us.prod.campusgroups.com

Issued by R3

About this certificate

This digital certificate with serial number 04:f1:4d:85:c4:c5:a2:ad:2d:a6:01:78:53:be:32:12:b5:9f was issued on by Let's Encrypt.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=us.prod.campusgroups.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f1:4d:85:c4:c5:a2:ad:2d:a6:01:78:53:be:32:12:b5:9f
Serial Number (int): 430560239277155356197821152104447621641631
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: de:cd:ff:46:cd:0a:d4:08:bb:70:24:54:1a:88:35:35:63:a6:fa:ef
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f0:cb:8b:cc:5a:2b:df:56:4e:45:25:31:03:5f:e7:94:06:80:85:fa
Fingerprint (sha256): 19:08:c8:29:7f:70:21:50:32:63:5a:f2:44:fd:6e:48:d3:08:1f:f1:4f:8d:e8:31:4e:78:5b:80:81:a1:54:ad

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate us.prod.campusgroups.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for us.prod.campusgroups.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1850.udayton.edu
activities.upike.edu
aggielife.ucdavis.edu
alumnigroups.som.yale.edu
archway.ramapo.edu
beinvolved.jmu.edu
belong.babson.edu
bengaged.binghamton.edu
blugoldconnect.uwec.edu
bridge.loyola.edu
bullsconnect.usf.edu
campusconnect.kaust.edu.sa
campusgroups.erau.edu
campusgroups.rit.edu
campusgroups.rivier.edu
campusgroups.uci.edu
cardinalengage.stanford.edu
ccc.rochester.edu
clubs.marshall.usc.edu
clubs.washcoll.edu
community.case.edu
connect.altoona.psu.edu
connect.crown.edu
connect.evangel.edu
connect.fvtc.edu
connect.lassonde.yorku.ca
connect.law.columbia.edu
connect.ung.edu
connect.uwstout.edu
connect.westvalley.edu
crimsonconnect.du.edu
dartmouthgroups.dartmouth.edu
dukegroups.com
eagleconnect.lasierra.edu
eagleengage.tntech.edu
eaglelife.erau.edu
embark.mtholyoke.edu
engage.abington.psu.edu
engage.bates.edu
engage.bridgew.edu
engage.colum.edu
engage.gettysburg.edu
engage.missouri.edu
engage.mit.edu
engage.mmm.edu
engage.ualr.edu
engage.usc.edu
getinvolved.wsc.edu
giesgroups.illinois.edu
group.aaaafoundation.org
groups.ccny.cuny.edu
groups.chicagobooth.edu
groups.gsb.columbia.edu
groups.som.yale.edu
groups.wharton.upenn.edu
hub.houghton.edu
ibelong.byui.edu
involvement.ubalt.edu
jacketconnect.bw.edu
lionconnect.sl.psu.edu
luhub.lamar.edu
manesync.tamuc.edu
mason360.gmu.edu
minerlink.mst.edu
my.princeton.edu
my.snc.edu
myfletcher.tufts.edu
myhc.holycross.edu
mylim.limcollege.edu
mypnwlife.pnw.edu
myraft.csumb.edu
oneschulich.yorku.ca
orgcentral.k-state.edu
ourcampus.lafayette.edu
pantherportal.acphs.edu
questromcommon.bu.edu
ramconnect.wcupa.edu
roogroups.umkc.edu
royalsync.scranton.edu
saintsconnect.flagler.edu
saintslife.css.edu
shiplink.ship.edu
shoreline.ucsb.edu
sloangroups.mit.edu
students.grainger.illinois.edu
tartanconnect.cmu.edu
thehub.nmu.edu
theyard.bowiestate.edu
thrivegroups.sbathrive.com
tigerlink.lsu.edu
tritonconnect.umsl.edu
ucore.uco.edu
ugroups.ucollege.edu
us.prod.campusgroups.com
virtualfairs.ucsd.edu
warriorlife.csustan.edu
yaleconnect.yale.edu

Other certificates including the domain name campusgroups.com

(limited to 100 certificates)
us.prod.campusgroups.com
us.prod.campusgroups.com
blog.campusgroups.com
ssl378409.cloudflaressl.com
ssl378409.cloudflaressl.com
eu.prod.campusgroups.com
eu.prod.campusgroups.com
us.prod.campusgroups.com
ssl275802.cloudflaressl.com
eu.prod.campusgroups.com
us.prod.campusgroups.com
blog.campusgroups.com
us.prod.campusgroups.com
ssl378409.cloudflaressl.com
blog.campusgroups.com
ssl378408.cloudflaressl.com
ssl378410.cloudflaressl.com
eu.prod.campusgroups.com
us.prod.campusgroups.com
ssl378410.cloudflaressl.com
ssl378410.cloudflaressl.com
eu.prod.campusgroups.com
ssl378408.cloudflaressl.com
ssl275802.cloudflaressl.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
ssl378409.cloudflaressl.com
us.prod.campusgroups.com
*.campusgroups.com
ssl378408.cloudflaressl.com
us.prod.campusgroups.com
ssl378408.cloudflaressl.com
eu.prod.campusgroups.com
ssl275802.cloudflaressl.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
us.prod.campusgroups.com
us.prod.campusgroups.com
ssl378410.cloudflaressl.com
ssl378409.cloudflaressl.com
ssl378410.cloudflaressl.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
ssl93421.cloudflare.com
ssl378410.cloudflaressl.com
ssl275802.cloudflaressl.com
ssl378408.cloudflaressl.com
ssl378409.cloudflaressl.com
us.prod.campusgroups.com
us.prod.campusgroups.com
ssl378410.cloudflaressl.com
*.campusgroups.com
us.prod.campusgroups.com
us.prod.campusgroups.com
us.prod.campusgroups.com
us.prod.campusgroups.com
*.campusgroups.com
ssl378410.cloudflaressl.com
ssl378408.cloudflaressl.com
blog.campusgroups.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
blog.campusgroups.com
*.campusgroups.com
ssl378410.cloudflaressl.com
blog.campusgroups.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
ssl378410.cloudflaressl.com
ssl378409.cloudflaressl.com
us.prod.campusgroups.com
blog.campusgroups.com
ssl378408.cloudflaressl.com
us.prod.campusgroups.com
ssl275802.cloudflaressl.com
ssl378408.cloudflaressl.com
*.campusgroups.com
eu.prod.campusgroups.com
ssl378410.cloudflaressl.com
ssl378410.cloudflaressl.com
ssl378408.cloudflaressl.com
sni.cloudflaressl.com
eu.prod.campusgroups.com
ssl378408.cloudflaressl.com
eu.prod.campusgroups.com
ssl378410.cloudflaressl.com
*.campusgroups.com
eu.prod.campusgroups.com
ssl378408.cloudflaressl.com
ssl378409.cloudflaressl.com
ssl378410.cloudflaressl.com
ssl378409.cloudflaressl.com
*.campusgroups.com
ssl378409.cloudflaressl.com
*.campusgroups.com
ssl378409.cloudflaressl.com
ssl378408.cloudflaressl.com
ssl378410.cloudflaressl.com
ca.prod.campusgroups.com
ssl378408.cloudflaressl.com

Certificate

The complete raw certificate details for us.prod.campusgroups.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZF2GnGI9PSwo664vlf6
RoiaKk4FbbEXWyA5F1g+kHJqB/0n45ckhO9nxJ5Fysy3pSxL0FYO3dixTzov1FHk
aD3rRtGjkU8Q6kRvJLBEydeby1j9/Kf4E5df8CjY4LEZ5zt1iUHDBjvjBsPA49ww
IefY+zFio/i8ignWUs2rW05WnMc1xGdiloXRKRLzHqHqgmWK2a6mkUZJG7SijYUi
hA/T07E5mBNgs5sVh9FCI6octV2S5CPS7LRvTh6d9fq/ZdZa/J1pdmpjpESv47g/
fkD6ljKUaltxUiAlC36SrAX42jDSwqwLWDYCmgpdGA8byHyPkbMidrYhj6jwxiLS
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 430560239277155356197821152104447621641631
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-21 08:59:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-19 08:59:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'us.prod.campusgroups.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24435722519095371077132688713735742591399687725406105235546409990018922457873658496662484497101099034770933899798485755254590149100444789715736581739483353149362639214990864962100528606219666720499198527227398156824016954021371607100621875718737590760317487703105064655737424397973566553032093154043658479325569072090359442143303949154761896874932066788016715053605157528621795506861571190329973432899404784723763270782844340828263389893482229166171085208867508712572984374061759831249409130067836013554056576597168499455015952599650753537123740816237766848079992647562038595791629755382543795984912655602912745149161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							decdff46cd0ad408bb7024541a88353563a6faef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1850.udayton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activities.upike.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aggielife.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnigroups.som.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archway.ramapo.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beinvolved.jmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belong.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bengaged.binghamton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blugoldconnect.uwec.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridge.loyola.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bullsconnect.usf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusconnect.kaust.edu.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusgroups.erau.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusgroups.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusgroups.rivier.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusgroups.uci.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardinalengage.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccc.rochester.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubs.marshall.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubs.washcoll.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.case.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.altoona.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.crown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.evangel.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.fvtc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.lassonde.yorku.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.law.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.ung.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.uwstout.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.westvalley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crimsonconnect.du.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dartmouthgroups.dartmouth.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dukegroups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eagleconnect.lasierra.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eagleengage.tntech.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eaglelife.erau.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embark.mtholyoke.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.abington.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.bates.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.bridgew.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.colum.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.gettysburg.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.missouri.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.mit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.mmm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.ualr.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getinvolved.wsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giesgroups.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'group.aaaafoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groups.ccny.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groups.chicagobooth.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groups.gsb.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groups.som.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groups.wharton.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.houghton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibelong.byui.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'involvement.ubalt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacketconnect.bw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lionconnect.sl.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luhub.lamar.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manesync.tamuc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mason360.gmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minerlink.mst.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.snc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfletcher.tufts.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhc.holycross.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylim.limcollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypnwlife.pnw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myraft.csumb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneschulich.yorku.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orgcentral.k-state.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourcampus.lafayette.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pantherportal.acphs.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'questromcommon.bu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramconnect.wcupa.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roogroups.umkc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalsync.scranton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintsconnect.flagler.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintslife.css.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shiplink.ship.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoreline.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sloangroups.mit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'students.grainger.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tartanconnect.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehub.nmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theyard.bowiestate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thrivegroups.sbathrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tigerlink.lsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tritonconnect.umsl.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucore.uco.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ugroups.ucollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.prod.campusgroups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualfairs.ucsd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warriorlife.csustan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yaleconnect.yale.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc78400000182203296df000004030047304502205dd59f663f079670057e395ea7287a54701572a3960d2b2ecf28e8ac19916aac0221009ed3c8e4e781c707498b051f05f8245b8996a3f2daea7b943dd868eacb8fb8ac0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001822032975c000004030046304402203a95bd710e5764cb7ac71da9a544698eda7087279d2a58d3c3b7cc84ae2926ec0220346a970409d38d58948b53ac8f04fffc27b93609a512978f648b202a24406ecb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008b7b38a002884bbd3de2af67e0f48bee71af0cb655921eb35162b1fa670655562535bcf176c26badf1528f5015e4647e8defc7999641686056f5f10d807016f2044085f7e789fe52ced2428d31e95ff05bae320db68981d0861a378d385af305fadc68e11d7d3815a0305b5c0d5d98f334cfcf83e7bb8dd1160fdff4e902bec0395300cfc33339f1cb99681c67cd22a287402390b63313ced42961cf81b0b507b7e2cb9a9fd2d6867dd42b72f703478aa092d80a8fcbf23f8214afb85ce2a844b33d2735306c4b3e6cbc4e3191d71ea0aab23210cf9a4217b8ad426936edd393a3edd445187cd5206c5691236044027f8693a9dc7543d66f2b215e14f57d31d7