campionalumni.org

Issued by R3

About this certificate

This digital certificate with serial number 04:c2:bb:2b:03:1a:65:76:c4:6d:8a:ae:77:07:df:59:e9:3e was issued on by Let's Encrypt.

With 62 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=campionalumni.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c2:bb:2b:03:1a:65:76:c4:6d:8a:ae:77:07:df:59:e9:3e
Serial Number (int): 414712711876618307367380383812949657643326
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 50:92:6a:34:bb:08:d6:bd:8f:fb:b7:f1:8e:b8:c4:8f:8a:6d:b7:78
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 93:03:fb:5c:34:20:e2:d1:12:e7:7c:d7:49:1f:9d:94:1a:6e:95:55
Fingerprint (sha256): 47:19:44:d1:57:f0:cd:a3:4f:64:31:68:d6:70:9c:66:5d:09:93:a9:b3:58:b6:53:51:fb:7c:ff:20:7a:31:cd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate campionalumni.org

62

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for campionalumni.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

campionalumni.org
campusnetzwerk.ac.at
casscommunity.co.uk
caterhamconnected.co.uk
caterhamschoolsociety.co.uk
centralecommunity.com
cettalumni.com
cettconnect.es
challonersconnected.com
challonershighnetwork.com
charterhouseconnect.org.uk
cheveningconnect.com
choba.org
chsnetwork.co.uk
cisvalumni-connect.org
citizensconnect.co.uk
cityshefalumni.org
cjlmentorship360.com
clarehallconnect.uk
clubdanetwork.com
colfesnet.com
columbansconnect.org
community.alumniportal-deutschland.org
community.birthrightexcel.com
community.bpp.com
community.mancosa.co.za
connect.isbasel.ch
connect.regent.ac.za
connected.cardiff.ac.uk
csfcalumni.com
cumbrianetwork.global
www.campionalumni.org
www.campusnetzwerk.ac.at
www.casscommunity.co.uk
www.caterhamconnected.co.uk
www.caterhamschoolsociety.co.uk
www.centralecommunity.com
www.cettalumni.com
www.cettconnect.es
www.challonersconnected.com
www.challonershighnetwork.com
www.charterhouseconnect.org.uk
www.cheveningconnect.com
www.choba.org
www.chsnetwork.co.uk
www.cisvalumni-connect.org
www.citizensconnect.co.uk
www.cityshefalumni.org
www.cjlmentorship360.com
www.clarehallconnect.uk
www.clubdanetwork.com
www.colfesnet.com
www.columbansconnect.org
www.community.alumniportal-deutschland.org
www.community.birthrightexcel.com
www.community.bpp.com
www.community.mancosa.co.za
www.connect.isbasel.ch
www.connect.regent.ac.za
www.connected.cardiff.ac.uk
www.csfcalumni.com
www.cumbrianetwork.global

Other certificates including the domain name campionalumni.org

(limited to 100 certificates)
cumbrianetwork.global
campionalumni.org
campionalumni.org
campionalumni.org
community.mancosa.co.za
campionalumni.org
connected.cardiff.ac.uk
ulaw-alumni.com
campionalumni.org
ulaw-alumni.com
community.mancosa.co.za
challonershighnetwork.com
campionalumni.org
casscommunity.co.uk
ulaw-alumni.com
choba.org
campionalumni.org
campionalumni.org
cettalumni.com
campionalumni.org
ulaw-alumni.com
caterhamschoolsociety.co.uk
ulaw-alumni.com
cettalumni.com
campionalumni.org
campionalumni.org
campionalumni.org
colfesnet.com
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
ulaw-alumni.com
challonershighnetwork.com
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
choba.org
ulaw-alumni.com
campionalumni.org
campionalumni.org
ulaw-alumni.com
ulaw-alumni.com
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
charterhouseconnect.org.uk
campionalumni.org
campionalumni.org
campionalumni.org
community.mancosa.co.za
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
ulaw-alumni.com
connected.cardiff.ac.uk
campionalumni.org
caterhamschoolsociety.co.uk
challonershighnetwork.com
cettalumni.com
challonershighnetwork.com
campionalumni.org
ulaw-alumni.com
campionalumni.org
ulaw-alumni.com
campionalumni.org
ulaw-alumni.com
charterhouseconnecttest.manual.graduway.com
campionalumni.org
caterhamschoolsociety.co.uk
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
ulaw-alumni.com
campionalumni.org
community.mancosa.co.za
corpusalumni.com
community.mancosa.co.za
campionalumni.org
community.mancosa.co.za
ulaw-alumni.com
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
ulaw-alumni.com
community.mancosa.co.za
campionalumni.org
campionalumni.org
campionalumni.org
ulaw-alumni.com
cityshefalumni.org
cettalumni.com
connected.cardiff.ac.uk
campionalumni.org
campionalumni.org

Certificate

The complete raw certificate details for campionalumni.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4fWst3IJGQnZhBLfWB/
+1cMquCdKCVG8cfmmVj/hN3XNH4H90iuWo1IKjMBCRtFjLtsNUvEH7+Yg3JJ2e5v
INTJiG7hdKhXDs0MnXUeVoVujKQR0XX5AORwXVYRK7tSkVc3zcAJp1GkbuQmqZTb
VabFpo0Z7E3bGDt5bI69HLZpslymW0+VydQ02F8buvHsRm340zF2eqFo8+9fhvw/
NP4gT8nBrwsfdNtKvrPQKPWYdAqraEnVMdmbruz6/TN8FswbQRkovCISuOQEadZY
BVi0hMbwUhmHuK7p2WWW1cMFfnEsyXv4wboE4v/xiZC38X4yZeBLK+bve76Sm/fe
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 414712711876618307367380383812949657643326
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-15 13:37:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-14 13:37:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'campionalumni.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19128968593013995977274654303920504122001014582659904997436425401280895504821997078718822567331630423153184670751424124845297930476132378366498729414329590816985291648033601894039661064969219681481867561317992393983682538895301795937852979719720605392085192618053213198530990205214370644100741377190185644276817868986854048005493798859185157266875400034404488491125733646261028195315105423337569811411562057136582008037545950486095570011339581336536713558691114871439003605632914441771822163417691603306551889400969857029077907166322208332153180007819558694249546492363157093576073206583116128753707245293253592342271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							50926a34bb08d6bd8ffbb7f18eb8c48f8a6db778
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1506 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campionalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusnetzwerk.ac.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casscommunity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caterhamconnected.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caterhamschoolsociety.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralecommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cettalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cettconnect.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'challonersconnected.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'challonershighnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charterhouseconnect.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheveningconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'choba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chsnetwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cisvalumni-connect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citizensconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityshefalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cjlmentorship360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clarehallconnect.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubdanetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colfesnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbansconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.alumniportal-deutschland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.birthrightexcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.bpp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.mancosa.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.isbasel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.regent.ac.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connected.cardiff.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csfcalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cumbrianetwork.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campionalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campusnetzwerk.ac.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casscommunity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caterhamconnected.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caterhamschoolsociety.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralecommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cettalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cettconnect.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.challonersconnected.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.challonershighnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charterhouseconnect.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheveningconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.choba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chsnetwork.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cisvalumni-connect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citizensconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityshefalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cjlmentorship360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clarehallconnect.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubdanetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colfesnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbansconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.community.alumniportal-deutschland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.community.birthrightexcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.community.bpp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.community.mancosa.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.isbasel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.regent.ac.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connected.cardiff.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csfcalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cumbrianetwork.global'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a800000178d5f73c150000040300473045022041f9d433d1aaf6590c6d40a73d8e1ac9974437282fcf58182497cdffe0ed7b9b022100ca2f1475d66eb616e9a62bc5d7e38604c6d13ec1818bd944727a61b9baea5eba007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000178d5f73bf30000040300483046022100ef6a36f2cd4c1a3ec8c934c674320e72cebec43da37c89302249986a8ae067cd022100fee40a45c8e7be7d0d8def2ab0a3df999e736a29e9cdc2eff3179e0133a53828
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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