berkshireschoolconnect.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f8:6d:0a:3e:3d:a3:9a:d2:93:e2:7c:dc:ca:c9:b2:39:5f was issued on by Let's Encrypt.

With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=berkshireschoolconnect.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f8:6d:0a:3e:3d:a3:9a:d2:93:e2:7c:dc:ca:c9:b2:39:5f
Serial Number (int): 345871823828575566622587145145615165569375
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 05:7f:3b:db:02:90:64:ec:78:14:28:0d:83:b1:48:d1:0d:d9:d3:97
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 61:71:90:95:7e:9e:c7:db:7b:24:e1:b2:95:63:aa:5b:f9:54:52:b7
Fingerprint (sha256): 22:d2:85:36:15:d7:88:50:3b:6e:26:55:67:01:2b:9f:a1:2e:9a:ab:71:9b:fe:b2:25:e7:4e:d9:b1:33:11:17

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate berkshireschoolconnect.com

72

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for berkshireschoolconnect.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

baalumninetwork.com
bacalumni.net
badgerbridgebeta.com
badgerbridgetest.manual.graduway.com
badgersinfinancetest.manual.graduway.com
baldwinalumniconnect.org
bartonalumni.com
baueralumniconnect.com
bbnsconnect.org
bbnsgraduates.org
bchighnetwork.com
beardown.arizonaalumni.com
beardownnetwork.com
beardownnetwork1.com
belenalumni.org
benjaminconnect.com
benningtonalumni.com
berkeleyischoolconnect.com
berkeleyjnetwork.com
berkeleylawlink.com
berkeleylawnetwork.com
berkeleyprepconnect.com
berkshirealumni.com
berkshireschoolconnect.com
bermudacollegeconnect.com
bgaconnects.com
bimm-connect.co.uk
bolivaralumni.com
bonnerconnect.org
bouchetconnect.org
branchout.marlboro.edu
branchoutconnect.com
brandmanalumni.com
bridgewaterconnect.com
bridgezbt.com
brockportalumniconnect.com
brooksiansconnect.com
bucsconnect.org
www.baalumninetwork.com
www.bacalumni.net
www.badgerbridgebeta.com
www.baldwinalumniconnect.org
www.bartonalumni.com
www.baueralumniconnect.com
www.bbnsconnect.org
www.bbnsgraduates.org
www.bchighnetwork.com
www.beardownnetwork.com
www.belenalumni.org
www.benjaminconnect.com
www.benningtonalumni.com
www.berkeleyischoolconnect.com
www.berkeleyjnetwork.com
www.berkeleylawlink.com
www.berkeleylawnetwork.com
www.berkeleyprepconnect.com
www.berkshirealumni.com
www.berkshireschoolconnect.com
www.bermudacollegeconnect.com
www.bgaconnects.com
www.bimm-connect.co.uk
www.bolivaralumni.com
www.bonnerconnect.org
www.bouchetconnect.org
www.branchout.marlboro.edu
www.branchoutconnect.com
www.brandmanalumni.com
www.bridgewaterconnect.com
www.bridgezbt.com
www.brockportalumniconnect.com
www.brooksiansconnect.com
www.bucsconnect.org

Other certificates including the domain name berkshireschoolconnect.com

(limited to 100 certificates)
baalumninetwork.com
bobcatconnect.org
beachwoodconnect.com
beachwoodconnect.com
baalumninetwork.com
berkshireschoolconnect.com
bestbuddiesconnect.org
boscoalumni.org
beachwoodconnect.com
bergencatholicconnect.com
beachwoodconnect.com
bbnsconnect.org
bbnsconnect.org
bobcatconnect.org
bobcatconnect.org
bucknellcareerconnect.com
berkshireschoolconnect.com
bobcatconnect.org
bergencatholicconnect.com
bbnsconnect.org
bucknellconnect.com
bobcatconnect.org
badgersinfinance.net
baalumninetwork.com
bobcatconnect.org
backlot.afi.com
bobcatconnect.org
boyslatinconnect.com
bobcatconnect.org
bucknellcareerconnect.com
bucknellconnect.com
berkshireschoolconnect.com
bonnerconnect.org
baalumninetwork.com
boscoalumni.org
bucknellcareerconnect.com
bbnsconnect.org
bucknellconnect.com
beachwoodconnect.com

Certificate

The complete raw certificate details for berkshireschoolconnect.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMDTCCCvWgAwIBAgISA/htCj49o5rSk+J83MrJsjlfMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MDUxMDE5MzRaFw0x
OTExMDMxMDE5MzRaMCUxIzAhBgNVBAMTGmJlcmtzaGlyZXNjaG9vbGNvbm5lY3Qu
Y29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqfCqc2eGUCffi5U
ZKdcawtQvryXkN1RTdTIiJFZeoLStQEPwbuWLI3ITZKYk2WlmwZ5kyJhbq1DWw00
iaLF6g7kYLVKq3MaiCh1VeYtudMlZRHD7uk8z11NyRJEC3gyMycv6eXuQv5bENA5
8daWr2IytiiB/11xWXYbsmDd2FQVfRK6ner/qs57/rFcKD7JObu4eP7SdWE/Yo+Y
tloOcldB2asaEKn+Y2RF5MQPP6sRNyCULtQsUHUSR0k1wqc4DErjtp6P3uEOlrmM
ObJeHsEj9tBSMLXIhzoiu5G1zzRD6IYSpEoSn6VPjPXxAfqTGpj4kP397b8/Vbc2
zfIakwIDAQABo4IJEDCCCQwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQFfzvbApBk
7HgUKA2DsUjRDdnTlzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv
BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s
ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s
ZXRzZW5jcnlwdC5vcmcvMIIGwwYDVR0RBIIGujCCBraCE2JhYWx1bW5pbmV0d29y
ay5jb22CDWJhY2FsdW1uaS5uZXSCFGJhZGdlcmJyaWRnZWJldGEuY29tgiRiYWRn
ZXJicmlkZ2V0ZXN0Lm1hbnVhbC5ncmFkdXdheS5jb22CKGJhZGdlcnNpbmZpbmFu
Y2V0ZXN0Lm1hbnVhbC5ncmFkdXdheS5jb22CGGJhbGR3aW5hbHVtbmljb25uZWN0
Lm9yZ4IQYmFydG9uYWx1bW5pLmNvbYIWYmF1ZXJhbHVtbmljb25uZWN0LmNvbYIP
YmJuc2Nvbm5lY3Qub3JnghFiYm5zZ3JhZHVhdGVzLm9yZ4IRYmNoaWdobmV0d29y
ay5jb22CGmJlYXJkb3duLmFyaXpvbmFhbHVtbmkuY29tghNiZWFyZG93bm5ldHdv
cmsuY29tghRiZWFyZG93bm5ldHdvcmsxLmNvbYIPYmVsZW5hbHVtbmkub3JnghNi
ZW5qYW1pbmNvbm5lY3QuY29tghRiZW5uaW5ndG9uYWx1bW5pLmNvbYIaYmVya2Vs
ZXlpc2Nob29sY29ubmVjdC5jb22CFGJlcmtlbGV5am5ldHdvcmsuY29tghNiZXJr
ZWxleWxhd2xpbmsuY29tghZiZXJrZWxleWxhd25ldHdvcmsuY29tghdiZXJrZWxl
eXByZXBjb25uZWN0LmNvbYITYmVya3NoaXJlYWx1bW5pLmNvbYIaYmVya3NoaXJl
c2Nob29sY29ubmVjdC5jb22CGWJlcm11ZGFjb2xsZWdlY29ubmVjdC5jb22CD2Jn
YWNvbm5lY3RzLmNvbYISYmltbS1jb25uZWN0LmNvLnVrghFib2xpdmFyYWx1bW5p
LmNvbYIRYm9ubmVyY29ubmVjdC5vcmeCEmJvdWNoZXRjb25uZWN0Lm9yZ4IWYnJh
bmNob3V0Lm1hcmxib3JvLmVkdYIUYnJhbmNob3V0Y29ubmVjdC5jb22CEmJyYW5k
bWFuYWx1bW5pLmNvbYIWYnJpZGdld2F0ZXJjb25uZWN0LmNvbYINYnJpZGdlemJ0
LmNvbYIaYnJvY2twb3J0YWx1bW5pY29ubmVjdC5jb22CFWJyb29rc2lhbnNjb25u
ZWN0LmNvbYIPYnVjc2Nvbm5lY3Qub3Jnghd3d3cuYmFhbHVtbmluZXR3b3JrLmNv
bYIRd3d3LmJhY2FsdW1uaS5uZXSCGHd3dy5iYWRnZXJicmlkZ2ViZXRhLmNvbYIc
d3d3LmJhbGR3aW5hbHVtbmljb25uZWN0Lm9yZ4IUd3d3LmJhcnRvbmFsdW1uaS5j
b22CGnd3dy5iYXVlcmFsdW1uaWNvbm5lY3QuY29tghN3d3cuYmJuc2Nvbm5lY3Qu
b3JnghV3d3cuYmJuc2dyYWR1YXRlcy5vcmeCFXd3dy5iY2hpZ2huZXR3b3JrLmNv
bYIXd3d3LmJlYXJkb3dubmV0d29yay5jb22CE3d3dy5iZWxlbmFsdW1uaS5vcmeC
F3d3dy5iZW5qYW1pbmNvbm5lY3QuY29tghh3d3cuYmVubmluZ3RvbmFsdW1uaS5j
b22CHnd3dy5iZXJrZWxleWlzY2hvb2xjb25uZWN0LmNvbYIYd3d3LmJlcmtlbGV5
am5ldHdvcmsuY29tghd3d3cuYmVya2VsZXlsYXdsaW5rLmNvbYIad3d3LmJlcmtl
bGV5bGF3bmV0d29yay5jb22CG3d3dy5iZXJrZWxleXByZXBjb25uZWN0LmNvbYIX
d3d3LmJlcmtzaGlyZWFsdW1uaS5jb22CHnd3dy5iZXJrc2hpcmVzY2hvb2xjb25u
ZWN0LmNvbYIdd3d3LmJlcm11ZGFjb2xsZWdlY29ubmVjdC5jb22CE3d3dy5iZ2Fj
b25uZWN0cy5jb22CFnd3dy5iaW1tLWNvbm5lY3QuY28udWuCFXd3dy5ib2xpdmFy
YWx1bW5pLmNvbYIVd3d3LmJvbm5lcmNvbm5lY3Qub3JnghZ3d3cuYm91Y2hldGNv
bm5lY3Qub3Jnghp3d3cuYnJhbmNob3V0Lm1hcmxib3JvLmVkdYIYd3d3LmJyYW5j
aG91dGNvbm5lY3QuY29tghZ3d3cuYnJhbmRtYW5hbHVtbmkuY29tghp3d3cuYnJp
ZGdld2F0ZXJjb25uZWN0LmNvbYIRd3d3LmJyaWRnZXpidC5jb22CHnd3dy5icm9j
a3BvcnRhbHVtbmljb25uZWN0LmNvbYIZd3d3LmJyb29rc2lhbnNjb25uZWN0LmNv
bYITd3d3LmJ1Y3Njb25uZWN0Lm9yZzBMBgNVHSAERTBDMAgGBmeBDAECATA3Bgsr
BgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0
Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3AHR+2oMxrTMQkSGcziVPQnDC
v/1eQiAIxjc1eeYQe8xWAAABbGGBiXQAAAQDAEgwRgIhALkVo4fJ/zaPK412/00K
kEusGsOPlGIkEU8g+jFai7EYAiEA4t9P2EfP0v+0CsNTBxfXrNbVXIIciyHxv8kR
euD18RcAdgApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWxhgYmR
AAAEAwBHMEUCIQCbNrIi0GoTOlW6Acl156vQaWJObAiq7lAnRSl1swDdgQIgT+A5
z6USLo3iyQTeZMKgggXspi2pvURt/LcQ0KG2hNkwDQYJKoZIhvcNAQELBQADggEB
ADU5qSeAiD6yd1fkm9cI+jPyjxhRe5cQ64jMiPcnNvizeSZHYWtlk0D6gJWxGL3V
Il5CvRDdBgwIRBBFAPnRKLGz+Vi1ShZsmkwO2OJOd/ISPoQQ7vCHCalIUL5wHtXM
lOg8vi/qdnWnr8i4YAUNMUAJpoixAlDnR0FOml1WH1uDOK+UONAYjXR5/BYkKSvB
/69h7FK8VqoSjE1o94XoK28/0lmOI5uoINZIBsRZiFJkQcVwZJpRI6r2+jJmjz47
5GPz+ZTTod4tLa/xZhiWEAvZ+ZaxVrKSCEFivnXACi7BugjS8ggCphwTBgHzA6g1
tU0Xh0qyVNVPNyoikGIYQzk=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqfCqc2eGUCffi5UZKdc
awtQvryXkN1RTdTIiJFZeoLStQEPwbuWLI3ITZKYk2WlmwZ5kyJhbq1DWw00iaLF
6g7kYLVKq3MaiCh1VeYtudMlZRHD7uk8z11NyRJEC3gyMycv6eXuQv5bENA58daW
r2IytiiB/11xWXYbsmDd2FQVfRK6ner/qs57/rFcKD7JObu4eP7SdWE/Yo+YtloO
cldB2asaEKn+Y2RF5MQPP6sRNyCULtQsUHUSR0k1wqc4DErjtp6P3uEOlrmMObJe
HsEj9tBSMLXIhzoiu5G1zzRD6IYSpEoSn6VPjPXxAfqTGpj4kP397b8/Vbc2zfIa
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345871823828575566622587145145615165569375
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-05 10:19:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-03 10:19:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'berkshireschoolconnect.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23563050461878857993488425673271213884938582579050074930073730330756153831172864545270485108155875698510344531069865929799020615290626727774721286143256979783265774350995164535679764580278479479259187249529186956981208788412753989306616548755691494555824726396493540868000665351915153801656482799455464206194083950771493298607185494702395585569936233060390112244974640325846816260647514593826625592275927744323176278442788701946057893900978677917186246975885912000773905140325401196073645907546898505358028954515369117176095098834850479458576495531283813817141044565653289912210251954990034411363505375136664836512403
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							057f3bdb029064ec7814280d83b148d10dd9d397
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1722 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baalumninetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bacalumni.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badgerbridgebeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badgerbridgetest.manual.graduway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badgersinfinancetest.manual.graduway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baldwinalumniconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bartonalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baueralumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbnsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbnsgraduates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bchighnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beardown.arizonaalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beardownnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beardownnetwork1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belenalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benjaminconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benningtonalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleyischoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleyjnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleylawlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleylawnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleyprepconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkshirealumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkshireschoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bermudacollegeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bgaconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bimm-connect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bolivaralumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonnerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bouchetconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branchout.marlboro.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branchoutconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandmanalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridgewaterconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridgezbt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brockportalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brooksiansconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baalumninetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bacalumni.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badgerbridgebeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baldwinalumniconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bartonalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baueralumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbnsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbnsgraduates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bchighnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beardownnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belenalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benjaminconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benningtonalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleyischoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleyjnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleylawlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleylawnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleyprepconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkshirealumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkshireschoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bermudacollegeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bgaconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bimm-connect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bolivaralumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bonnerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bouchetconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.branchout.marlboro.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.branchoutconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brandmanalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bridgewaterconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bridgezbt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brockportalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brooksiansconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bucsconnect.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c618189740000040300483046022100b915a387c9ff368f2b8d76ff4d0a904bac1ac38f946224114f20fa315a8bb118022100e2df4fd847cfd2ffb40ac3530717d7acd6d55c821c8b21f1bfc9117ae0f5f117007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c6181899100000403004730450221009b36b222d06a133a55ba01c975e7abd069624e6c08aaee5027452975b300dd8102204fe039cfa5122e8de2c904de64c2a08205eca62da9bd446dfcb710d0a1b684d9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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