jZGwuc3BzLmNvbHVtYmlhLmVkdYIV
d3d3LmNlbnRyYWxhbHVtbmkuY29tghZ3d3cuY2VudHJ1bWNvbm5lY3QuY29tghd3
d3cuY2hhZHdpY2tjb25uZWN0Lm9yZ4IWd3d3LmNoYWh0YXNjaG9sYXJzLmNvbYIY
d3d3LmNoYW1wbGFpbmNvbm5lY3Qub3JnghZ3d3cuY2hhcmdlcmNvbm5lY3Qub3Jn
ghh3d3cuY2h1cmNoaWxsY29ubmVjdC5jb22CFHd3dy5jaXR5dWNvbm5lY3QuY29t
ghZ3d3cuY2xlb2Nvbm5lY3Rpb24uY29tghd3d3cuY2xpcHBlcnNjb25uZWN0Lm9y
Z4ISd3d3LmNsdWNvbm5lY3QuY29tghh3d3cuY29kYWx1bW5pY29ubmVjdC5jb22C
G3d3dy5jb2tlc2Nob2xhcnNjb25uZWN0Lm9yZ4Ibd3d3LmNvbGxlZ2V0cmFja2Nv
bm5lY3QuY29tgh53d3cuY29sb3JhZG9hY2FkZW15Y29ubmVjdC5vcmeCHXd3dy5j
b2x1bWJ1c2FjYWRlbXlhbHVtbmkub3Jnghl3d3cuY29tbXVuaWtleW5ldHdvcmsu
Y29tghN3d3cuY29ubmVjdC5jYnUuZWR1ghl3d3cuY29ubmVjdC5oYXJ2YXJkYWUu
b3Jnghp3d3cuY29ubmVjdC5wZXBwZXJkaW5lLmVkdYIWd3d3LmNvbm5lY3QucHNp
Y2hpLm9yZ4IWd3d3LmNvbm5lY3QucnV3LmVkdS5iaIIXd3d3LmNvbm5lY3QyYnJp
c3RvbC5vcmeCE3d3dy5jb25uZWN0YnVtYy5jb22CEnd3dy5jb25uZWN0ZGRkLm9y
Z4IZd3d3LmNvbm5lY3RnZXR0eXNidXJnLmNvbYIad3d3LmNvbm5lY3RsYXRpbnNj
aG9vbC5vcmcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm
BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEE
AdZ5AgQCBIH1BIHyAPAAdwBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZ
EwAAAWwe9a0PAAAEAwBIMEYCIQDPHVB2DYjdUsltm94ZZv47aVBfpxfev2pw9Psv
m6BKzAIhAIAUbkmXx48YXINVaQPmn2y78z6dLi9CCM+sbVA2aVhdAHUAKTxRllTI
OWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFsHvWuNAAABAMARjBEAiB0wUN7
8o0BWqZm7+mN2BW3pepnczI9PboklCtkojCClwIgZfZZBZyykku9eve3HOJs4his
PKOn1AdrX6TPtIYUbrswDQYJKoZIhvcNAQELBQADggEBAAU5us5BXcDVEKjD8/Gd
STsknr5JKejkTxFHsdEnhViMwfCkW7YukmiGtw52fB8pHPBSCcHyMDC5VThi/pWw
KA7GLZO4tCLh3ai7uu9EhEW9Efr7DvLaNRqtYrDe6YOg+3gQ4TlEjg6U3DpZP4IW
j0g3yeQHVbCnPAt0f8ZUPiTabwitUt4fG/3O1o2Dt69P97P7Fu9zV9TPj+4E1nUW
f8V34jluuxTDtaeMH0vMOP8zv044eWU+Ik5+2W17D19WAw6LLlu9IgM5uRIgnxCh
eAYd45QEu9RHCFx+RKXKzgaY1Vtt+QKH9OySm0B4Ibq3HunN8CjoRkgnGlCWR4HL
wVQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVzY5tZmAlXA2IvDq67J
2E71KxSSUljoA8mwqbCfHFO0d9YFdoYehZA2GoK5qquUhOByHURXsN7LmZEGTi7q
pp3JfuZhmwvB6//2HEfdSxz2A0P+AXUzcSN1OOcwu2WfMfijYT+5d6LBr4NZ6hx+
QuhxfL9pMXYIV2F/mqYI/dhAJO56Xy76ZF47wnM3azDSzt6Pzx5xsAW8uUtwl98a
s9xoWtvc0SaVdfzmHZnzPQw2tO10jGsQjgIZj9BAZm7MGYZmuRdaSOmBmnVzC+hw
8mCAlXjXqQf3yQpnfRuaapGSAFDDJeIniUwwp+ZsxR0YGic1Sx1YCkS5rFlhTy0c
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315374366558352658020818321364400823547201
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-23 12:11:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-21 12:11:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'connectlatinschool.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16835479256876240187823743585972903073428056464944451924089736098359448874835857576074511399922379102970118095657179968514323330510227325776517158411485255695036338903208940645283932784131458508972491751912458227505005784213837845640302875513980928436475368617368129458777364332162789701131353204917789235777503110528251341795837121712330667961815863509006139187347593983653538142146497210563156510760932026256016439245839802817624293801472440822197524056918783364193247354138991644328355091186598475176938949276282314849347757508738065263857533453614552800332852223968379563262696111357816745625983610770217014991969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							955c60732e5c769984419593aa38a88c10bb228c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1808 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calvertconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canfordglobalconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canisiusconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardinalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careerdesignlabs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carreirasuvv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrollalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrollconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbumusicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdl-family.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdl.sps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centrumconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chadwickconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chahtascholars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'champlainconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chargerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchillconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleoconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clippersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cluconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cokescholarsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegetrackconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradoacademyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbusacademyalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communikeynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.cbu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.harvardae.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.pepperdine.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.psichi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.ruw.edu.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.woodstockacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect2bristol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectbumc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectddd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectgettysburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectlatinschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connects.emory.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.calvertconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canfordglobalconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canisiusconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardinalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.careerdesignlabs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carreirasuvv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrollalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrollconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbumusicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdl-family.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdl.sps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centrumconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chadwickconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chahtascholars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.champlainconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chargerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.churchillconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cleoconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clippersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cluconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cokescholarsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegetrackconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coloradoacademyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbusacademyalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communikeynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.cbu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.harvardae.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.pepperdine.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.psichi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.ruw.edu.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect2bristol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectbumc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectddd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectgettysburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectlatinschool.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c1ef5ad0f0000040300483046022100cf1d50760d88dd52c96d9bde1966fe3b69505fa717debf6a70f4fb2f9ba04acc02210080146e4997c78f185c83556903e69f6cbbf33e9d2e2f4208cfac6d503669585d007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c1ef5ae340000040300463044022074c1437bf28d015aa666efe98dd815b7a5ea6773323d3dba24942b64a2308297022065f659059cb2924bbd7af7b71ce26ce218ac3ca3a7d4076b5fa4cfb486146ebb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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