alumni.bcm.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c1:be:a4:53:b0:13:c8:3f:d7:31:2f:15:c0:30:77:d2:32 was issued on by Let's Encrypt.

With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=alumni.bcm.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c1:be:a4:53:b0:13:c8:3f:d7:31:2f:15:c0:30:77:d2:32
Serial Number (int): 327264761164296073123314179642988969841202
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7c:01:3f:da:47:c0:29:a7:a7:b1:96:80:79:9e:c9:c3:b0:aa:8f:5b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6e:25:0c:11:d5:20:0b:59:0c:42:51:6f:2d:2d:ed:60:22:73:57:a6
Fingerprint (sha256): 51:e0:db:7c:fe:4c:70:c6:ab:19:da:61:69:75:85:79:5a:76:83:87:32:ac:9a:25:5c:ff:4d:d0:2d:86:74:71

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate alumni.bcm.edu

72

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alumni.bcm.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aceconnection.org
acomconnect.com
aexrochester.org
africanhumanities.org
ahlefconnect.com
aisalumniconnect.org
alemanyconnect.org
allhandsandheartsalumni.org
allhandsbeta.com
alumni.bcm.edu
alumni.brandman.edu
alumni.cayetano.edu.pe
alumni.cdl.ch
alumni.estacio.br
alumni.harpercollege.edu
alumni.maua.br
alumni.puc-campinas.edu.br
alumni.siebelinstitute.com
alumni.trilogyed.com
alumni.uarts.edu
alumni.udsm.ac.tz
alumni.unach.cl
alumniatbhs.com
alumnijaveriana.com
alumniknightnetwork.com
alumniuii.net
ampleforthglobal.org.uk
andoveralumni.org
andrewsnetwork.org
antigosalunos.aaapucrio.com.br
apuconnect.com
aqsaintsnetwork.com
arrowsconnect.org
asfmalumni.com
asulawalumninetwork.com
atecunited.com
athenianlink.com
avonoldfarmsalumni.com
www.aceconnection.org
www.acomconnect.com
www.aexrochester.org
www.africanhumanities.org
www.ahlefconnect.com
www.aisalumniconnect.org
www.alemanyconnect.org
www.allhandsandheartsalumni.org
www.allhandsbeta.com
www.alumni.brandman.edu
www.alumni.cayetano.edu.pe
www.alumni.estacio.br
www.alumni.harpercollege.edu
www.alumni.maua.br
www.alumni.puc-campinas.edu.br
www.alumni.uarts.edu
www.alumni.udsm.ac.tz
www.alumni.unach.cl
www.alumniatbhs.com
www.alumnijaveriana.com
www.alumniknightnetwork.com
www.alumniuii.net
www.ampleforthglobal.org.uk
www.andoveralumni.org
www.andrewsnetwork.org
www.antigosalunos.aaapucrio.com.br
www.apuconnect.com
www.aqsaintsnetwork.com
www.arrowsconnect.org
www.asfmalumni.com
www.asulawalumninetwork.com
www.atecunited.com
www.athenianlink.com
www.avonoldfarmsalumni.com

Other certificates including the domain name bcm.edu

(limited to 100 certificates)
forms.bcm.edu
sapintportal.bcm.edu
intranet-calendar.bcm.edu
semaphore-qa.bcm.edu
alphaphinetwork.com
bcmess.bcm.edu
connect.bcm.edu
webmail.hnl.bcm.edu
vpn.bcm.edu
lyncfepool1.bcm.edu
redcap.research.bcm.edu
acsconnects.org
docuware.admin.bcm.edu
password.bcm.edu
cvd.hgsc.bcm.edu
aceconnection.org
aatlconnected.com
media.bcm.edu
hgsc-hcp-aw.hgsc.bcm.edu
pwss.bcm.tmc.edu
vpn01.bcm.edu
tst-slicerdicer.clinical.bcm.edu
anscsp.research.bcm.edu
myappsdev.bcm.edu
alumniucsh.com
sigauth.bcm.edu
evault.bcm.edu
oncoredev.dldcc.bcm.edu
deku.dldcc.bcm.edu
www.bcm.edu
connect.bcm.edu
cryoemdb.bcm.edu
mychart.bcm.edu
cams.bcm.edu
pdxportal-stg.dldcc.bcm.edu
aceconnection.org
blake.bcm.edu
biobank.research.bcm.edu
www.hgsc.bcm.edu
fmog.bcm.edu
tcrbbiobank.research.bcm.edu
tls.automattic.com
aatlconnected.com
epa-safegx0-p01.ad.bcm.edu
ictr-qa.research.bcm.edu
sug-angus.hgsc.bcm.edu
careeverywhere.bcm.edu
vpn02.bcm.edu
mychart.bcm.edu
epicapps.bcm.edu
vpn01.bcm.edu
mobid.analytics.bcm.edu
claimsmanager-dev.clinical.bcm.edu
collaborate.bcm.edu
mhgretreat.research.bcm.edu
cpd.education.bcm.edu
ahlafoundationconnect.com
cas.research.bcm.edu
mobi.analytics.bcm.edu
ecw-calabrio-p01.bcm.edu
progeny-fhq-dev.dldcc.bcm.edu
tls.automattic.com
apps.bcm.edu
vpn02.bcm.edu
tls.automattic.com
tls.automattic.com
iron-ea.bcm.edu
oncoredev.dldcc.bcm.edu
hgsc-vmweb-08.hgsc.bcm.edu
ahlafoundationconnect.com
halo-esxi.lssbc.bcm.edu
careeverywhere.bcm.edu
primordial.clinical.bcm.edu
igap.research.bcm.edu
connect.bcm.edu
connect.bcm.edu
biobank.research.bcm.edu
oncore-stg.dldcc.bcm.edu
sharepoint.bcm.edu
hsweb-trn.clincal.bcm.edu
dev-slicerdicer.clinical.bcm.edu
ecl-uprint-p01.ad.bcm.edu
tls.automattic.com
mediasrc.bcm.edu
tls.automattic.com
metrics.apps.bcm.edu
fmog-qa.bcm.edu
access.fortefoundation.org
cams.bcm.edu
brain.bcm.edu
nadcdev.bcm.edu
mhgretreat.research.bcm.edu
primordial.clinical.bcm.edu
ictr-dev.research.bcm.edu
acquire2-cats-stg.research.bcm.edu
epicapps-dev.bcm.edu
myappsdev.bcm.edu
cas.research.bcm.edu
aatlconnected.com
oncore-dev.dldcc.bcm.edu

Certificate

The complete raw certificate details for alumni.bcm.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNFx+Xk1ctGzNeyndNx4
A1ldluZyqdLON6TdUFRi64I0Dk6R503p1DUYBXh07xS9TajDxR6KMajpJDUXVQjv
cCDQHrIWOU1wqKNO7ZH3gr4waA9ZVXe6BGcFwgUWYqrAvQlrVS0Z3noWtWiBpCVt
fAI93Wze0KoPR9QXbEuHjCu9asdAJnZYEKlCU48hkFOMNteakq0qS30Tg1TKYSQi
BBSK9vvEQ8xi989qGs1yVkNgxAbbKu6AHlwLfyPXfyjasyFWaiSPnXQOfD+vI7Ar
4OiPwjXOp9UcGr5T+20auAmT+cvd09/LhHUlAj/PXqnsIbPZFG1bp5HszdpNowk0
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327264761164296073123314179642988969841202
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-25 05:49:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-23 05:49:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alumni.bcm.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19796456858538749976911015809253564781868408770888494972856491303770545891229152733047978214447979723174799679279078948152396010075518346971572049258814791793077967914262903054579982828122693480055316400538407281571517536580138894764204167602529870434804101136470230679505702636212295864201723691459390967166619383804892323404636214531581242235837688746036227352066335697798087453904424096294522980124517836381743001363568939493378376286845635637166721585113511591579227101616517212507062108372939612450927000107906295897677428406129842284465417136575949574405527556270836075198153117334939948206590248662148288427263
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7c013fda47c029a7a7b19680799ec9c3b0aa8f5b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1623 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aceconnection.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acomconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aexrochester.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africanhumanities.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahlefconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aisalumniconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alemanyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allhandsandheartsalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allhandsbeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.bcm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.brandman.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.cayetano.edu.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.cdl.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.estacio.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.harpercollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.maua.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.puc-campinas.edu.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.siebelinstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.trilogyed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.uarts.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.udsm.ac.tz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.unach.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniatbhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnijaveriana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniknightnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniuii.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ampleforthglobal.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andoveralumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrewsnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antigosalunos.aaapucrio.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqsaintsnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arrowsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asfmalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asulawalumninetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atecunited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athenianlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avonoldfarmsalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aceconnection.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acomconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aexrochester.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.africanhumanities.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahlefconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aisalumniconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alemanyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allhandsandheartsalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allhandsbeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.brandman.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.cayetano.edu.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.estacio.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.harpercollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.maua.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.puc-campinas.edu.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.uarts.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.udsm.ac.tz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.unach.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniatbhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnijaveriana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniknightnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniuii.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ampleforthglobal.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andoveralumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andrewsnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antigosalunos.aaapucrio.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aqsaintsnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arrowsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asfmalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asulawalumninetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atecunited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athenianlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avonoldfarmsalumni.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e01adc625000004030047304502201eef43aa547b7649032171cf4e399b36e89d639969b864f8e017d17659bf37f1022100fdcec6172ee107fbd7f34879afe0bc919f31d98fc8f6b9bc2d0ef4ab783f37b7007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e01adc6470000040300483046022100f2bffd4a37e9281587d94f77a04afa3bd834e03673f671f867e7f432fc3ced94022100ac2abaf7700dc939d1381efaf00bc2bf1f53598ebc09cdb642a80e97e818add3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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