bergencatholicconnect.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:29:9d:11:97:56:61:46:c6:4b:d4:5c:1c:a5:25:89:3e:60 was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bergencatholicconnect.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:29:9d:11:97:56:61:46:c6:4b:d4:5c:1c:a5:25:89:3e:60
Serial Number (int): 275497214972911621560802022234837842738784
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5a:dd:92:8b:90:8a:ee:6a:4c:2b:d4:f9:82:cc:06:d4:0f:93:47:b4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 39:5c:15:08:98:e3:46:1e:fc:f5:1d:ec:c1:2c:ab:94:2b:8f:4c:4a
Fingerprint (sha256): 38:ef:04:20:d4:42:77:74:50:93:c4:fc:7b:b5:c9:4a:83:db:9b:35:85:c8:a2:67:9c:4e:41:2d:40:37:fb:92

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bergencatholicconnect.com

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bergencatholicconnect.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

baalumninetwork.com
bacalumni.net
backlot.afi.com
badgerbridgebeta.com
badgerbridgetest.manual.graduway.com
badgersinfinancetest.manual.graduway.com
baldwinalumniconnect.org
bartonalumni.com
baueralumniconnect.com
bbnsconnect.org
bbnsgraduates.org
bchighnetwork.com
beardown.arizonaalumni.com
beardownnetwork.com
beardownnetwork1.com
belenalumni.org
benjaminconnect.com
benningtonalumni.com
bergencatholicconnect.com
berkeleyischoolconnect.com
berkeleyjnetwork.com
berkeleylawlink.com
berkeleylawnetwork.com
berkeleyprepconnect.com
berkshirealumni.com
berkshireschoolconnect.com
bermudacollegeconnect.com
bestbuddiesconnect.org
bgaconnects.com
biolahub.biola.edu
bolivaralumni.com
bonnerconnect.org
boscoalumni.org
bouchetconnect.org
boyslatinconnect.com
branchout.marlboro.edu
branchoutconnect.com
brandmanalumni.com
brehmcommunity.org
bridgewaterconnect.com
bridgezbt.com
brockportalumniconnect.com
brooksiansconnect.com
bucknellcareerconnect.com
bucknellconnect.com
bucsconnect.org
www.baalumninetwork.com
www.bacalumni.net
www.backlot.afi.com
www.badgerbridgebeta.com
www.baldwinalumniconnect.org
www.bartonalumni.com
www.baueralumniconnect.com
www.bbnsconnect.org
www.bbnsgraduates.org
www.bchighnetwork.com
www.beardownnetwork.com
www.belenalumni.org
www.benjaminconnect.com
www.benningtonalumni.com
www.bergencatholicconnect.com
www.berkeleyischoolconnect.com
www.berkeleyjnetwork.com
www.berkeleylawlink.com
www.berkeleylawnetwork.com
www.berkeleyprepconnect.com
www.berkshirealumni.com
www.berkshireschoolconnect.com
www.bermudacollegeconnect.com
www.bestbuddiesconnect.org
www.bgaconnects.com
www.bolivaralumni.com
www.bonnerconnect.org
www.boscoalumni.org
www.bouchetconnect.org
www.boyslatinconnect.com
www.branchout.marlboro.edu
www.branchoutconnect.com
www.brandmanalumni.com
www.brehmcommunity.org
www.bridgewaterconnect.com
www.bridgezbt.com
www.brockportalumniconnect.com
www.brooksiansconnect.com
www.bucknellcareerconnect.com
www.bucknellconnect.com
www.bucsconnect.org

Other certificates including the domain name bergencatholicconnect.com

(limited to 100 certificates)
baalumninetwork.com
bobcatconnect.org
beachwoodconnect.com
beachwoodconnect.com
baalumninetwork.com
beachwoodconnect.com
bergencatholicconnect.com
beachwoodconnect.com
bobcatconnect.org
bobcatconnect.org
bobcatconnect.org
bergencatholicconnect.com
bobcatconnect.org
badgersinfinance.net
baalumninetwork.com
bobcatconnect.org
backlot.afi.com
bobcatconnect.org
bobcatconnect.org
baalumninetwork.com
beachwoodconnect.com

Certificate

The complete raw certificate details for bergencatholicconnect.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINcDCCDFigAwIBAgISAymdEZdWYUbGS9RcHKUliT5gMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMDQxMDI4MzJaFw0y
MDAxMDIxMDI4MzJaMCQxIjAgBgNVBAMTGWJlcmdlbmNhdGhvbGljY29ubmVjdC5j
b20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiAD2AMx+oPXTD/XRD
s+F1nQ+b/GKfun9f82W2K4WjL8RnW5mUAYHLgvl17aK3yrYFmLyfHucBnRZsnBGe
9dUJPxzoighZmAEvpjkheQtFPxnu0v6OGxpcDvcSFl6w+dja/rYkVQ9hEynphfXw
LU1sMGCOyaVO85pCgIX9faXW+XObu/lT/WflWH6Hz01NAwMIDGl7VQ1gr/tPV5VR
OIgKIQQ0lofFZwiUd2KNnXBg7UIcl6lTvevaq6dhyl2kv7I+SdK3jGkK2vG7ydYW
pZadZYf0A6eJlXUjqGVGKN99msdG1NVjz2ak5EMJlrTgOs/Q7QHj+ut9jbAif+/u
SjTRAgMBAAGjggp0MIIKcDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFFrdkouQiu5q
TCvU+YLMBtQPk0e0MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G
CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZy8wgggpBgNVHREEggggMIIIHIITYmFhbHVtbmluZXR3b3Jr
LmNvbYINYmFjYWx1bW5pLm5ldIIPYmFja2xvdC5hZmkuY29tghRiYWRnZXJicmlk
Z2ViZXRhLmNvbYIkYmFkZ2VyYnJpZGdldGVzdC5tYW51YWwuZ3JhZHV3YXkuY29t
gihiYWRnZXJzaW5maW5hbmNldGVzdC5tYW51YWwuZ3JhZHV3YXkuY29tghhiYWxk
d2luYWx1bW5pY29ubmVjdC5vcmeCEGJhcnRvbmFsdW1uaS5jb22CFmJhdWVyYWx1
bW5pY29ubmVjdC5jb22CD2JibnNjb25uZWN0Lm9yZ4IRYmJuc2dyYWR1YXRlcy5v
cmeCEWJjaGlnaG5ldHdvcmsuY29tghpiZWFyZG93bi5hcml6b25hYWx1bW5pLmNv
bYITYmVhcmRvd25uZXR3b3JrLmNvbYIUYmVhcmRvd25uZXR3b3JrMS5jb22CD2Jl
bGVuYWx1bW5pLm9yZ4ITYmVuamFtaW5jb25uZWN0LmNvbYIUYmVubmluZ3RvbmFs
dW1uaS5jb22CGWJlcmdlbmNhdGhvbGljY29ubmVjdC5jb22CGmJlcmtlbGV5aXNj
aG9vbGNvbm5lY3QuY29tghRiZXJrZWxleWpuZXR3b3JrLmNvbYITYmVya2VsZXls
YXdsaW5rLmNvbYIWYmVya2VsZXlsYXduZXR3b3JrLmNvbYIXYmVya2VsZXlwcmVw
Y29ubmVjdC5jb22CE2JlcmtzaGlyZWFsdW1uaS5jb22CGmJlcmtzaGlyZXNjaG9v
bGNvbm5lY3QuY29tghliZXJtdWRhY29sbGVnZWNvbm5lY3QuY29tghZiZXN0YnVk
ZGllc2Nvbm5lY3Qub3Jngg9iZ2Fjb25uZWN0cy5jb22CEmJpb2xhaHViLmJpb2xh
LmVkdYIRYm9saXZhcmFsdW1uaS5jb22CEWJvbm5lcmNvbm5lY3Qub3Jngg9ib3Nj
b2FsdW1uaS5vcmeCEmJvdWNoZXRjb25uZWN0Lm9yZ4IUYm95c2xhdGluY29ubmVj
dC5jb22CFmJyYW5jaG91dC5tYXJsYm9yby5lZHWCFGJyYW5jaG91dGNvbm5lY3Qu
Y29tghJicmFuZG1hbmFsdW1uaS5jb22CEmJyZWhtY29tbXVuaXR5Lm9yZ4IWYnJp
ZGdld2F0ZXJjb25uZWN0LmNvbYINYnJpZGdlemJ0LmNvbYIaYnJvY2twb3J0YWx1
bW5pY29ubmVjdC5jb22CFWJyb29rc2lhbnNjb25uZWN0LmNvbYIZYnVja25lbGxj
YXJlZXJjb25uZWN0LmNvbYITYnVja25lbGxjb25uZWN0LmNvbYIPYnVjc2Nvbm5l
Y3Qub3Jnghd3d3cuYmFhbHVtbmluZXR3b3JrLmNvbYIRd3d3LmJhY2FsdW1uaS5u
ZXSCE3d3dy5iYWNrbG90LmFmaS5jb22CGHd3dy5iYWRnZXJicmlkZ2ViZXRhLmNv
bYIcd3d3LmJhbGR3aW5hbHVtbmljb25uZWN0Lm9yZ4IUd3d3LmJhcnRvbmFsdW1u
aS5jb22CGnd3dy5iYXVlcmFsdW1uaWNvbm5lY3QuY29tghN3d3cuYmJuc2Nvbm5l
Y3Qub3JnghV3d3cuYmJuc2dyYWR1YXRlcy5vcmeCFXd3dy5iY2hpZ2huZXR3b3Jr
LmNvbYIXd3d3LmJlYXJkb3dubmV0d29yay5jb22CE3d3dy5iZWxlbmFsdW1uaS5v
cmeCF3d3dy5iZW5qYW1pbmNvbm5lY3QuY29tghh3d3cuYmVubmluZ3RvbmFsdW1u
aS5jb22CHXd3dy5iZXJnZW5jYXRob2xpY2Nvbm5lY3QuY29tgh53d3cuYmVya2Vs
ZXlpc2Nob29sY29ubmVjdC5jb22CGHd3dy5iZXJrZWxleWpuZXR3b3JrLmNvbYIX
d3d3LmJlcmtlbGV5bGF3bGluay5jb22CGnd3dy5iZXJrZWxleWxhd25ldHdvcmsu
Y29tght3d3cuYmVya2VsZXlwcmVwY29ubmVjdC5jb22CF3d3dy5iZXJrc2hpcmVh
bHVtbmkuY29tgh53d3cuYmVya3NoaXJlc2Nob29sY29ubmVjdC5jb22CHXd3dy5i
ZXJtdWRhY29sbGVnZWNvbm5lY3QuY29tghp3d3cuYmVzdGJ1ZGRpZXNjb25uZWN0
Lm9yZ4ITd3d3LmJnYWNvbm5lY3RzLmNvbYIVd3d3LmJvbGl2YXJhbHVtbmkuY29t
ghV3d3cuYm9ubmVyY29ubmVjdC5vcmeCE3d3dy5ib3Njb2FsdW1uaS5vcmeCFnd3
dy5ib3VjaGV0Y29ubmVjdC5vcmeCGHd3dy5ib3lzbGF0aW5jb25uZWN0LmNvbYIa
d3d3LmJyYW5jaG91dC5tYXJsYm9yby5lZHWCGHd3dy5icmFuY2hvdXRjb25uZWN0
LmNvbYIWd3d3LmJyYW5kbWFuYWx1bW5pLmNvbYIWd3d3LmJyZWhtY29tbXVuaXR5
Lm9yZ4Iad3d3LmJyaWRnZXdhdGVyY29ubmVjdC5jb22CEXd3dy5icmlkZ2V6YnQu
Y29tgh53d3cuYnJvY2twb3J0YWx1bW5pY29ubmVjdC5jb22CGXd3dy5icm9va3Np
YW5zY29ubmVjdC5jb22CHXd3dy5idWNrbmVsbGNhcmVlcmNvbm5lY3QuY29tghd3
d3cuYnVja25lbGxjb25uZWN0LmNvbYITd3d3LmJ1Y3Njb25uZWN0Lm9yZzBMBgNV
HSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpo
dHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA
7wB2AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABbZaHTTsAAAQD
AEcwRQIgBnarrnRKaJDHnedVH4NNMlHQr5GUM3PGRG4NhgiASR0CIQC8yM/UyuBu
ecdIp1qcH42XRDU64/rjjyl1T++f7ZsGZgB1ALIeBcyLos2KIE6HZvkruYolIGdr
2vpw57JJUy3vi5BeAAABbZaHTHUAAAQDAEYwRAIgYmrlHjGXo7nbsdGjNJocr877
60lSJKAy5spvfjJJvyICIFko+i4SfbLMMvWePW0UhRwfLGUIHj89N7k56sErCmyQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBc1V2D5jLe3exh46CmcltMCvd5kcVgySYzIpe1
HU3lfBdVyFldOhhvDbA49BRT/5ap1TVBTE/M8Q8tYDiyz/fNGXPoDdlQZfIqtgCg
H8G7HvTixLmFtqAUwTLEfjrqETL4qv8Tscdxf6Rio54ttNqoS6mGLM/Sewh5wt40
RKvLaH59/E/2RDzsgTb+WgKw8x7UfYp+97PDKcbcHq2eCtOC69v/ZCfPGDcZncIv
wrrwBjB3HtGa8RaBqB6e6Duu/CX3d7KtymJk5KZqd4P8ObwZ9cU0mIdYRnnGTNa4
KNxyQWyxmPw0sayndeGhI78BS4ZEhxgDAFNjU54PkmtL4Y4C
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogA9gDMfqD10w/10Q7Ph
dZ0Pm/xin7p/X/NltiuFoy/EZ1uZlAGBy4L5de2it8q2BZi8nx7nAZ0WbJwRnvXV
CT8c6IoIWZgBL6Y5IXkLRT8Z7tL+jhsaXA73EhZesPnY2v62JFUPYRMp6YX18C1N
bDBgjsmlTvOaQoCF/X2l1vlzm7v5U/1n5Vh+h89NTQMDCAxpe1UNYK/7T1eVUTiI
CiEENJaHxWcIlHdijZ1wYO1CHJepU73r2qunYcpdpL+yPknSt4xpCtrxu8nWFqWW
nWWH9AOniZV1I6hlRijffZrHRtTVY89mpORDCZa04DrP0O0B4/rrfY2wIn/v7ko0
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275497214972911621560802022234837842738784
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-04 10:28:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-02 10:28:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bergencatholicconnect.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20450723869989656607167873853115617164624797632372537334624930241888282303376676256580246330346362843471828163646589639140399352271865049765773385926929811295725834694282360433602634772808429589544696304958456985002996322613400677658995062303135373781676234699287868254921280044074396546041430958225993267711928495537379418395610630327430317619754492031286654847981611315919402728481234990116285709350298048803643078815917540956684117168516574940867038319322165262169638199692013249839324530890115019460666341488776570505711876557947194847585880506686983650700230734153385969728958304356483142609377979985289796007121
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5add928b908aee6a4c2bd4f982cc06d40f9347b4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2080 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baalumninetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bacalumni.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backlot.afi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badgerbridgebeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badgerbridgetest.manual.graduway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badgersinfinancetest.manual.graduway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baldwinalumniconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bartonalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baueralumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbnsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbnsgraduates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bchighnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beardown.arizonaalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beardownnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beardownnetwork1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belenalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benjaminconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benningtonalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bergencatholicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleyischoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleyjnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleylawlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleylawnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleyprepconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkshirealumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkshireschoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bermudacollegeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestbuddiesconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bgaconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biolahub.biola.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bolivaralumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonnerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boscoalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bouchetconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boyslatinconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branchout.marlboro.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branchoutconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandmanalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brehmcommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridgewaterconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridgezbt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brockportalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brooksiansconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucknellcareerconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucknellconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baalumninetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bacalumni.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.backlot.afi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badgerbridgebeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baldwinalumniconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bartonalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baueralumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbnsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbnsgraduates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bchighnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beardownnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belenalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benjaminconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benningtonalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bergencatholicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleyischoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleyjnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleylawlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleylawnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleyprepconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkshirealumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkshireschoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bermudacollegeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestbuddiesconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bgaconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bolivaralumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bonnerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boscoalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bouchetconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boyslatinconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.branchout.marlboro.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.branchoutconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brandmanalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brehmcommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bridgewaterconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bridgezbt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brockportalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brooksiansconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bucknellcareerconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bucknellconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bucsconnect.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d96874d3b000004030047304502200676abae744a6890c79de7551f834d3251d0af91943373c6446e0d860880491d022100bcc8cfd4cae06e79c748a75a9c1f8d9744353ae3fae38f29754fef9fed9b0666007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016d96874c7500000403004630440220626ae51e3197a3b9dbb1d1a3349a1cafcefbeb495224a032e6ca6f7e3249bf2202205928fa2e127db2cc32f59e3d6d14851c1f2c65081e3f3d37b939eac12b0a6c90
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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