bbnsconnect.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:64:4d:95:ac:82:07:4d:2a:6e:3a:5f:7c:5e:cf:78:ba:3d was issued on by Let's Encrypt.

With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bbnsconnect.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:64:4d:95:ac:82:07:4d:2a:6e:3a:5f:7c:5e:cf:78:ba:3d
Serial Number (int): 295468222194158319135410680332341695003197
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0a:0f:4e:4e:b3:3b:83:af:7c:62:eb:ea:1c:1e:98:c6:6c:d7:50:1c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c9:4d:1b:6e:6f:f7:ad:0d:67:eb:c5:7c:16:d2:76:4b:a0:ef:db:a1
Fingerprint (sha256): 44:c7:4a:13:3d:ac:71:5c:be:bc:de:4a:45:d3:28:cf:4a:6d:e8:fc:e4:5f:9c:ae:47:1e:7b:2a:17:3e:e1:86

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bbnsconnect.org

72

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bbnsconnect.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

baalumninetwork.com
bacalumni.net
badgerbridgebeta.com
badgerbridgetest.manual.graduway.com
badgersinfinancetest.manual.graduway.com
baldwinalumniconnect.org
bartonalumni.com
baueralumniconnect.com
bbnsconnect.org
bbnsgraduates.org
bchighnetwork.com
beardown.arizonaalumni.com
beardownnetwork.com
beardownnetwork1.com
belenalumni.org
benjaminconnect.com
benningtonalumni.com
berkeleyischoolconnect.com
berkeleyjnetwork.com
berkeleylawlink.com
berkeleylawnetwork.com
berkeleyprepconnect.com
berkshirealumni.com
berkshireschoolconnect.com
bermudacollegeconnect.com
bgaconnects.com
bolivaralumni.com
bonnerconnect.org
bouchetconnect.org
branchout.marlboro.edu
branchoutconnect.com
brandmanalumni.com
bridgewaterconnect.com
bridgezbt.com
brockportalumniconnect.com
brooksiansconnect.com
bucknellcareerconnect.com
bucsconnect.org
www.baalumninetwork.com
www.bacalumni.net
www.badgerbridgebeta.com
www.baldwinalumniconnect.org
www.bartonalumni.com
www.baueralumniconnect.com
www.bbnsconnect.org
www.bbnsgraduates.org
www.bchighnetwork.com
www.beardownnetwork.com
www.belenalumni.org
www.benjaminconnect.com
www.benningtonalumni.com
www.berkeleyischoolconnect.com
www.berkeleyjnetwork.com
www.berkeleylawlink.com
www.berkeleylawnetwork.com
www.berkeleyprepconnect.com
www.berkshirealumni.com
www.berkshireschoolconnect.com
www.bermudacollegeconnect.com
www.bgaconnects.com
www.bolivaralumni.com
www.bonnerconnect.org
www.bouchetconnect.org
www.branchout.marlboro.edu
www.branchoutconnect.com
www.brandmanalumni.com
www.bridgewaterconnect.com
www.bridgezbt.com
www.brockportalumniconnect.com
www.brooksiansconnect.com
www.bucknellcareerconnect.com
www.bucsconnect.org

Other certificates including the domain name bbnsconnect.org

(limited to 100 certificates)
baalumninetwork.com
bobcatconnect.org
beachwoodconnect.com
beachwoodconnect.com
baalumninetwork.com
berkshireschoolconnect.com
bestbuddiesconnect.org
boscoalumni.org
beachwoodconnect.com
bergencatholicconnect.com
beachwoodconnect.com
bbnsconnect.org
bbnsconnect.org
bobcatconnect.org
bobcatconnect.org
bucknellcareerconnect.com
berkshireschoolconnect.com
bobcatconnect.org
bergencatholicconnect.com
bbnsconnect.org
bucknellconnect.com
bbnsconnect.org
bobcatconnect.org
badgersinfinance.net
baalumninetwork.com
bobcatconnect.org
backlot.afi.com
bobcatconnect.org
boyslatinconnect.com
bobcatconnect.org
bucknellcareerconnect.com
bucknellconnect.com
baalumninetwork.com
boscoalumni.org
bucknellcareerconnect.com
bbnsconnect.org
bucknellconnect.com
beachwoodconnect.com

Certificate

The complete raw certificate details for bbnsconnect.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMDTCCCvWgAwIBAgISA2RNlayCB00qbjpffF7PeLo9MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MDcwOTA5MTlaFw0x
OTExMDUwOTA5MTlaMBoxGDAWBgNVBAMTD2JibnNjb25uZWN0Lm9yZzCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBALgWtg8X84Eci32k4L9T55XshJGSZtbW
F1cvg3AhZk6vggz6hTi8OZtVx/DS55HlU19Pp3w/ins+snnlLXwMpcg7FxsIIO3W
HTwq2atyM1mdgGihlEbCYeb1qXIoV8pN7MLKeqcSnPzVXoRv3iIR5Z3OAvKzUAOd
wj+GEfw+zdT9A8YHs9eBG7zy9i9WZwttU7lBsCoHAl0Lwmc2Q5sdvlt87T95983O
wkIoctAWM0SEZ8xECD6rCWKCv0lsoRWbF89AG3pvSbO/Tks3Q71vYF4z4vSefHbe
B/qlm3w7NVJIN6cogpfc5V3phr6ldC+APhOq5vu1fx6Xi7XehnVkxTMCAwEAAaOC
CRswggkXMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUCg9OTrM7g698YuvqHB6YxmzX
UBwwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE
YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnLzCCBtEGA1UdEQSCBsgwggbEghNiYWFsdW1uaW5ldHdvcmsuY29tgg1iYWNh
bHVtbmkubmV0ghRiYWRnZXJicmlkZ2ViZXRhLmNvbYIkYmFkZ2VyYnJpZGdldGVz
dC5tYW51YWwuZ3JhZHV3YXkuY29tgihiYWRnZXJzaW5maW5hbmNldGVzdC5tYW51
YWwuZ3JhZHV3YXkuY29tghhiYWxkd2luYWx1bW5pY29ubmVjdC5vcmeCEGJhcnRv
bmFsdW1uaS5jb22CFmJhdWVyYWx1bW5pY29ubmVjdC5jb22CD2JibnNjb25uZWN0
Lm9yZ4IRYmJuc2dyYWR1YXRlcy5vcmeCEWJjaGlnaG5ldHdvcmsuY29tghpiZWFy
ZG93bi5hcml6b25hYWx1bW5pLmNvbYITYmVhcmRvd25uZXR3b3JrLmNvbYIUYmVh
cmRvd25uZXR3b3JrMS5jb22CD2JlbGVuYWx1bW5pLm9yZ4ITYmVuamFtaW5jb25u
ZWN0LmNvbYIUYmVubmluZ3RvbmFsdW1uaS5jb22CGmJlcmtlbGV5aXNjaG9vbGNv
bm5lY3QuY29tghRiZXJrZWxleWpuZXR3b3JrLmNvbYITYmVya2VsZXlsYXdsaW5r
LmNvbYIWYmVya2VsZXlsYXduZXR3b3JrLmNvbYIXYmVya2VsZXlwcmVwY29ubmVj
dC5jb22CE2JlcmtzaGlyZWFsdW1uaS5jb22CGmJlcmtzaGlyZXNjaG9vbGNvbm5l
Y3QuY29tghliZXJtdWRhY29sbGVnZWNvbm5lY3QuY29tgg9iZ2Fjb25uZWN0cy5j
b22CEWJvbGl2YXJhbHVtbmkuY29tghFib25uZXJjb25uZWN0Lm9yZ4ISYm91Y2hl
dGNvbm5lY3Qub3JnghZicmFuY2hvdXQubWFybGJvcm8uZWR1ghRicmFuY2hvdXRj
b25uZWN0LmNvbYISYnJhbmRtYW5hbHVtbmkuY29tghZicmlkZ2V3YXRlcmNvbm5l
Y3QuY29tgg1icmlkZ2V6YnQuY29tghpicm9ja3BvcnRhbHVtbmljb25uZWN0LmNv
bYIVYnJvb2tzaWFuc2Nvbm5lY3QuY29tghlidWNrbmVsbGNhcmVlcmNvbm5lY3Qu
Y29tgg9idWNzY29ubmVjdC5vcmeCF3d3dy5iYWFsdW1uaW5ldHdvcmsuY29tghF3
d3cuYmFjYWx1bW5pLm5ldIIYd3d3LmJhZGdlcmJyaWRnZWJldGEuY29tghx3d3cu
YmFsZHdpbmFsdW1uaWNvbm5lY3Qub3JnghR3d3cuYmFydG9uYWx1bW5pLmNvbYIa
d3d3LmJhdWVyYWx1bW5pY29ubmVjdC5jb22CE3d3dy5iYm5zY29ubmVjdC5vcmeC
FXd3dy5iYm5zZ3JhZHVhdGVzLm9yZ4IVd3d3LmJjaGlnaG5ldHdvcmsuY29tghd3
d3cuYmVhcmRvd25uZXR3b3JrLmNvbYITd3d3LmJlbGVuYWx1bW5pLm9yZ4IXd3d3
LmJlbmphbWluY29ubmVjdC5jb22CGHd3dy5iZW5uaW5ndG9uYWx1bW5pLmNvbYIe
d3d3LmJlcmtlbGV5aXNjaG9vbGNvbm5lY3QuY29tghh3d3cuYmVya2VsZXlqbmV0
d29yay5jb22CF3d3dy5iZXJrZWxleWxhd2xpbmsuY29tghp3d3cuYmVya2VsZXls
YXduZXR3b3JrLmNvbYIbd3d3LmJlcmtlbGV5cHJlcGNvbm5lY3QuY29tghd3d3cu
YmVya3NoaXJlYWx1bW5pLmNvbYIed3d3LmJlcmtzaGlyZXNjaG9vbGNvbm5lY3Qu
Y29tgh13d3cuYmVybXVkYWNvbGxlZ2Vjb25uZWN0LmNvbYITd3d3LmJnYWNvbm5l
Y3RzLmNvbYIVd3d3LmJvbGl2YXJhbHVtbmkuY29tghV3d3cuYm9ubmVyY29ubmVj
dC5vcmeCFnd3dy5ib3VjaGV0Y29ubmVjdC5vcmeCGnd3dy5icmFuY2hvdXQubWFy
bGJvcm8uZWR1ghh3d3cuYnJhbmNob3V0Y29ubmVjdC5jb22CFnd3dy5icmFuZG1h
bmFsdW1uaS5jb22CGnd3dy5icmlkZ2V3YXRlcmNvbm5lY3QuY29tghF3d3cuYnJp
ZGdlemJ0LmNvbYIed3d3LmJyb2NrcG9ydGFsdW1uaWNvbm5lY3QuY29tghl3d3cu
YnJvb2tzaWFuc2Nvbm5lY3QuY29tgh13d3cuYnVja25lbGxjYXJlZXJjb25uZWN0
LmNvbYITd3d3LmJ1Y3Njb25uZWN0Lm9yZzBMBgNVHSAERTBDMAgGBmeBDAECATA3
BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNy
eXB0Lm9yZzCCAQIGCisGAQQB1nkCBAIEgfMEgfAA7gB1AOJpS64m6OlACeiGG7Y7
g9Q+5/50iPukjyiTAZ3d8dv+AAABbGuN7NUAAAQDAEYwRAIgeVJ8KGJIqCk34tMm
Ou3WsRYF7U4WrklAGlppzEKIU+4CIAbCHghzrpSUdcZUBlGM3RdBNtHqi1YIXqs4
rP/kTxEMAHUAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL2I0AAAFsa43s
wwAABAMARjBEAiAJYbFVHjficSxbTyWh6J8vF9p5JKTpPic8c7nhVqZZPwIgeB2T
0M6XZg1UvqNf2tOnDkqQCWZA+CcannThCXdnkEQwDQYJKoZIhvcNAQELBQADggEB
AECqFOdRduBIQoai9Egn1QaijutezwlGlklr2JMTWc33FGH12+UESyo2MnbZfEXF
K0qd1IgUjn4kVWYJOMXSDdUSHI+bqZrhr+VSboAKwRhlsC94HoKTUaWZwOietcPI
BQBLJMyTiEImxvs/PtPy8opFOkmYTvDu9Yzf9ZOqrmvlXc06riSi72rkMlQArNt3
2B6yC0SDIZCvQDZ1b5+b9SZGaj5FFr7xn+mzxDkF5AXc7wllCMHPXAk/cqMbkiIb
LzwcuGL7je2+rrdEa7DRkjbfXjLsMNQrgM6P03Zbtor/sJLg3QHsHyCbvCKGKlvk
msG1znKKI8ivEnHHgpIFkWc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBa2DxfzgRyLfaTgv1Pn
leyEkZJm1tYXVy+DcCFmTq+CDPqFOLw5m1XH8NLnkeVTX0+nfD+Kez6yeeUtfAyl
yDsXGwgg7dYdPCrZq3IzWZ2AaKGURsJh5vWpcihXyk3swsp6pxKc/NVehG/eIhHl
nc4C8rNQA53CP4YR/D7N1P0Dxgez14EbvPL2L1ZnC21TuUGwKgcCXQvCZzZDmx2+
W3ztP3n3zc7CQihy0BYzRIRnzEQIPqsJYoK/SWyhFZsXz0Abem9Js79OSzdDvW9g
XjPi9J58dt4H+qWbfDs1Ukg3pyiCl9zlXemGvqV0L4A+E6rm+7V/HpeLtd6GdWTF
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295468222194158319135410680332341695003197
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-07 09:09:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-05 09:09:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bbnsconnect.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23239047408005033266306849177131733840264043848655930028883242572620675915565691069302515535145290109856336962499798052801933371834080248176671876316450479228816575571104916578114158358866220458814599323709378728506348259879201602664880434365897437092818539194785218620868706398352371637505737136482089808592429221939750253299289636656026651228753924988799299930837122986528326168561722790761813183635647085996222806981782832525514557912438711984287140298523628053985184023409470147592791265823587965161258013273685483911116419399164441710831755882892586259912748753502670553360114154987287201684550754240485677909299
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0a0f4e4eb33b83af7c62ebea1c1e98c66cd7501c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1736 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baalumninetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bacalumni.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badgerbridgebeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badgerbridgetest.manual.graduway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badgersinfinancetest.manual.graduway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baldwinalumniconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bartonalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baueralumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbnsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbnsgraduates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bchighnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beardown.arizonaalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beardownnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beardownnetwork1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belenalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benjaminconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benningtonalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleyischoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleyjnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleylawlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleylawnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleyprepconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkshirealumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkshireschoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bermudacollegeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bgaconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bolivaralumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonnerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bouchetconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branchout.marlboro.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branchoutconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandmanalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridgewaterconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridgezbt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brockportalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brooksiansconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucknellcareerconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baalumninetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bacalumni.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badgerbridgebeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baldwinalumniconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bartonalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baueralumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbnsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbnsgraduates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bchighnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beardownnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belenalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benjaminconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benningtonalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleyischoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleyjnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleylawlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleylawnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleyprepconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkshirealumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkshireschoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bermudacollegeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bgaconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bolivaralumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bonnerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bouchetconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.branchout.marlboro.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.branchoutconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brandmanalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bridgewaterconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bridgezbt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brockportalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brooksiansconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bucknellcareerconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bucsconnect.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c6b8decd50000040300463044022079527c286248a82937e2d3263aedd6b11605ed4e16ae49401a5a69cc428853ee022006c21e0873ae949475c65406518cdd174136d1ea8b56085eab38acffe44f110c00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c6b8decc3000004030046304402200961b1551e37e2712c5b4f25a1e89f2f17da7924a4e93e273c73b9e156a6593f0220781d93d0ce97660d54bea35fdad3a70e4a90096640f8271a9e74e10977679044
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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