us.prod.campusgroups.com

Issued by R3

About this certificate

This digital certificate with serial number 04:f4:00:7e:55:b3:f0:08:be:1b:f4:54:a1:fa:7b:c5:66:b1 was issued on by Let's Encrypt.

With 79 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=us.prod.campusgroups.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f4:00:7e:55:b3:f0:08:be:1b:f4:54:a1:fa:7b:c5:66:b1
Serial Number (int): 431478697223415091431814478974470882420401
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: cc:79:63:61:dc:9a:0a:08:35:67:93:3c:19:b5:87:bc:96:6f:93:18
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 77:99:0c:e4:42:6b:fe:4f:af:e4:8f:1f:6a:74:79:5e:d9:54:af:02
Fingerprint (sha256): 1c:50:dc:26:82:f6:c5:ec:ba:c8:bc:be:82:c5:87:81:4b:2c:f9:c7:f8:b3:f5:d3:bc:90:cd:66:00:27:4a:00

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate us.prod.campusgroups.com

79

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for us.prod.campusgroups.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1850.udayton.edu
activities.upike.edu
al.ucdavis.edu
alumnigroups.som.yale.edu
archway.ramapo.edu
belong.babson.edu
bengaged.binghamton.edu
bridge.loyola.edu
bullsconnect.usf.edu
campusconnect.kaust.edu.sa
campusgroups.erau.edu
campusgroups.rit.edu
campusgroups.rivier.edu
campusgroups.uci.edu
cardinalengage.stanford.edu
ccc.rochester.edu
clubs.marshall.usc.edu
clubs.washcoll.edu
community.case.edu
connect.altoona.psu.edu
connect.crown.edu
connect.fvtc.edu
connect.lassonde.yorku.ca
connect.law.columbia.edu
connect.ung.edu
connect.uwstout.edu
connect.westvalley.edu
crimsonconnect.du.edu
dukegroups.com
eagleconnect.lasierra.edu
eaglelife.erau.edu
embark.mtholyoke.edu
engage.abington.psu.edu
engage.bates.edu
engage.bridgew.edu
engage.colum.edu
engage.gettysburg.edu
engage.mit.edu
engage.mmm.edu
engage.ualr.edu
engage.usc.edu
giesgroups.illinois.edu
group.aaaafoundation.org
groups.ccny.cuny.edu
groups.chicagobooth.edu
groups.gsb.columbia.edu
groups.som.yale.edu
groups.ucsf.edu
groups.wharton.upenn.edu
ibelong.byui.edu
involvement.ubalt.edu
lionconnect.sl.psu.edu
luhub.lamar.edu
mason360.gmu.edu
my.princeton.edu
myfletcher.tufts.edu
myhc.holycross.edu
mylim.limcollege.edu
myraft.csumb.edu
oneschulich.yorku.ca
orgcentral.k-state.edu
ourcampus.lafayette.edu
questromcommon.bu.edu
ramconnect.wcupa.edu
saintsconnect.flagler.edu
saintslife.css.edu
shiplink.ship.edu
shoreline.ucsb.edu
sloangroups.mit.edu
students.grainger.illinois.edu
thehub.nmu.edu
theyard.bowiestate.edu
tigerlink.lsu.edu
ucore.uco.edu
ugroups.ucollege.edu
us.prod.campusgroups.com
virtualfairs.ucsd.edu
warriorlife.csustan.edu
yaleconnect.yale.edu

Other certificates including the domain name campusgroups.com

(limited to 100 certificates)
us.prod.campusgroups.com
us.prod.campusgroups.com
blog.campusgroups.com
ssl378409.cloudflaressl.com
ssl378409.cloudflaressl.com
eu.prod.campusgroups.com
eu.prod.campusgroups.com
us.prod.campusgroups.com
ssl275802.cloudflaressl.com
au.prod.campusgroups.com
eu.prod.campusgroups.com
us.prod.campusgroups.com
blog.campusgroups.com
us.prod.campusgroups.com
ssl378409.cloudflaressl.com
blog.campusgroups.com
ssl378408.cloudflaressl.com
ssl378410.cloudflaressl.com
eu.prod.campusgroups.com
us.prod.campusgroups.com
ssl378410.cloudflaressl.com
ssl378410.cloudflaressl.com
eu.prod.campusgroups.com
blog.campusgroups.com
ssl378408.cloudflaressl.com
ssl275802.cloudflaressl.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
ssl378409.cloudflaressl.com
us.prod.campusgroups.com
*.campusgroups.com
ssl378408.cloudflaressl.com
us.prod.campusgroups.com
ssl378408.cloudflaressl.com
eu.prod.campusgroups.com
ssl275802.cloudflaressl.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
us.prod.campusgroups.com
us.prod.campusgroups.com
ssl378410.cloudflaressl.com
ssl378409.cloudflaressl.com
ssl378410.cloudflaressl.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
ssl93421.cloudflare.com
ssl378410.cloudflaressl.com
ssl275802.cloudflaressl.com
ssl378408.cloudflaressl.com
ssl378409.cloudflaressl.com
us.prod.campusgroups.com
us.prod.campusgroups.com
ssl378410.cloudflaressl.com
*.campusgroups.com
us.prod.campusgroups.com
us.prod.campusgroups.com
us.prod.campusgroups.com
us.prod.campusgroups.com
*.campusgroups.com
ssl378410.cloudflaressl.com
ssl378408.cloudflaressl.com
blog.campusgroups.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
blog.campusgroups.com
*.campusgroups.com
ssl378410.cloudflaressl.com
blog.campusgroups.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
ssl378410.cloudflaressl.com
ssl378409.cloudflaressl.com
us.prod.campusgroups.com
blog.campusgroups.com
ssl378408.cloudflaressl.com
us.prod.campusgroups.com
ssl275802.cloudflaressl.com
ssl378408.cloudflaressl.com
*.campusgroups.com
eu.prod.campusgroups.com
ssl378410.cloudflaressl.com
ssl378410.cloudflaressl.com
ssl378408.cloudflaressl.com
sni.cloudflaressl.com
eu.prod.campusgroups.com
ssl378408.cloudflaressl.com
eu.prod.campusgroups.com
ssl378410.cloudflaressl.com
*.campusgroups.com
eu.prod.campusgroups.com
ssl378408.cloudflaressl.com
ssl378409.cloudflaressl.com
ssl378410.cloudflaressl.com
ssl378409.cloudflaressl.com
*.campusgroups.com
ssl378409.cloudflaressl.com
*.campusgroups.com
ssl378409.cloudflaressl.com
ssl378408.cloudflaressl.com
ssl378410.cloudflaressl.com

Certificate

The complete raw certificate details for us.prod.campusgroups.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QRdpVbHfbBPrnrPzlRS
DP/nthc90W9gAEifhpH+4FfYXp7WQvNO04pQGynJvG6wF6UAvrs5H7r5f2kt5POI
DrmC6ypnTEn0PalpH96AKbOQqYfpxprvnXkoEutk45D1BOa6nwcJs+/hlKqBXnd7
Ch5eizRR6J9JCrFfwNpoGbeBP4x7u/a2HcG2AqNh7P0JGRGEJKXFSfahNFx1W+V3
RIiKJ+GT4JIjeshCV/2F+1jSFtmp30mChVyjyUkIO7EVrR5U2NhTxmfce5VkQfIY
Vfwi22aoSLs0sGHusm007gysLZUJvSV9scHt4Z5Kgb3e+OWIKswFEao11U+5k4NM
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 431478697223415091431814478974470882420401
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-07 07:08:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-07 07:08:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'us.prod.campusgroups.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26385958596157252851248462835077620500525998934778176428640991864057107669238333593952597249582697585678261953159561902749967165370639211940940483167579039640630976507773100025669078623312674639238872447790849016633377036560940101212176298240960800967860050213333078006826814122229538904837311230774118706226009255766968646501056172970307778262163710929937267777112273357534497338442814549365432664484289268550687896800373714852409973162702346561463127287182663102043730119023146453472101646536539876675338057952298835689274725592321360099240897460207670158213110527884047378910433242135759183579643725253777979296813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cc796361dc9a0a083567933c19b587bc966f9318
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1712 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1850.udayton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activities.upike.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'al.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnigroups.som.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archway.ramapo.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belong.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bengaged.binghamton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridge.loyola.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bullsconnect.usf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusconnect.kaust.edu.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusgroups.erau.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusgroups.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusgroups.rivier.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusgroups.uci.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardinalengage.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccc.rochester.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubs.marshall.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubs.washcoll.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.case.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.altoona.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.crown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.fvtc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.lassonde.yorku.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.law.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.ung.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.uwstout.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.westvalley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crimsonconnect.du.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dukegroups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eagleconnect.lasierra.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eaglelife.erau.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embark.mtholyoke.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.abington.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.bates.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.bridgew.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.colum.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.gettysburg.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.mit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.mmm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.ualr.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giesgroups.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'group.aaaafoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groups.ccny.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groups.chicagobooth.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groups.gsb.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groups.som.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groups.ucsf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groups.wharton.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibelong.byui.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'involvement.ubalt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lionconnect.sl.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luhub.lamar.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mason360.gmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfletcher.tufts.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhc.holycross.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylim.limcollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myraft.csumb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneschulich.yorku.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orgcentral.k-state.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourcampus.lafayette.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'questromcommon.bu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramconnect.wcupa.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintsconnect.flagler.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintslife.css.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shiplink.ship.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoreline.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sloangroups.mit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'students.grainger.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehub.nmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theyard.bowiestate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tigerlink.lsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucore.uco.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ugroups.ucollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.prod.campusgroups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualfairs.ucsd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warriorlife.csustan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yaleconnect.yale.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017e3394e0b50000040300463044022079184b33be83d671a8d6110f819bec1533eba8e93f330d10e9315a5a003fc287022079cb4e2223f28513ffc454e68bf6298f24da3f46b825d26d366d14aa3c1119c200760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017e3394e2bf0000040300473045022077e4b90367b09db937882e637d1c7ffb8c62b849a4b6e6c104e933882681a147022100adac3178028c70a61d8e066ae005512fa7064db1bf835a28d634632633318ae0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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