cecconnect.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:80:92:b8:db:f2:19:63:95:bd:41:7e:9e:e3:e3:90:44:28 was issued on by Let's Encrypt.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cecconnect.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:80:92:b8:db:f2:19:63:95:bd:41:7e:9e:e3:e3:90:44:28
Serial Number (int): 305088027892196207433104481679751292929064
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c0:ed:6f:d0:c7:48:0c:31:a7:00:29:ba:6b:76:1d:43:12:c2:21:40
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1d:90:29:81:8c:70:f7:bf:e6:67:ac:8f:f1:cc:96:f2:40:19:5c:8c
Fingerprint (sha256): 4c:3d:95:6e:df:85:cd:fb:b6:b3:f6:3b:4d:ab:3a:2d:b5:0b:5d:33:88:56:88:0d:4e:73:7f:24:a0:9b:99:be

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cecconnect.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cecconnect.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

canisiusconnect.com
cardinalsconnect.com
careerdesignlabs.org
carreirasuvv.com
carrollalumni.com
carrollconnect.com
cbumusicconnect.com
cdl-family.org
cdl.sps.columbia.edu
cecconnect.com
centralalumni.com
centrumconnect.com
cerritosconnect.com
chadwickconnect.org
chahtascholars.com
champlainconnect.org
chargerconnect.org
churchillconnect.com
cityuconnect.com
cleoconnection.com
clippersconnect.org
cluconnect.com
codalumniconnect.com
cokescholarsconnect.org
collegecrusadenetwork.com
collegetrackconnect.com
coloradoacademyconnect.org
columbusacademyalumni.org
communikeynetwork.com
connect.cbu.edu
connect.harvardae.org
connect.psichi.org
connect.ruw.edu.bh
connect.woodstockacademy.org
connect2bristol.org
connectbumc.com
connectddd.org
connectgettysburg.com
connectlatinschool.org
connects.emory.edu
connectstc.com
cookeconnect.com
cooperalumnione.com
coppeadconnect.com
corviasconnects.com
cpl-alumni.org
crusadersconnect.org
csun.matadormentoring.com
cualumni.network
cuembaalumni.com
www.canisiusconnect.com
www.cardinalsconnect.com
www.careerdesignlabs.org
www.carreirasuvv.com
www.carrollalumni.com
www.carrollconnect.com
www.cbumusicconnect.com
www.cdl-family.org
www.cdl.sps.columbia.edu
www.cecconnect.com
www.centralalumni.com
www.centrumconnect.com
www.cerritosconnect.com
www.chadwickconnect.org
www.chahtascholars.com
www.champlainconnect.org
www.chargerconnect.org
www.churchillconnect.com
www.cityuconnect.com
www.cleoconnection.com
www.clippersconnect.org
www.cluconnect.com
www.codalumniconnect.com
www.cokescholarsconnect.org
www.collegecrusadenetwork.com
www.collegetrackconnect.com
www.coloradoacademyconnect.org
www.columbusacademyalumni.org
www.communikeynetwork.com
www.connect.cbu.edu
www.connect.harvardae.org
www.connect.psichi.org
www.connect.ruw.edu.bh
www.connect2bristol.org
www.connectbumc.com
www.connectddd.org
www.connectgettysburg.com
www.connectlatinschool.org
www.connectstc.com
www.cookeconnect.com
www.cooperalumnione.com
www.coppeadconnect.com
www.corviasconnects.com
www.cpl-alumni.org
www.crusadersconnect.org
www.cualumni.network
www.cuembaalumni.com

Other certificates including the domain name cecconnect.com

(limited to 100 certificates)
canterburycommunity.org
cecconnect.com
canisiusconnect.com
cooperalumnione.com
cecconnect.com
m.cecconnect.com
canterburycommunity.org
cooperalumnione.com
cecconnect.com
cooperalumnione.com
cooperalumnione.com
cecconnect.com
cecconnect.com
cecconnect.com
collegecrusadenetwork.com
cooperalumnione.com
canterburycommunity.org
cooperalumnione.com
cooperalumnione.com
cecconnect.com
cardinalsconnect.com
canisiusconnect.com
cooperalumnione.com
cooperalumnione.com
m.cecconnect.com
cecconnect.com
canterburycommunity.org
canterburycommunity.org
cecconnect.com
canterburycommunity.org
cooperalumnione.com
m.cecconnect.com
m.cecconnect.com
cecconnect.com
cecconnect.com
cooperalumnione.com
cooperalumnione.com
cecconnect.com
canisiusconnect.com
cooperalumnione.com
m.cecconnect.com
cecconnect.com
collegecrusadenetwork.com
cooperalumnione.com
cooperalumnione.com
cecconnect.com
canterburycommunity.org
cecconnect.com
cecconnect.com
cecconnect.com
collegecrusadenetwork.com
canterburycommunity.org
collegecrusadenetwork.com
cecconnect.com
m.cecconnect.com
cooperalumnione.com
collegecrusadenetwork.com
cecconnect.com
cardinalsconnect.com
cooperalumnione.com
cecconnect.com
cooperalumnione.com
m.cecconnect.com
collegecrusadenetwork.com
collegecrusadenetwork.com

Certificate

The complete raw certificate details for cecconnect.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXKFLA0xL3Guz0FFgb/X
Ruxjt1g9Mh+A/doTX3BKGses+o2dM4a8daEu7urB79Spsq3Gh7u+wFjGtaZNoQ2d
CHAZdc20x6bmF1+3JRZTT9o1UWf8+r4hyUQAmXUDnIVxRPu8k+78cjM/1taI+Nmj
zuut3SXInDp5yrgctNxJ7GGtxs6ydj1HypJDDPjOYoRbX1AqFnfGuPiccJUag97t
27YJTU/yGTF3hhPdbGDREQYESpnUraPVrHHGCKJFNFW61+4wFzarooLfGtCeKmyM
EhxiC7xS8rKORrqnkTM3cHx/t/39WmyH5lywh7NeLItFrzgqLBNUuxokpU3DTPZQ
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305088027892196207433104481679751292929064
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-09 17:42:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-08 17:42:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cecconnect.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18865979456991530248733060222453750489850852595043786183545113719709392140608172830197059678925154119554958069344166091381312935353221681567238136094854817949038246374815577173746772660647399445837428108606197075460928274447847963754155697275771998822125615166967978648179681092528206228453615478980908764869566368547561219959329212081759588170115516923217091272089241648475282529181249885946818834485147891226837099266510853644848723216658365967941889783702272086331327141772129892145562691749662702084959425037759745199864599962934022537340138838282327067913511510052413461459249351089392002173407131841442734297167
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c0ed6fd0c7480c31a70029ba6b761d4312c22140
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2199 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canisiusconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardinalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careerdesignlabs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carreirasuvv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrollalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrollconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbumusicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdl-family.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdl.sps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cecconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centrumconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cerritosconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chadwickconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chahtascholars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'champlainconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chargerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchillconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleoconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clippersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cluconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cokescholarsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegecrusadenetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegetrackconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradoacademyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbusacademyalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communikeynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.cbu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.harvardae.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.psichi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.ruw.edu.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.woodstockacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect2bristol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectbumc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectddd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectgettysburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectlatinschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connects.emory.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectstc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cooperalumnione.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coppeadconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corviasconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpl-alumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crusadersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csun.matadormentoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cualumni.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuembaalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canisiusconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardinalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.careerdesignlabs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carreirasuvv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrollalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrollconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbumusicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdl-family.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdl.sps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cecconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centrumconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cerritosconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chadwickconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chahtascholars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.champlainconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chargerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.churchillconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cleoconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clippersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cluconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cokescholarsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegecrusadenetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegetrackconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coloradoacademyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbusacademyalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communikeynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.cbu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.harvardae.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.psichi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.ruw.edu.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect2bristol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectbumc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectddd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectgettysburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectlatinschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectstc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cookeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cooperalumnione.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coppeadconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corviasconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpl-alumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crusadersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cualumni.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cuembaalumni.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f8b9d16a30000040300463044022075661ffdd480a53489bfe9c0d0b766de68985384afa556264d7ba32330d2a1ca02203f8d1a1871b8ea7eb87194e14ef6b7e2309ac69c7888a5b73358a8117e5c789f00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f8b9d16d20000040300473045022051120f59118be35906a72c6d9e3bb4957eebe25e3f04b931535b45227657fdeb022100f67aeff6f88e99ee1ebcf5a10ed377a33e9bb2535827bfec89325203d2accf03
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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