canisiusconnect.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:36:2b:f2:be:27:40:54:62:d3:3d:ea:47:55:68:c0:fd:56 was issued on by Let's Encrypt.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=canisiusconnect.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:36:2b:f2:be:27:40:54:62:d3:3d:ea:47:55:68:c0:fd:56
Serial Number (int): 279770522805437565866674638599583181110614
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e4:61:bb:d0:36:da:69:58:0f:ef:29:cd:8c:7c:4c:4f:2d:72:bc:d4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7b:1c:2b:27:65:e0:33:02:79:73:0d:74:cb:71:37:43:82:60:86:33
Fingerprint (sha256): 19:4c:63:d8:39:ca:b1:89:8f:23:6a:45:35:c7:ba:a5:d7:a2:f0:03:6b:f5:b2:42:9a:9b:6a:c7:7e:5b:d3:67

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate canisiusconnect.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for canisiusconnect.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cadetcommunity.com
canisiusconnect.com
cardinalsconnect.com
careerdesignlabs.org
carreirasuvv.com
carrollalumni.com
carrollconnect.com
cbumusicconnect.com
cdl-family.org
cdl.sps.columbia.edu
centralalumni.com
centrumconnect.com
chadwickconnect.org
chahtascholars.com
champlainconnect.org
chargerconnect.org
churchillconnect.com
cityuconnect.com
cleoconnection.com
clippersconnect.org
cluconnect.com
codalumniconnect.com
cokescholarsconnect.org
collegetrackconnect.com
coloradoacademyconnect.org
columbusacademyalumni.org
communikeynetwork.com
connect.cbu.edu
connect.harvardae.org
connect.psichi.org
connect.ruw.edu.bh
connect.woodstockacademy.org
connect2bristol.org
connectbumc.com
connectddd.org
connectgettysburg.com
connectlatinschool.org
connects.emory.edu
connectstc.com
cookeconnect.com
cooperalumnione.com
coppeadconnect.com
corviasconnects.com
cpl-alumni.org
crew-connect.org
crusadersconnect.org
csun.matadormentoring.com
cualumni.network
cuembaalumni.com
www.cadetcommunity.com
www.canisiusconnect.com
www.cardinalsconnect.com
www.careerdesignlabs.org
www.carreirasuvv.com
www.carrollalumni.com
www.carrollconnect.com
www.cbumusicconnect.com
www.cdl-family.org
www.cdl.sps.columbia.edu
www.centralalumni.com
www.centrumconnect.com
www.chadwickconnect.org
www.chahtascholars.com
www.champlainconnect.org
www.chargerconnect.org
www.churchillconnect.com
www.cityuconnect.com
www.cleoconnection.com
www.clippersconnect.org
www.cluconnect.com
www.codalumniconnect.com
www.cokescholarsconnect.org
www.collegetrackconnect.com
www.coloradoacademyconnect.org
www.columbusacademyalumni.org
www.communikeynetwork.com
www.connect.cbu.edu
www.connect.harvardae.org
www.connect.psichi.org
www.connect.ruw.edu.bh
www.connect2bristol.org
www.connectbumc.com
www.connectddd.org
www.connectgettysburg.com
www.connectlatinschool.org
www.connectstc.com
www.cookeconnect.com
www.cooperalumnione.com
www.coppeadconnect.com
www.corviasconnects.com
www.cpl-alumni.org
www.crew-connect.org
www.crusadersconnect.org
www.cualumni.network
www.cuembaalumni.com

Other certificates including the domain name canisiusconnect.com

(limited to 100 certificates)
connect.woodstockacademy.org
canisiusconnect.com
canterburycommunity.org
canisiusconnect.com
canisiusconnect.com
cecconnect.com
connectlatinschool.org
canisiusconnect.com
canisiusconnect.com
cooperalumnione.com
cecconnect.com
canisiusconnect.com
canisiusconnect.com
canterburycommunity.org
cooperalumnione.com
canisiusconnect.com
canisiusconnect.com
canisiusconnect.com
cooperalumnione.com
cecconnect.com
careerservices.manual.graduway.com
cadetcommunity.com
canisiusconnect.com
canisiusconnect.com
connectgettysburg.com
canisiusconnect.com
canisiusconnect.com
cecconnect.com
cecconnect.com
canisiusconnect.com
m.canisiusconnect.com
collegecrusadenetwork.com
canterburycommunity.org
cooperalumnione.com
cecconnect.com
cualumni.network
cardinalsconnect.com
canisiusconnect.com
cooperalumnione.com
canisiusconnect.com
cadetcommunity.com
m.canisiusconnect.com
canisiusconnect.com
canterburycommunity.org
canterburycommunity.org
canterburycommunity.org
cooperalumnione.com
coloradoacademyconnect.org
connect.pepperdine.edu
cecconnect.com
canisiusconnect.com
canisiusconnect.com
cooperalumnione.com
cecconnect.com
canisiusconnect.com
cooperalumnione.com
canisiusconnect.com
cardinalsconnect.com
collegecrusadenetwork.com
canisiusconnect.com
cooperalumnione.com
cooperalumnione.com
m.canisiusconnect.com
cardinalsconnect.com
canterburycommunity.org
cecconnect.com
cecconnect.com
collegecrusadenetwork.com
canisiusconnect.com
canisiusconnect.com
canterburycommunity.org
collegecrusadenetwork.com
cooperalumnione.com
collegecrusadenetwork.com
cardinalsconnect.com
cooperalumnione.com
connect.woodstockacademy.org
cecconnect.com
canisiusconnect.com
canisiusconnect.com
cooperalumnione.com
canisiusconnect.com
collegecrusadenetwork.com
collegecrusadenetwork.com

Certificate

The complete raw certificate details for canisiusconnect.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINqjCCDJKgAwIBAgISAzYr8r4nQFRi0z3qR1VowP1WMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MTMxOTU2NDVaFw0x
OTExMTExOTU2NDVaMB4xHDAaBgNVBAMTE2NhbmlzaXVzY29ubmVjdC5jb20wggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJK5z8jV4EziPcjILpTzy8dy8I
uYnYDpAql6rEOP+Neso4lNHvHFGBfHpHCfOGQDwC41NZIRcIJIBGB/9s2Cdkyxat
SKkHlyANdvPJjLr90e0VRahAgvCP0sW0izLuVZo9KAs8QhvoR3L7k0JELNS3ffVd
3keRzRyA5F6UHShxqYM4W6GfN6IPvOAbY6AgUK8d481zu5kSqMF41uKOZM3jyZRc
jAXolUQfdGoqfDEe6rlxogFlQuo0TdW3TPlwtDlrWjm+RtJqf5pkxZEoHsoo5CEm
iSrnWYvbsk2tV8iPA57onffMk3HS7wctTIEzo6jSExqVtOF5N4opVkBFh62/AgMB
AAGjggq0MIIKsDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFORhu9A22mlYD+8pzYx8
TE8tcrzUMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUF
BwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNy
eXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy
eXB0Lm9yZy8wgghoBgNVHREEgghfMIIIW4ISY2FkZXRjb21tdW5pdHkuY29tghNj
YW5pc2l1c2Nvbm5lY3QuY29tghRjYXJkaW5hbHNjb25uZWN0LmNvbYIUY2FyZWVy
ZGVzaWdubGFicy5vcmeCEGNhcnJlaXJhc3V2di5jb22CEWNhcnJvbGxhbHVtbmku
Y29tghJjYXJyb2xsY29ubmVjdC5jb22CE2NidW11c2ljY29ubmVjdC5jb22CDmNk
bC1mYW1pbHkub3JnghRjZGwuc3BzLmNvbHVtYmlhLmVkdYIRY2VudHJhbGFsdW1u
aS5jb22CEmNlbnRydW1jb25uZWN0LmNvbYITY2hhZHdpY2tjb25uZWN0Lm9yZ4IS
Y2hhaHRhc2Nob2xhcnMuY29tghRjaGFtcGxhaW5jb25uZWN0Lm9yZ4ISY2hhcmdl
cmNvbm5lY3Qub3JnghRjaHVyY2hpbGxjb25uZWN0LmNvbYIQY2l0eXVjb25uZWN0
LmNvbYISY2xlb2Nvbm5lY3Rpb24uY29tghNjbGlwcGVyc2Nvbm5lY3Qub3Jngg5j
bHVjb25uZWN0LmNvbYIUY29kYWx1bW5pY29ubmVjdC5jb22CF2Nva2VzY2hvbGFy
c2Nvbm5lY3Qub3Jnghdjb2xsZWdldHJhY2tjb25uZWN0LmNvbYIaY29sb3JhZG9h
Y2FkZW15Y29ubmVjdC5vcmeCGWNvbHVtYnVzYWNhZGVteWFsdW1uaS5vcmeCFWNv
bW11bmlrZXluZXR3b3JrLmNvbYIPY29ubmVjdC5jYnUuZWR1ghVjb25uZWN0Lmhh
cnZhcmRhZS5vcmeCEmNvbm5lY3QucHNpY2hpLm9yZ4ISY29ubmVjdC5ydXcuZWR1
LmJoghxjb25uZWN0Lndvb2RzdG9ja2FjYWRlbXkub3JnghNjb25uZWN0MmJyaXN0
b2wub3Jngg9jb25uZWN0YnVtYy5jb22CDmNvbm5lY3RkZGQub3JnghVjb25uZWN0
Z2V0dHlzYnVyZy5jb22CFmNvbm5lY3RsYXRpbnNjaG9vbC5vcmeCEmNvbm5lY3Rz
LmVtb3J5LmVkdYIOY29ubmVjdHN0Yy5jb22CEGNvb2tlY29ubmVjdC5jb22CE2Nv
b3BlcmFsdW1uaW9uZS5jb22CEmNvcHBlYWRjb25uZWN0LmNvbYITY29ydmlhc2Nv
bm5lY3RzLmNvbYIOY3BsLWFsdW1uaS5vcmeCEGNyZXctY29ubmVjdC5vcmeCFGNy
dXNhZGVyc2Nvbm5lY3Qub3Jnghljc3VuLm1hdGFkb3JtZW50b3JpbmcuY29tghBj
dWFsdW1uaS5uZXR3b3JrghBjdWVtYmFhbHVtbmkuY29tghZ3d3cuY2FkZXRjb21t
dW5pdHkuY29tghd3d3cuY2FuaXNpdXNjb25uZWN0LmNvbYIYd3d3LmNhcmRpbmFs
c2Nvbm5lY3QuY29tghh3d3cuY2FyZWVyZGVzaWdubGFicy5vcmeCFHd3dy5jYXJy
ZWlyYXN1dnYuY29tghV3d3cuY2Fycm9sbGFsdW1uaS5jb22CFnd3dy5jYXJyb2xs
Y29ubmVjdC5jb22CF3d3dy5jYnVtdXNpY2Nvbm5lY3QuY29tghJ3d3cuY2RsLWZh
bWlseS5vcmeCGHd3dy5jZGwuc3BzLmNvbHVtYmlhLmVkdYIVd3d3LmNlbnRyYWxh
bHVtbmkuY29tghZ3d3cuY2VudHJ1bWNvbm5lY3QuY29tghd3d3cuY2hhZHdpY2tj
b25uZWN0Lm9yZ4IWd3d3LmNoYWh0YXNjaG9sYXJzLmNvbYIYd3d3LmNoYW1wbGFp
bmNvbm5lY3Qub3JnghZ3d3cuY2hhcmdlcmNvbm5lY3Qub3Jnghh3d3cuY2h1cmNo
aWxsY29ubmVjdC5jb22CFHd3dy5jaXR5dWNvbm5lY3QuY29tghZ3d3cuY2xlb2Nv
bm5lY3Rpb24uY29tghd3d3cuY2xpcHBlcnNjb25uZWN0Lm9yZ4ISd3d3LmNsdWNv
bm5lY3QuY29tghh3d3cuY29kYWx1bW5pY29ubmVjdC5jb22CG3d3dy5jb2tlc2No
b2xhcnNjb25uZWN0Lm9yZ4Ibd3d3LmNvbGxlZ2V0cmFja2Nvbm5lY3QuY29tgh53
d3cuY29sb3JhZG9hY2FkZW15Y29ubmVjdC5vcmeCHXd3dy5jb2x1bWJ1c2FjYWRl
bXlhbHVtbmkub3Jnghl3d3cuY29tbXVuaWtleW5ldHdvcmsuY29tghN3d3cuY29u
bmVjdC5jYnUuZWR1ghl3d3cuY29ubmVjdC5oYXJ2YXJkYWUub3JnghZ3d3cuY29u
bmVjdC5wc2ljaGkub3JnghZ3d3cuY29ubmVjdC5ydXcuZWR1LmJoghd3d3cuY29u
bmVjdDJicmlzdG9sLm9yZ4ITd3d3LmNvbm5lY3RidW1jLmNvbYISd3d3LmNvbm5l
Y3RkZGQub3Jnghl3d3cuY29ubmVjdGdldHR5c2J1cmcuY29tghp3d3cuY29ubmVj
dGxhdGluc2Nob29sLm9yZ4ISd3d3LmNvbm5lY3RzdGMuY29tghR3d3cuY29va2Vj
b25uZWN0LmNvbYIXd3d3LmNvb3BlcmFsdW1uaW9uZS5jb22CFnd3dy5jb3BwZWFk
Y29ubmVjdC5jb22CF3d3dy5jb3J2aWFzY29ubmVjdHMuY29tghJ3d3cuY3BsLWFs
dW1uaS5vcmeCFHd3dy5jcmV3LWNvbm5lY3Qub3Jnghh3d3cuY3J1c2FkZXJzY29u
bmVjdC5vcmeCFHd3dy5jdWFsdW1uaS5uZXR3b3JrghR3d3cuY3VlbWJhYWx1bW5p
LmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG
AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkC
BAIEgfUEgfIA8AB2AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQe8xWAAAB
bIzE02YAAAQDAEcwRQIgY1EF14XuasU9pvRsjseHWEbPK+IwtlgUeG8IgSp0ZIMC
IQCsIcAjuIwCWFoGQ7muRV8tOe2i8bqOh2P14y5GaDFK5gB2ACk8UZZUyDlluqpQ
/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABbIzE03MAAAQDAEcwRQIgWCk1QKfUf/C3
d8/62fSYOhgsk4QFANv8ZgzgAsu/aKkCIQDUJev86LYp0FedrtZ5ruFE5c2oF/Qp
z74ESYigUxoW+TANBgkqhkiG9w0BAQsFAAOCAQEAJBPrmaqMzNGcAMzylUF6B9+s
+sk9PQ9p2HesCl5t7Ouw8tqMuav11rAGlxtxEZuVyLUmvZZf54+DU/qtc4Q0qhAc
HoLzUN+NBD4otMRmnfxwoLOYOLLIeh9dDLocEVaFS19h6n336MULKlPxAJpa9mV7
jN/wVmmmP4yWvVaCxuLixAqkPxJ1wrqkAPXXURVTUNmxJNFuo5tME18R/fUQ6Gd0
ur/aObb0j2atjXoe1bH/XMQln7mqdhJ62yRSpAe7xh5H96i1LmUtaKr2I1Vh5i+O
kmovhfyaLhuCftzcGLUB8kBWKmAOTDATnXJy6+pkJyDHvcmPxZlmr4FqqbTuLA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSuc/I1eBM4j3IyC6U88
vHcvCLmJ2A6QKpeqxDj/jXrKOJTR7xxRgXx6RwnzhkA8AuNTWSEXCCSARgf/bNgn
ZMsWrUipB5cgDXbzyYy6/dHtFUWoQILwj9LFtIsy7lWaPSgLPEIb6Edy+5NCRCzU
t331Xd5Hkc0cgORelB0ocamDOFuhnzeiD7zgG2OgIFCvHePNc7uZEqjBeNbijmTN
48mUXIwF6JVEH3RqKnwxHuq5caIBZULqNE3Vt0z5cLQ5a1o5vkbSan+aZMWRKB7K
KOQhJokq51mL27JNrVfIjwOe6J33zJNx0u8HLUyBM6Oo0hMalbTheTeKKVZARYet
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279770522805437565866674638599583181110614
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-13 19:56:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-11 19:56:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'canisiusconnect.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17316154264950561040729266366231199303499748866201075979844454315548554938540451198084452502717082439783027718479310253824825716940836878748582787750719143912983560746209475465988570274508048977235011921465049360774509780005269380131214715013130844533313751380166603332443134681401827426549369139508082572132683446907286252392514049123904696755641586850297776733456283899758251518636320276047060190936230594870837551046003654501109653497258838205160809267607648318953656407599311093006156132573265295357699515950837321949211884837032767528046067880343299669633252643620848294622016064005952682250157538012163377442239
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e461bbd036da69580fef29cd8c7c4c4f2d72bcd4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2143 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cadetcommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canisiusconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardinalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careerdesignlabs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carreirasuvv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrollalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrollconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbumusicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdl-family.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdl.sps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centrumconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chadwickconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chahtascholars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'champlainconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chargerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchillconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleoconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clippersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cluconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cokescholarsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegetrackconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradoacademyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbusacademyalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communikeynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.cbu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.harvardae.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.psichi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.ruw.edu.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.woodstockacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect2bristol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectbumc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectddd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectgettysburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectlatinschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connects.emory.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectstc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cooperalumnione.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coppeadconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corviasconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpl-alumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crew-connect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crusadersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csun.matadormentoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cualumni.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuembaalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cadetcommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canisiusconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardinalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.careerdesignlabs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carreirasuvv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrollalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrollconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbumusicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdl-family.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdl.sps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centrumconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chadwickconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chahtascholars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.champlainconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chargerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.churchillconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cleoconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clippersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cluconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cokescholarsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegetrackconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coloradoacademyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbusacademyalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communikeynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.cbu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.harvardae.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.psichi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.ruw.edu.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect2bristol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectbumc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectddd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectgettysburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectlatinschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectstc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cookeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cooperalumnione.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coppeadconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corviasconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpl-alumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crew-connect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crusadersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cualumni.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cuembaalumni.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c8cc4d36600000403004730450220635105d785ee6ac53da6f46c8ec7875846cf2be230b65814786f08812a746483022100ac21c023b88c02585a0643b9ae455f2d39eda2f1ba8e8763f5e32e4668314ae6007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c8cc4d3730000040300473045022058293540a7d47ff0b777cffad9f4983a182c93840500dbfc660ce002cbbf68a9022100d425ebfce8b629d0579daed679aee144e5cda817f429cfbe044988a0531a16f9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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