canisiusconnect.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ad:54:ca:33:93:0a:e6:f9:71:3f:ec:2f:4c:63:4b:01:00 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=canisiusconnect.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ad:54:ca:33:93:0a:e6:f9:71:3f:ec:2f:4c:63:4b:01:00
Serial Number (int): 320318412314267254844367505032969005498624
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1b:71:e2:ba:28:e7:51:79:f2:7c:45:34:79:6f:e2:48:2f:f0:76:e4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e2:d0:e9:67:aa:27:48:12:70:79:81:6b:e1:00:1e:96:92:7a:71:a4
Fingerprint (sha256): 19:1d:5d:5d:b5:a8:1e:c0:c1:bc:de:e3:6e:43:6e:73:44:54:b3:e0:68:f3:b3:e5:6f:ef:9f:c3:2a:71:c1:79

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate canisiusconnect.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for canisiusconnect.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

canisiusconnect.com
cardinalsconnect.com
careerdesignlabs.org
carreirasuvv.com
carrollalumni.com
carrollconnect.com
cbumusicconnect.com
cdl-family.org
cdl.sps.columbia.edu
cecconnect.com
centralalumni.com
centrumconnect.com
chadwickconnect.org
chahtascholars.com
champlainconnect.org
chargerconnect.org
churchillconnect.com
cityuconnect.com
cleoconnection.com
clippersconnect.org
cluconnect.com
codalumniconnect.com
cokescholarsconnect.org
collegecrusadenetwork.com
collegetrackconnect.com
coloradoacademyconnect.org
columbusacademyalumni.org
communikeynetwork.com
connect.cbu.edu
connect.harvardae.org
connect.psichi.org
connect.ruw.edu.bh
connect.woodstockacademy.org
connect2bristol.org
connectbumc.com
connectddd.org
connectgettysburg.com
connectlatinschool.org
connects.emory.edu
connectstc.com
connectuma.com
cookeconnect.com
cooperalumnione.com
coppeadconnect.com
corviasconnects.com
cpl-alumni.org
crew-connect.org
crusadersconnect.org
csun.matadormentoring.com
cualumni.network
cuembaalumni.com
www.canisiusconnect.com
www.cardinalsconnect.com
www.careerdesignlabs.org
www.carreirasuvv.com
www.carrollalumni.com
www.carrollconnect.com
www.cbumusicconnect.com
www.cdl-family.org
www.cdl.sps.columbia.edu
www.cecconnect.com
www.centralalumni.com
www.centrumconnect.com
www.chadwickconnect.org
www.chahtascholars.com
www.champlainconnect.org
www.chargerconnect.org
www.churchillconnect.com
www.cityuconnect.com
www.cleoconnection.com
www.clippersconnect.org
www.cluconnect.com
www.codalumniconnect.com
www.cokescholarsconnect.org
www.collegecrusadenetwork.com
www.collegetrackconnect.com
www.coloradoacademyconnect.org
www.columbusacademyalumni.org
www.communikeynetwork.com
www.connect.cbu.edu
www.connect.harvardae.org
www.connect.psichi.org
www.connect.ruw.edu.bh
www.connect2bristol.org
www.connectbumc.com
www.connectddd.org
www.connectgettysburg.com
www.connectlatinschool.org
www.connectstc.com
www.connectuma.com
www.cookeconnect.com
www.cooperalumnione.com
www.coppeadconnect.com
www.corviasconnects.com
www.cpl-alumni.org
www.crew-connect.org
www.crusadersconnect.org
www.cualumni.network
www.cuembaalumni.com

Other certificates including the domain name canisiusconnect.com

(limited to 100 certificates)
connect.woodstockacademy.org
canisiusconnect.com
canterburycommunity.org
canisiusconnect.com
canisiusconnect.com
cecconnect.com
connectlatinschool.org
canisiusconnect.com
canisiusconnect.com
cooperalumnione.com
cecconnect.com
canisiusconnect.com
canisiusconnect.com
canterburycommunity.org
cooperalumnione.com
canisiusconnect.com
canisiusconnect.com
canisiusconnect.com
cooperalumnione.com
cecconnect.com
careerservices.manual.graduway.com
cadetcommunity.com
canisiusconnect.com
canisiusconnect.com
connectgettysburg.com
canisiusconnect.com
canisiusconnect.com
cecconnect.com
cecconnect.com
canisiusconnect.com
m.canisiusconnect.com
collegecrusadenetwork.com
canterburycommunity.org
cooperalumnione.com
cecconnect.com
cualumni.network
cardinalsconnect.com
canisiusconnect.com
cooperalumnione.com
canisiusconnect.com
cadetcommunity.com
m.canisiusconnect.com
canisiusconnect.com
canterburycommunity.org
canterburycommunity.org
canterburycommunity.org
cooperalumnione.com
coloradoacademyconnect.org
connect.pepperdine.edu
cecconnect.com
canisiusconnect.com
canisiusconnect.com
cooperalumnione.com
cecconnect.com
canisiusconnect.com
cooperalumnione.com
canisiusconnect.com
cardinalsconnect.com
collegecrusadenetwork.com
canisiusconnect.com
cooperalumnione.com
cooperalumnione.com
m.canisiusconnect.com
cardinalsconnect.com
canterburycommunity.org
cecconnect.com
cecconnect.com
collegecrusadenetwork.com
canisiusconnect.com
canisiusconnect.com
canterburycommunity.org
collegecrusadenetwork.com
cooperalumnione.com
collegecrusadenetwork.com
cardinalsconnect.com
cooperalumnione.com
connect.woodstockacademy.org
cecconnect.com
canisiusconnect.com
canisiusconnect.com
cooperalumnione.com
canisiusconnect.com
collegecrusadenetwork.com
collegecrusadenetwork.com

Certificate

The complete raw certificate details for canisiusconnect.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiISvlQm02uKB2okdkN0x
lcZfFgjSBFwuaL6eSAvgHRxvCIvVUt4W0roPpeLW4ggl3ouygfuL3S+JIyVlggBv
ijHqPiS397Xh1zn/BLPe2MptjLaXMcJOqqUTMozbkV+9jdwzcCst6ME6aBJX/kw/
zRCfo7SHAyBFdZGipxb34xpvbzQhjzeoyEThABCr4bAKJIAnCo4SDLLp71jQXQcZ
8SJzXHy0l0LGOrNV+0X/JQhWLMw+oOTmNFNd8RCP9qwSw4mYmw3Ob0sdfYw/yG3F
mv/IOh4uDbc2FeAq2NfVaQ+Ak4yOSf0vPSu3yrMfXl5p0Yrh6O67aBJ3IPBEowxB
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320318412314267254844367505032969005498624
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-05 10:57:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-04 10:57:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'canisiusconnect.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17233839315443139606575688928791719695720396360141571931693952821970567668968894219949125568786779910534164867593851865839485967844258793866772567709803830317399854379468612600949832890783282752344387130566755588433946214070322020670518116392132534302906569245242851797553380116759963684347375927906962899384623266299765941584870697116995917396515606837633936687515001036405162750774772429255893865765681185356827547735134682282662188117431253496613433979976734305571231985756814260753916901541396887013881149250894722522746580718101410187315768169553873469964110428180168878872541075878599914312662163419834648117757
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1b71e2ba28e75179f27c4534796fe2482ff076e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2229 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canisiusconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardinalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careerdesignlabs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carreirasuvv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrollalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrollconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbumusicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdl-family.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdl.sps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cecconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centrumconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chadwickconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chahtascholars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'champlainconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chargerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchillconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleoconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clippersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cluconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cokescholarsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegecrusadenetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegetrackconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradoacademyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbusacademyalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communikeynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.cbu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.harvardae.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.psichi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.ruw.edu.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.woodstockacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect2bristol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectbumc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectddd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectgettysburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectlatinschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connects.emory.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectstc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectuma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cooperalumnione.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coppeadconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corviasconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpl-alumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crew-connect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crusadersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csun.matadormentoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cualumni.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuembaalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canisiusconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardinalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.careerdesignlabs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carreirasuvv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrollalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrollconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbumusicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdl-family.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdl.sps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cecconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centrumconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chadwickconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chahtascholars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.champlainconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chargerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.churchillconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cleoconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clippersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cluconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cokescholarsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegecrusadenetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegetrackconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coloradoacademyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbusacademyalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communikeynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.cbu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.harvardae.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.psichi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.ruw.edu.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect2bristol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectbumc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectddd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectgettysburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectlatinschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectstc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectuma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cookeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cooperalumnione.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coppeadconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corviasconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpl-alumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crew-connect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crusadersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cualumni.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cuembaalumni.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d014941730000040300463044022064ba2b393e08da5374e13079929fa1fd3038212a25376945d97f120d2a1a958f02200ccb79e94fd1951dcbf2a04dcf9445011c5d0b57fe06d57669441591f9831c8f007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d0149418e0000040300473045022100f55a7b3a12e5a5f7e5fc9258c03943268baeecbd1b93d2fb1e2efd78b062a2ea0220495c41551d54f60014bdeac27cd81431d8f7cb1512ce5beadb3930ee4c270e86
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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