campionalumni.org

Issued by R3

About this certificate

This digital certificate with serial number 03:fa:f8:ef:85:fe:9a:37:84:1b:9c:52:17:42:93:38:33:99 was issued on by Let's Encrypt.

With 62 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=campionalumni.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fa:f8:ef:85:fe:9a:37:84:1b:9c:52:17:42:93:38:33:99
Serial Number (int): 346738341745151363136588289304021096215449
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 83:b6:d5:68:69:99:8f:d1:fa:54:42:c2:70:7f:cb:c0:37:9a:6d:33
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ca:c8:60:a7:bd:fa:fb:be:d7:31:02:b1:7c:fe:a2:a8:75:7b:b2:f9
Fingerprint (sha256): 2c:81:6f:47:1c:3d:f9:69:31:52:78:1f:7c:7c:99:5b:86:9a:64:7f:d5:9a:d4:ee:a4:94:15:65:f0:27:3f:99

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate campionalumni.org

62

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for campionalumni.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

campionalumni.org
casscommunity.co.uk
caterhamconnected.co.uk
caterhamschoolsociety.co.uk
centralecommunity.com
cettalumni.com
cettconnect.es
challonersconnected.com
challonershighnetwork.com
charterhouseconnect.org.uk
cheveningconnect.com
choba.org
chsnetwork.co.uk
cisvalumni-connect.org
citizensconnect.co.uk
cityshefalumni.org
cjlmentorship360.com
clarehallconnect.uk
clubdanetwork.com
colfesnet.com
columbansconnect.org
community.alumniportal-deutschland.org
community.birthrightexcel.com
community.bpp.com
community.mancosa.co.za
connect.isbasel.ch
connect.regent.ac.za
connected.cardiff.ac.uk
corpusalumni.com
csfcalumni.com
cumbrianetwork.global
www.campionalumni.org
www.casscommunity.co.uk
www.caterhamconnected.co.uk
www.caterhamschoolsociety.co.uk
www.centralecommunity.com
www.cettalumni.com
www.cettconnect.es
www.challonersconnected.com
www.challonershighnetwork.com
www.charterhouseconnect.org.uk
www.cheveningconnect.com
www.choba.org
www.chsnetwork.co.uk
www.cisvalumni-connect.org
www.citizensconnect.co.uk
www.cityshefalumni.org
www.cjlmentorship360.com
www.clarehallconnect.uk
www.clubdanetwork.com
www.colfesnet.com
www.columbansconnect.org
www.community.alumniportal-deutschland.org
www.community.birthrightexcel.com
www.community.bpp.com
www.community.mancosa.co.za
www.connect.isbasel.ch
www.connect.regent.ac.za
www.connected.cardiff.ac.uk
www.corpusalumni.com
www.csfcalumni.com
www.cumbrianetwork.global

Other certificates including the domain name campionalumni.org

(limited to 100 certificates)
cumbrianetwork.global
campionalumni.org
campionalumni.org
campionalumni.org
community.mancosa.co.za
campionalumni.org
connected.cardiff.ac.uk
ulaw-alumni.com
campionalumni.org
ulaw-alumni.com
community.mancosa.co.za
challonershighnetwork.com
campionalumni.org
casscommunity.co.uk
ulaw-alumni.com
choba.org
campionalumni.org
campionalumni.org
cettalumni.com
campionalumni.org
ulaw-alumni.com
caterhamschoolsociety.co.uk
ulaw-alumni.com
cettalumni.com
campionalumni.org
campionalumni.org
campionalumni.org
colfesnet.com
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
ulaw-alumni.com
challonershighnetwork.com
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
choba.org
ulaw-alumni.com
campionalumni.org
campionalumni.org
ulaw-alumni.com
ulaw-alumni.com
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
charterhouseconnect.org.uk
campionalumni.org
campionalumni.org
campionalumni.org
community.mancosa.co.za
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
ulaw-alumni.com
connected.cardiff.ac.uk
campionalumni.org
caterhamschoolsociety.co.uk
challonershighnetwork.com
cettalumni.com
challonershighnetwork.com
campionalumni.org
ulaw-alumni.com
campionalumni.org
ulaw-alumni.com
campionalumni.org
ulaw-alumni.com
charterhouseconnecttest.manual.graduway.com
campionalumni.org
caterhamschoolsociety.co.uk
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
ulaw-alumni.com
campionalumni.org
community.mancosa.co.za
corpusalumni.com
community.mancosa.co.za
campionalumni.org
community.mancosa.co.za
ulaw-alumni.com
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
ulaw-alumni.com
community.mancosa.co.za
campionalumni.org
campionalumni.org
campionalumni.org
ulaw-alumni.com
cityshefalumni.org
cettalumni.com
connected.cardiff.ac.uk
campionalumni.org
campionalumni.org

Certificate

The complete raw certificate details for campionalumni.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunqi5jamh4NtZgdKgQ03
xExJTLl1BlzO/k2MptFRdQotjfGJNpqWNI/wQ04LpAl82dRx/Qcl/i9YRlu5CdRn
UK+LeRpP9zklvy+8ZiI0R5lwnGx/qlL5xnx0qsNVOZHm1IiVYdSMsEs2VuQm4fj1
edo3oQ9PuPwuFqNCH1ObBZZ0WVQ2eNbWy4WTcpG6eT1O85ukDb7DWcWHEJg242lV
LOH9W4WZ1Mz6ZQw8JlxCtQQ1HNHtlhCIc2DQmV+4zk0js9QowmYexm46IyisPwNV
wzIu2tucSB5VaGZ07F6vJllY9BZNuDFUO2Ed/rBDprAAts+tVzxYexgfIyGCJR7I
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346738341745151363136588289304021096215449
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-07 06:46:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-07 06:46:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'campionalumni.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23540798949587199030171694225508043535483559890843218416368706910538280537624359926101661514365542707308183474503206443872003029574232498792341734393408772255388581695852891521533526019698588746019269515605003155468700432547502975084283056836784215955866183681341877397409856183402775753332193445359099082199942729812849737869608520817618523063025746539970621750964525847901888628147695646344353335329783365068409461588694507830308937408691461076913761847265950464026627925504198760832669544360733391213690887770322453800876534833539222860697925995453410519641819933571510994538216681616778615716594824853083075299371
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							83b6d56869998fd1fa5442c2707fcbc0379a6d33
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1498 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campionalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casscommunity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caterhamconnected.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caterhamschoolsociety.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralecommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cettalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cettconnect.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'challonersconnected.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'challonershighnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charterhouseconnect.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheveningconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'choba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chsnetwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cisvalumni-connect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citizensconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityshefalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cjlmentorship360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clarehallconnect.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubdanetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colfesnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbansconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.alumniportal-deutschland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.birthrightexcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.bpp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.mancosa.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.isbasel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.regent.ac.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connected.cardiff.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corpusalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csfcalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cumbrianetwork.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campionalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casscommunity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caterhamconnected.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caterhamschoolsociety.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralecommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cettalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cettconnect.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.challonersconnected.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.challonershighnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charterhouseconnect.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheveningconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.choba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chsnetwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cisvalumni-connect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citizensconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityshefalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cjlmentorship360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clarehallconnect.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubdanetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colfesnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbansconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.community.alumniportal-deutschland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.community.birthrightexcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.community.bpp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.community.mancosa.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.isbasel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.regent.ac.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connected.cardiff.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corpusalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csfcalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cumbrianetwork.global'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000176dbcfe10700000403004630440220524ab9a7588accb4b243b021491100904cffcf2d4b5444ababe359e2a91a206e0220518de07714b119e01b42c86805a606f2368fd991b335a5c128e6056b2338abf2007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000176dbcfe0d00000040300473045022023c3112310d0c598593f51961bdb20aa673234af0fa4da6752f76849b82963d7022100fec8d240ac39af5e25fd11274ffc95a03eba834f931c064be6ac87d48afa36d3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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