cecconnect.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5c:dd:86:5d:67:49:ad:42:77:81:64:54:19:d4:38:4c:ba was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cecconnect.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5c:dd:86:5d:67:49:ad:42:77:81:64:54:19:d4:38:4c:ba
Serial Number (int): 292937292601301984395655128642010759056570
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 90:89:55:13:2b:55:dd:85:ea:3b:03:14:19:97:82:62:77:ac:b7:b3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6e:3b:4a:d6:6a:df:59:8b:93:5b:a2:52:a2:63:a3:b5:72:bf:32:35
Fingerprint (sha256): 22:75:56:82:74:c0:84:28:96:36:37:d3:b5:7a:4a:10:c8:95:2e:05:d8:5b:00:ec:7f:47:35:24:f5:39:90:49

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cecconnect.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cecconnect.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

canisiusconnect.com
cardinalsconnect.com
careerdesignlabs.org
carreirasuvv.com
carrollalumni.com
carrollconnect.com
cbumusicconnect.com
cdl-family.org
cdl.sps.columbia.edu
cecconnect.com
centralalumni.com
centrumconnect.com
cerritosconnect.com
chadwickconnect.org
chahtascholars.com
champlainconnect.org
chargerconnect.org
churchillconnect.com
cityuconnect.com
cleoconnection.com
clippersconnect.org
cluconnect.com
codalumniconnect.com
cokescholarsconnect.org
collegecrusadenetwork.com
collegetrackconnect.com
coloradoacademyconnect.org
columbusacademyalumni.org
communikeynetwork.com
connect.cbu.edu
connect.harvardae.org
connect.psichi.org
connect.ruw.edu.bh
connect.woodstockacademy.org
connect2bristol.org
connectbumc.com
connectddd.org
connectgettysburg.com
connectlatinschool.org
connects.emory.edu
connectstc.com
cookeconnect.com
cooperalumnione.com
coppeadconnect.com
corviasconnects.com
cpl-alumni.org
crew-connect.org
crusadersconnect.org
csun.matadormentoring.com
cualumni.network
cuembaalumni.com
www.canisiusconnect.com
www.cardinalsconnect.com
www.careerdesignlabs.org
www.carreirasuvv.com
www.carrollalumni.com
www.carrollconnect.com
www.cbumusicconnect.com
www.cdl-family.org
www.cdl.sps.columbia.edu
www.cecconnect.com
www.centralalumni.com
www.centrumconnect.com
www.cerritosconnect.com
www.chadwickconnect.org
www.chahtascholars.com
www.champlainconnect.org
www.chargerconnect.org
www.churchillconnect.com
www.cityuconnect.com
www.cleoconnection.com
www.clippersconnect.org
www.cluconnect.com
www.codalumniconnect.com
www.cokescholarsconnect.org
www.collegecrusadenetwork.com
www.collegetrackconnect.com
www.coloradoacademyconnect.org
www.columbusacademyalumni.org
www.communikeynetwork.com
www.connect.cbu.edu
www.connect.harvardae.org
www.connect.psichi.org
www.connect.ruw.edu.bh
www.connect2bristol.org
www.connectbumc.com
www.connectddd.org
www.connectgettysburg.com
www.connectlatinschool.org
www.connectstc.com
www.cookeconnect.com
www.cooperalumnione.com
www.coppeadconnect.com
www.corviasconnects.com
www.cpl-alumni.org
www.crew-connect.org
www.crusadersconnect.org
www.cualumni.network
www.cuembaalumni.com

Other certificates including the domain name cecconnect.com

(limited to 100 certificates)
canterburycommunity.org
cecconnect.com
canisiusconnect.com
cooperalumnione.com
cecconnect.com
m.cecconnect.com
canterburycommunity.org
cooperalumnione.com
cecconnect.com
cooperalumnione.com
cooperalumnione.com
cecconnect.com
cecconnect.com
cecconnect.com
collegecrusadenetwork.com
cooperalumnione.com
canterburycommunity.org
cooperalumnione.com
cooperalumnione.com
cecconnect.com
cardinalsconnect.com
canisiusconnect.com
cooperalumnione.com
cooperalumnione.com
m.cecconnect.com
cecconnect.com
canterburycommunity.org
canterburycommunity.org
cecconnect.com
canterburycommunity.org
cooperalumnione.com
m.cecconnect.com
m.cecconnect.com
cecconnect.com
cecconnect.com
cooperalumnione.com
cooperalumnione.com
cecconnect.com
canisiusconnect.com
cooperalumnione.com
m.cecconnect.com
cecconnect.com
collegecrusadenetwork.com
cooperalumnione.com
cooperalumnione.com
cecconnect.com
canterburycommunity.org
cecconnect.com
cecconnect.com
cecconnect.com
collegecrusadenetwork.com
canterburycommunity.org
collegecrusadenetwork.com
cecconnect.com
m.cecconnect.com
cooperalumnione.com
collegecrusadenetwork.com
cecconnect.com
cardinalsconnect.com
cooperalumnione.com
cecconnect.com
cooperalumnione.com
m.cecconnect.com
collegecrusadenetwork.com
collegecrusadenetwork.com

Certificate

The complete raw certificate details for cecconnect.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Cb2K3QUQdjjL2LWrD1O
zYgc9Rk4WWtnoQ/TN+5rnjQ7tLa5nOG6njv1LtMM/R2+oUy1L9QYBdRS4Yck3RKT
OIG/2wIpWtzR7B77rL7I9aRf9p3+fyFFS6+jVMRPiXE8PK17ONLpJipM+FISpuo1
Vq1DqUlxR4nJhhTdpjgiX/dOOJKpUT7im+lX7SXw40C6dQRJjwUDf+1m2YWX+KId
QwwzCOR86cN0ETnyh98S1uxjqwV75SwlGlY5CrLIF2L6l5z0r2aPpjJL+VPzeBP1
fscuPWkJuSpMUcuYeOe0QdvqQSkFuRBoEzOe5jpwSI2fQCltWq637lxpgy7D4JeN
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292937292601301984395655128642010759056570
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-08 23:30:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-06 23:30:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cecconnect.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28296592993693189196436413310251773450768808186830628193554579564163667885545407710267277573959912110716385439330130934432814358602115678164134059487641086635279951389637875041935640197620665695047781759433168477110119987294323784022329106282719277348659148747916883033243736085735669845578058314187833038171517454154587552630004363756874144340157840947364548634053127857834626201682253043866583377572936230338660313248796154541768830845596600548199669510447381189186347671045905423814774710644488000381242058084611809116178799457716552575792041979943076133557241386071779732004877229365016774834893830749699190525213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							908955132b55dd85ea3b03141997826277acb7b3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2239 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canisiusconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardinalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careerdesignlabs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carreirasuvv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrollalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrollconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbumusicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdl-family.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdl.sps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cecconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centrumconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cerritosconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chadwickconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chahtascholars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'champlainconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chargerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchillconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleoconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clippersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cluconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cokescholarsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegecrusadenetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegetrackconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradoacademyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbusacademyalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communikeynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.cbu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.harvardae.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.psichi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.ruw.edu.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.woodstockacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect2bristol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectbumc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectddd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectgettysburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectlatinschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connects.emory.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectstc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cooperalumnione.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coppeadconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corviasconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpl-alumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crew-connect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crusadersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csun.matadormentoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cualumni.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuembaalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canisiusconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardinalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.careerdesignlabs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carreirasuvv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrollalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrollconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbumusicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdl-family.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdl.sps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cecconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centrumconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cerritosconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chadwickconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chahtascholars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.champlainconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chargerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.churchillconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cleoconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clippersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cluconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cokescholarsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegecrusadenetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegetrackconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coloradoacademyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbusacademyalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communikeynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.cbu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.harvardae.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.psichi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.ruw.edu.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect2bristol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectbumc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectddd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectgettysburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectlatinschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectstc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cookeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cooperalumnione.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coppeadconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corviasconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpl-alumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crew-connect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crusadersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cualumni.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cuembaalumni.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016daded07010000040300473045022100c117a8982b3e2da422d45c89db99b05bdabebe18d5c80d2ab88112a8cd361c00022000a6f76062a0e8b088b5babb61d48ce4e6b7ffd253139c0d4668ececd898142a007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016daded07240000040300483046022100ebe0b024f1cdb08972aca74a6be126a5ff7301f85fae982ecd12ca3b7d73dd280221009a90f785e3e015ec92cd4a7782ea87ca511fe8fd09c4c00352793518468b2f9f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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