campionalumni.org

Issued by R3

About this certificate

This digital certificate with serial number 03:54:37:8f:9b:d9:52:4d:ab:76:e1:f7:c3:47:5f:27:dc:f5 was issued on by Let's Encrypt.

With 60 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=campionalumni.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:54:37:8f:9b:d9:52:4d:ab:76:e1:f7:c3:47:5f:27:dc:f5
Serial Number (int): 289994429815849983223571159441958031056117
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6c:f6:c4:05:95:60:01:81:ab:ce:00:8f:67:af:cb:81:f7:28:79:3c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ab:1c:22:4d:b7:e3:54:7c:31:1c:00:67:e0:7f:40:c4:7a:64:61:8c
Fingerprint (sha256): 2c:d9:2f:64:79:45:96:0d:b0:b9:ba:b5:14:00:2e:d9:92:a5:76:7a:9d:99:2a:14:ca:5b:7f:25:78:fd:5a:e0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate campionalumni.org

60

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for campionalumni.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

campionalumni.org
casscommunity.co.uk
caterhamconnected.co.uk
caterhamschoolsociety.co.uk
centralecommunity.com
cettalumni.com
cettconnect.es
challonersconnected.com
challonershighnetwork.com
charterhouseconnect.org.uk
cheveningconnect.com
choba.org
chsnetwork.co.uk
cisvalumni-connect.org
citizensconnect.co.uk
cityshefalumni.org
clarehallconnect.uk
clubdanetwork.com
colfesnet.com
columbansconnect.org
community.alumniportal-deutschland.org
community.birthrightexcel.com
community.bpp.com
community.mancosa.co.za
connect.isbasel.ch
connect.regent.ac.za
connected.cardiff.ac.uk
corpusalumni.com
csfcalumni.com
cumbrianetwork.global
www.campionalumni.org
www.casscommunity.co.uk
www.caterhamconnected.co.uk
www.caterhamschoolsociety.co.uk
www.centralecommunity.com
www.cettalumni.com
www.cettconnect.es
www.challonersconnected.com
www.challonershighnetwork.com
www.charterhouseconnect.org.uk
www.cheveningconnect.com
www.choba.org
www.chsnetwork.co.uk
www.cisvalumni-connect.org
www.citizensconnect.co.uk
www.cityshefalumni.org
www.clarehallconnect.uk
www.clubdanetwork.com
www.colfesnet.com
www.columbansconnect.org
www.community.alumniportal-deutschland.org
www.community.birthrightexcel.com
www.community.bpp.com
www.community.mancosa.co.za
www.connect.isbasel.ch
www.connect.regent.ac.za
www.connected.cardiff.ac.uk
www.corpusalumni.com
www.csfcalumni.com
www.cumbrianetwork.global

Other certificates including the domain name campionalumni.org

(limited to 100 certificates)
cumbrianetwork.global
campionalumni.org
campionalumni.org
campionalumni.org
community.mancosa.co.za
campionalumni.org
connected.cardiff.ac.uk
ulaw-alumni.com
campionalumni.org
ulaw-alumni.com
community.mancosa.co.za
challonershighnetwork.com
campionalumni.org
casscommunity.co.uk
ulaw-alumni.com
choba.org
campionalumni.org
campionalumni.org
cettalumni.com
campionalumni.org
ulaw-alumni.com
caterhamschoolsociety.co.uk
ulaw-alumni.com
cettalumni.com
campionalumni.org
campionalumni.org
campionalumni.org
colfesnet.com
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
ulaw-alumni.com
challonershighnetwork.com
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
choba.org
ulaw-alumni.com
campionalumni.org
campionalumni.org
ulaw-alumni.com
ulaw-alumni.com
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
charterhouseconnect.org.uk
campionalumni.org
campionalumni.org
campionalumni.org
community.mancosa.co.za
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
ulaw-alumni.com
connected.cardiff.ac.uk
campionalumni.org
caterhamschoolsociety.co.uk
challonershighnetwork.com
cettalumni.com
challonershighnetwork.com
campionalumni.org
ulaw-alumni.com
campionalumni.org
ulaw-alumni.com
campionalumni.org
ulaw-alumni.com
charterhouseconnecttest.manual.graduway.com
campionalumni.org
caterhamschoolsociety.co.uk
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
ulaw-alumni.com
campionalumni.org
community.mancosa.co.za
corpusalumni.com
community.mancosa.co.za
campionalumni.org
community.mancosa.co.za
ulaw-alumni.com
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
ulaw-alumni.com
community.mancosa.co.za
campionalumni.org
campionalumni.org
campionalumni.org
ulaw-alumni.com
cityshefalumni.org
cettalumni.com
connected.cardiff.ac.uk
campionalumni.org
campionalumni.org

Certificate

The complete raw certificate details for campionalumni.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPmWcqL8XNOl7i5mq7RZ
RrZHN6LpWMHoy+Vytaic7Lu1jYJwuwtUTviPzGSlsv2mYN9sg4tZufAgBLr42kQ6
pJ3kA7tnguatXDjpgi6evmJBzraUdX5MwqtUuhQcW6xaILP2yK0EE15jP6Kpgipb
1q6MKkuITcm4v5I0TWbnt9PCzDFcMDCzukv+qGQ1Y6NOGVVfZETnHTwd4/hvgbRa
0Umb7gbBJKlq1DjX2T48XSjhY2fpLrzuhwGJyydSUJ0KN6p3H0i1xRHGScaGQ9yv
IAHsTGUYM0JV9DrauHmdpml+K1/j05T8H8cWD6Gwa4xXtXWh8P3xvuiGDdSYXFqU
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289994429815849983223571159441958031056117
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-08 16:14:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-08 16:14:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'campionalumni.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17291485750819563423855193647159228628758341510179323228209081652400894993779719424645004658068673173967706633682813404142756329611408858349260732148294315888342988120589330443478953872415293412579923291646749384876088545735052713396974204187752030476215762823118524079276738825736216543814548586707407970408275493225423589926295238299420058885698997215965290094906527477869367169980076516062346850263122832800054660311815346900227742081773796214282689277546895198272748916969190923034298394734914058746119582037422448056183952555972341740336097697208181714543679845636427793547303966616370834192927669266828408558723
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6cf6c40595600181abce008f67afcb81f728793c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1450 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campionalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casscommunity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caterhamconnected.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caterhamschoolsociety.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralecommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cettalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cettconnect.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'challonersconnected.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'challonershighnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charterhouseconnect.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheveningconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'choba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chsnetwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cisvalumni-connect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citizensconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityshefalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clarehallconnect.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubdanetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colfesnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbansconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.alumniportal-deutschland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.birthrightexcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.bpp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.mancosa.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.isbasel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.regent.ac.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connected.cardiff.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corpusalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csfcalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cumbrianetwork.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campionalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casscommunity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caterhamconnected.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caterhamschoolsociety.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralecommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cettalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cettconnect.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.challonersconnected.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.challonershighnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charterhouseconnect.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheveningconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.choba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chsnetwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cisvalumni-connect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citizensconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityshefalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clarehallconnect.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubdanetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colfesnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbansconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.community.alumniportal-deutschland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.community.birthrightexcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.community.bpp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.community.mancosa.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.isbasel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.regent.ac.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connected.cardiff.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corpusalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csfcalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cumbrianetwork.global'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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