us.prod.campusgroups.com

Issued by R3

About this certificate

This digital certificate with serial number 03:90:31:fb:93:0d:5b:78:d6:ae:c8:9a:41:94:b5:d3:9b:13 was issued on by Let's Encrypt.

With 77 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=us.prod.campusgroups.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:90:31:fb:93:0d:5b:78:d6:ae:c8:9a:41:94:b5:d3:9b:13
Serial Number (int): 310403957052773318868388390285012408441619
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d3:88:83:d1:ad:91:b8:9d:c6:fa:f3:b6:4d:71:05:bc:76:f1:67:49
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7f:9f:2a:61:80:cb:27:7c:35:91:9d:2b:fa:82:bc:af:0f:f3:d4:9e
Fingerprint (sha256): 26:ce:18:f0:77:38:1e:0f:b5:78:4d:f9:a2:02:62:44:49:c4:b5:0f:09:1c:e4:7c:6a:8d:d6:02:61:0b:22:0e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate us.prod.campusgroups.com

77

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for us.prod.campusgroups.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1850.udayton.edu
activities.upike.edu
al.ucdavis.edu
alumnigroups.som.yale.edu
archway.ramapo.edu
belong.babson.edu
bengaged.binghamton.edu
bridge.loyola.edu
bullsconnect.usf.edu
campusconnect.kaust.edu.sa
campusgroups.erau.edu
campusgroups.rit.edu
campusgroups.rivier.edu
campusgroups.uci.edu
cardinalengage.stanford.edu
ccc.rochester.edu
clubs.marshall.usc.edu
clubs.washcoll.edu
community.case.edu
connect.altoona.psu.edu
connect.crown.edu
connect.fvtc.edu
connect.lassonde.yorku.ca
connect.law.columbia.edu
connect.ung.edu
connect.uwstout.edu
connect.westvalley.edu
crimsonconnect.du.edu
dukegroups.com
eagleconnect.lasierra.edu
eaglelife.erau.edu
embark.mtholyoke.edu
engage.abington.psu.edu
engage.bates.edu
engage.bridgew.edu
engage.colum.edu
engage.gettysburg.edu
engage.mit.edu
engage.mmm.edu
giesgroups.illinois.edu
group.aaaafoundation.org
groups.ccny.cuny.edu
groups.chicagobooth.edu
groups.gsb.columbia.edu
groups.som.yale.edu
groups.ucsf.edu
groups.wharton.upenn.edu
ibelong.byui.edu
involvement.ubalt.edu
lionconnect.sl.psu.edu
luhub.lamar.edu
mason360.gmu.edu
my.princeton.edu
myfletcher.tufts.edu
myhc.holycross.edu
mylim.limcollege.edu
myraft.csumb.edu
oneschulich.yorku.ca
orgcentral.k-state.edu
ourcampus.lafayette.edu
questromcommon.bu.edu
ramconnect.wcupa.edu
saintsconnect.flagler.edu
saintslife.css.edu
shiplink.ship.edu
shoreline.ucsb.edu
sloangroups.mit.edu
students.grainger.illinois.edu
thehub.nmu.edu
theyard.bowiestate.edu
tigerlink.lsu.edu
ucore.uco.edu
ugroups.ucollege.edu
us.prod.campusgroups.com
virtualfairs.ucsd.edu
warriorlife.csustan.edu
yaleconnect.yale.edu

Other certificates including the domain name campusgroups.com

(limited to 100 certificates)
us.prod.campusgroups.com
us.prod.campusgroups.com
blog.campusgroups.com
ssl378409.cloudflaressl.com
ssl378409.cloudflaressl.com
eu.prod.campusgroups.com
eu.prod.campusgroups.com
us.prod.campusgroups.com
ssl275802.cloudflaressl.com
au.prod.campusgroups.com
eu.prod.campusgroups.com
us.prod.campusgroups.com
blog.campusgroups.com
us.prod.campusgroups.com
ssl378409.cloudflaressl.com
blog.campusgroups.com
ssl378408.cloudflaressl.com
ssl378410.cloudflaressl.com
eu.prod.campusgroups.com
us.prod.campusgroups.com
ssl378410.cloudflaressl.com
ssl378410.cloudflaressl.com
eu.prod.campusgroups.com
ssl378408.cloudflaressl.com
ssl275802.cloudflaressl.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
ssl378409.cloudflaressl.com
us.prod.campusgroups.com
*.campusgroups.com
ssl378408.cloudflaressl.com
us.prod.campusgroups.com
ssl378408.cloudflaressl.com
eu.prod.campusgroups.com
ssl275802.cloudflaressl.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
us.prod.campusgroups.com
us.prod.campusgroups.com
ssl378410.cloudflaressl.com
ssl378409.cloudflaressl.com
ssl378410.cloudflaressl.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
ssl93421.cloudflare.com
ssl378410.cloudflaressl.com
ssl275802.cloudflaressl.com
ssl378408.cloudflaressl.com
ssl378409.cloudflaressl.com
us.prod.campusgroups.com
us.prod.campusgroups.com
ssl378410.cloudflaressl.com
*.campusgroups.com
us.prod.campusgroups.com
us.prod.campusgroups.com
us.prod.campusgroups.com
us.prod.campusgroups.com
*.campusgroups.com
ssl378410.cloudflaressl.com
ssl378408.cloudflaressl.com
blog.campusgroups.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
blog.campusgroups.com
*.campusgroups.com
ssl378410.cloudflaressl.com
blog.campusgroups.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
ssl378410.cloudflaressl.com
ssl378409.cloudflaressl.com
us.prod.campusgroups.com
blog.campusgroups.com
ssl378408.cloudflaressl.com
us.prod.campusgroups.com
ssl275802.cloudflaressl.com
ssl378408.cloudflaressl.com
*.campusgroups.com
eu.prod.campusgroups.com
ssl378410.cloudflaressl.com
ssl378410.cloudflaressl.com
ssl378408.cloudflaressl.com
sni.cloudflaressl.com
eu.prod.campusgroups.com
ssl378408.cloudflaressl.com
eu.prod.campusgroups.com
ssl378410.cloudflaressl.com
*.campusgroups.com
eu.prod.campusgroups.com
ssl378408.cloudflaressl.com
ssl378409.cloudflaressl.com
ssl378410.cloudflaressl.com
ssl378409.cloudflaressl.com
*.campusgroups.com
ssl378409.cloudflaressl.com
*.campusgroups.com
ssl378409.cloudflaressl.com
ssl378408.cloudflaressl.com
ssl378410.cloudflaressl.com
ca.prod.campusgroups.com

Certificate

The complete raw certificate details for us.prod.campusgroups.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42NoxjEfysyvogg6gNCl
yYoNIFGEibXfDebzz9j6xngAq0/P8vIJbSK4UbK0rmFecFgp/sGvUIPKrml84XOU
SMxWYJjEIOI2+Y+ruYWCtM5oqyJQZvRw8N+2+xFtAkdY0JGqf/1m+Fz249T1sZmJ
Sdgg7LvD2zjlsPjj4IDgiEXPTiWbHZ0Z5YhH3Cx2IvandwHJukC1qrGaZtTrnRi2
fVZzi+i5YfulKaj9Y0YgweTajV+HuHIXCiwFE8X893V8N+oNOpQ2sum8zHmRYbNr
PJxig8VhyA8mBCl0Dawe53nAMxg2tKwI/GsgqTo9VgE8iufingnakLuEKTEzTJXz
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 310403957052773318868388390285012408441619
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-10 07:14:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-10 07:14:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'us.prod.campusgroups.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28705115767408228603132482045308190725121318072477679535262414435031097083627813957056601482307346397769894272658523354553648381700921991839810243473511656457974316333941445876870985911889629557978755428955684182180753417047090261639965243932155870619020448752126940740536726379994575289677030525576229007206334278615242048185259650460031759619044742651934498458845877598259050003920838493848962372448114214282550504680379209423181503434878882274643062655427437199220495389862687694345818109236809997530703676033004919192012640321618480307333705274266256489337889996049032283199276937368431625237541074592607403111339
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d38883d1ad91b89dc6faf3b64d7105bc76f16749
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1679 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1850.udayton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activities.upike.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'al.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnigroups.som.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archway.ramapo.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belong.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bengaged.binghamton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridge.loyola.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bullsconnect.usf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusconnect.kaust.edu.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusgroups.erau.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusgroups.rit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusgroups.rivier.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusgroups.uci.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardinalengage.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccc.rochester.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubs.marshall.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubs.washcoll.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.case.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.altoona.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.crown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.fvtc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.lassonde.yorku.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.law.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.ung.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.uwstout.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.westvalley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crimsonconnect.du.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dukegroups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eagleconnect.lasierra.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eaglelife.erau.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embark.mtholyoke.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.abington.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.bates.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.bridgew.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.colum.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.gettysburg.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.mit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.mmm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giesgroups.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'group.aaaafoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groups.ccny.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groups.chicagobooth.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groups.gsb.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groups.som.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groups.ucsf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groups.wharton.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibelong.byui.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'involvement.ubalt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lionconnect.sl.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luhub.lamar.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mason360.gmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfletcher.tufts.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhc.holycross.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylim.limcollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myraft.csumb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneschulich.yorku.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orgcentral.k-state.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourcampus.lafayette.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'questromcommon.bu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramconnect.wcupa.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintsconnect.flagler.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintslife.css.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shiplink.ship.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoreline.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sloangroups.mit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'students.grainger.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehub.nmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theyard.bowiestate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tigerlink.lsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucore.uco.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ugroups.ucollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.prod.campusgroups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualfairs.ucsd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warriorlife.csustan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yaleconnect.yale.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017da3681aff0000040300463044022050239432ac79586bb83c1419d87985e974f23b03a1eef17ee055dffcc3ce8dc802207f065366f45509fca374b40edf34c76c2c8d91f849e0b442fcda88aebcb8807a007600dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017da3681af40000040300473045022100b5773605d90a67c784db2a11b6d4fe3975ba342079bcdd348abca0796ed1aa8d0220624d74a8e65dd3cce5141f3c22efe215de0cdf6d21d00afefdb0d222e5f0de3b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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