campionalumni.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6f:e1:b3:7a:59:16:6d:37:6c:72:09:c0:e2:93:7d:f3:92 was issued on by Let's Encrypt.

With 56 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=campionalumni.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6f:e1:b3:7a:59:16:6d:37:6c:72:09:c0:e2:93:7d:f3:92
Serial Number (int): 299408208725206412003989491062277924582290
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 56:0a:52:28:9e:9e:92:c9:ea:a0:0a:48:31:af:b7:33:cd:3f:08:41
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c0:92:f8:45:ce:e8:cc:c0:9f:32:b2:88:5e:2d:7b:21:77:89:d3:36
Fingerprint (sha256): 38:bc:9d:b9:5e:33:ea:4f:4a:8d:93:bb:db:10:c4:47:4a:78:e5:b7:30:0d:f1:d6:e6:50:fc:22:be:c3:48:c8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate campionalumni.org

56

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for campionalumni.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

campionalumni.org
casscommunity.co.uk
caterhamconnected.co.uk
caterhamschoolsociety.co.uk
centralecommunity.com
cettconnect.es
challonersconnected.com
challonershighnetwork.com
charterhouseconnect.org.uk
cheveningconnect.com
choba.org
chsnetwork.co.uk
cisvalumni-connect.org
citizensconnect.co.uk
cityshefalumni.org
clarehallconnect.uk
clubdanetwork.com
colfesnet.com
columbansconnect.org
community.alumniportal-deutschland.org
community.birthrightexcel.com
community.bpp.com
connect.staffordglobal.org
connected.cardiff.ac.uk
corpusalumni.com
csfcalumni.com
cualumni.org
cumbrianetwork.global
www.campionalumni.org
www.casscommunity.co.uk
www.caterhamconnected.co.uk
www.caterhamschoolsociety.co.uk
www.centralecommunity.com
www.cettconnect.es
www.challonersconnected.com
www.challonershighnetwork.com
www.charterhouseconnect.org.uk
www.cheveningconnect.com
www.choba.org
www.chsnetwork.co.uk
www.cisvalumni-connect.org
www.citizensconnect.co.uk
www.cityshefalumni.org
www.clarehallconnect.uk
www.clubdanetwork.com
www.colfesnet.com
www.columbansconnect.org
www.community.alumniportal-deutschland.org
www.community.birthrightexcel.com
www.community.bpp.com
www.connect.staffordglobal.org
www.connected.cardiff.ac.uk
www.corpusalumni.com
www.csfcalumni.com
www.cualumni.org
www.cumbrianetwork.global

Other certificates including the domain name campionalumni.org

(limited to 100 certificates)
cumbrianetwork.global
campionalumni.org
campionalumni.org
campionalumni.org
community.mancosa.co.za
campionalumni.org
connected.cardiff.ac.uk
ulaw-alumni.com
campionalumni.org
ulaw-alumni.com
community.mancosa.co.za
challonershighnetwork.com
campionalumni.org
casscommunity.co.uk
ulaw-alumni.com
choba.org
campionalumni.org
campionalumni.org
cettalumni.com
campionalumni.org
ulaw-alumni.com
caterhamschoolsociety.co.uk
ulaw-alumni.com
cettalumni.com
campionalumni.org
campionalumni.org
campionalumni.org
colfesnet.com
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
ulaw-alumni.com
challonershighnetwork.com
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
choba.org
ulaw-alumni.com
campionalumni.org
campionalumni.org
ulaw-alumni.com
ulaw-alumni.com
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
charterhouseconnect.org.uk
campionalumni.org
campionalumni.org
campionalumni.org
community.mancosa.co.za
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
ulaw-alumni.com
connected.cardiff.ac.uk
campionalumni.org
caterhamschoolsociety.co.uk
challonershighnetwork.com
cettalumni.com
challonershighnetwork.com
campionalumni.org
ulaw-alumni.com
campionalumni.org
ulaw-alumni.com
campionalumni.org
ulaw-alumni.com
charterhouseconnecttest.manual.graduway.com
campionalumni.org
caterhamschoolsociety.co.uk
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
ulaw-alumni.com
campionalumni.org
community.mancosa.co.za
corpusalumni.com
community.mancosa.co.za
campionalumni.org
community.mancosa.co.za
ulaw-alumni.com
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
ulaw-alumni.com
community.mancosa.co.za
campionalumni.org
campionalumni.org
campionalumni.org
ulaw-alumni.com
cityshefalumni.org
cettalumni.com
connected.cardiff.ac.uk
campionalumni.org
campionalumni.org

Certificate

The complete raw certificate details for campionalumni.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthupXCS4g50IAxFmunrM
LKEK3pKsmsgHA8GxKLQBirRgyOwlnYZG1FFVgXLcuTxXIrByQIeKWUPdfgrvrjSy
nXBDjqclzeFYFjd/E4t8rMI7nMCx4cEksgj4R0lF3cSZ+llmLIAXvp7aK44NPciR
0BwzNOQ1xYyEzVDeafUXktwJnHqJ+/EhGwtrYVbsp5PDIWySwLXIqzztuuI9na+x
1qD3XwXMbYimq+FeOSs/1Hri0+Xbo+I7b3NVnlxHoeS2u5Jh+PdJnUYhLPVewPfY
SvVDsgcWFLUTrs+GEM3AcoDscRZQ/bnb9gg97DDc3x+1VSL1dEo5owTQq/OJtMbz
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299408208725206412003989491062277924582290
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-17 07:15:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-15 07:15:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'campionalumni.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22989011928552415290643560474008210931696097149661979721484709902229672452688788067569037048572529712750258992597808098822605143601601626245752228273755823910404611519286762360201817668258141678863475827364599302263576370772752807276015175730373332178520706503438890484635375986363356900194226882874509213699371899819446013348513155780911188681225523156586220466870633186800229039730489907173584029894639413628858803297252120108308494943010377023414212421010957468350093370382812782020241565060350983113256305953890898700327373073217193218244614858899610138990974378267665601950117085572312721196819532705431732810659
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							560a52289e9e92c9eaa00a4831afb733cd3f0841
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1360 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campionalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casscommunity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caterhamconnected.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caterhamschoolsociety.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralecommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cettconnect.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'challonersconnected.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'challonershighnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charterhouseconnect.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheveningconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'choba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chsnetwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cisvalumni-connect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citizensconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityshefalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clarehallconnect.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubdanetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colfesnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbansconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.alumniportal-deutschland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.birthrightexcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.bpp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.staffordglobal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connected.cardiff.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corpusalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csfcalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cualumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cumbrianetwork.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campionalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casscommunity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caterhamconnected.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caterhamschoolsociety.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralecommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cettconnect.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.challonersconnected.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.challonershighnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charterhouseconnect.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheveningconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.choba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chsnetwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cisvalumni-connect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citizensconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityshefalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clarehallconnect.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubdanetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colfesnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbansconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.community.alumniportal-deutschland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.community.birthrightexcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.community.bpp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.staffordglobal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connected.cardiff.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corpusalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csfcalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cualumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cumbrianetwork.global'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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