bucknellcareerconnect.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7b:a7:88:02:0c:b2:e4:c9:c5:49:76:f4:5a:0d:d6:48:c1 was issued on by Let's Encrypt.

With 74 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bucknellcareerconnect.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7b:a7:88:02:0c:b2:e4:c9:c5:49:76:f4:5a:0d:d6:48:c1
Serial Number (int): 303414276195795934710343740931374048495809
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3a:f7:ea:79:7c:94:e4:95:94:b0:69:71:1f:2b:56:88:9e:44:0a:9f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 26:c5:af:8f:5b:1f:39:f8:ac:67:7c:1f:2a:f4:88:19:9e:88:a6:a8
Fingerprint (sha256): 56:89:a4:a2:22:5e:44:1e:72:14:f1:d6:c4:22:d4:29:63:51:36:5b:aa:fa:fc:b9:e7:1c:e6:f9:41:53:d1:88

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bucknellcareerconnect.com

74

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bucknellcareerconnect.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

baalumninetwork.com
bacalumni.net
badgerbridgebeta.com
badgerbridgetest.manual.graduway.com
badgersinfinancetest.manual.graduway.com
baldwinalumniconnect.org
bartonalumni.com
baueralumniconnect.com
bbnsconnect.org
bbnsgraduates.org
bchighnetwork.com
beardown.arizonaalumni.com
beardownnetwork.com
beardownnetwork1.com
belenalumni.org
benjaminconnect.com
benningtonalumni.com
berkeleyischoolconnect.com
berkeleyjnetwork.com
berkeleylawlink.com
berkeleylawnetwork.com
berkeleyprepconnect.com
berkshirealumni.com
berkshireschoolconnect.com
bermudacollegeconnect.com
bgaconnects.com
bolivaralumni.com
bonnerconnect.org
bouchetconnect.org
branchout.marlboro.edu
branchoutconnect.com
brandmanalumni.com
bridgewaterconnect.com
bridgezbt.com
brockportalumniconnect.com
brooksiansconnect.com
bucknellcareerconnect.com
bucknellconnect.com
bucsconnect.org
www.baalumninetwork.com
www.bacalumni.net
www.badgerbridgebeta.com
www.baldwinalumniconnect.org
www.bartonalumni.com
www.baueralumniconnect.com
www.bbnsconnect.org
www.bbnsgraduates.org
www.bchighnetwork.com
www.beardownnetwork.com
www.belenalumni.org
www.benjaminconnect.com
www.benningtonalumni.com
www.berkeleyischoolconnect.com
www.berkeleyjnetwork.com
www.berkeleylawlink.com
www.berkeleylawnetwork.com
www.berkeleyprepconnect.com
www.berkshirealumni.com
www.berkshireschoolconnect.com
www.bermudacollegeconnect.com
www.bgaconnects.com
www.bolivaralumni.com
www.bonnerconnect.org
www.bouchetconnect.org
www.branchout.marlboro.edu
www.branchoutconnect.com
www.brandmanalumni.com
www.bridgewaterconnect.com
www.bridgezbt.com
www.brockportalumniconnect.com
www.brooksiansconnect.com
www.bucknellcareerconnect.com
www.bucknellconnect.com
www.bucsconnect.org

Other certificates including the domain name bucknellcareerconnect.com

(limited to 100 certificates)
graduway.com
bucknellcareerconnect.com
baalumninetwork.com
ipadeconnect.com
ipadeconnect.com
ipadeconnect.com
graduway.com
ipadeconnect.com
ipadeconnect.com
ipadeconnect.com
graduway.com
ipadeconnect.com
ipadeconnect.com
ipadeconnect.com
graduway.com
bobcatconnect.org
ipadeconnect.com
beachwoodconnect.com
bucknellcareerconnect.com
beachwoodconnect.com
baalumninetwork.com
ipadeconnect.com
graduway.com
graduway.com
bestbuddiesconnect.org
graduway.com
ipadeconnect.com
ipadeconnect.com
graduway.com
boscoalumni.org
graduway.com
beachwoodconnect.com
m.bucknellcareerconnect.com
bergencatholicconnect.com
ipadeconnect.com
m.bucknellcareerconnect.com
beachwoodconnect.com
ipadeconnect.com
bbnsconnect.org
bbnsconnect.org
ipadeconnect.com
bobcatconnect.org
graduway.com
ipadeconnect.com
bobcatconnect.org
graduway.com
graduway.com
bucknellcareerconnect.com
ipadeconnect.com
graduway.com
graduway.com
bobcatconnect.org
bergencatholicconnect.com
bbnsconnect.org
graduway.com
ipadeconnect.com
ipadeconnect.com
bucknellconnect.com
bobcatconnect.org
graduway.com
graduway.com
ipadeconnect.com
bucknellcareerconnect.com
ipadeconnect.com
ipadeconnect.com
ipadeconnect.com
badgersinfinance.net
graduway.com
ipadeconnect.com
graduway.com
baalumninetwork.com
graduway.com
bobcatconnect.org
ipadeconnect.com
graduway.com
bucknellcareerconnect.com
ipadeconnect.com
backlot.afi.com
bobcatconnect.org
ipadeconnect.com
ipadeconnect.com
ipadeconnect.com
boyslatinconnect.com
bobcatconnect.org
ipadeconnect.com
bucknellcareerconnect.com
graduway.com
ipadeconnect.com
bucknellconnect.com
graduway.com
graduway.com
baalumninetwork.com
graduway.com
ipadeconnect.com
ipadeconnect.com
graduway.com
ipadeconnect.com
boscoalumni.org
graduway.com
graduway.com

Certificate

The complete raw certificate details for bucknellcareerconnect.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1NLWiQ31OJm1n2Z/SKX
4syeWnlB5tkXn7etpWcE+lua1I8gm3QTC6xL1tEol+jHsZjIrsY65Oy9icMLtGri
Bb8XGYGewCoLfU9dvaqkQhfh0qf6n1ADD+CqDLIUXoU7Tu1zH0Ic9PHmBQuBF+ov
Nbjf8OxXlUf/EP2atBaOGvWtyPQVDTPUHm3+7xtYA7fvaCXM1xZTQFq45n2BlZX5
+UfBlhpdJkmc1T+sYmf83ROj8OpywcvzHusJM2S6vmJ9JVHb22NMRXpwUfYG371W
Zgep79BNMzx3Z9zTd4nNyqFRfkBCeKt0zp/oR9YZoGBoPcgMq3ODstePDTdQiKiT
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303414276195795934710343740931374048495809
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-21 10:27:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-19 10:27:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bucknellcareerconnect.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19103058021847664282313993860820613183357050346401450837735910865911143410978261100904744095816996107581707035473030296236136355159759207866129396521565534322442178442106782696822919655210173722812680769767288065789175034836987343132674361259163141822472354255418612622880850511795678521539878300679557236808789259764728257064093968790721670109988365581479081100611990208177909946773960558456440454697215047914121907751798843391851331280639666181870213276713381126146364615232541176828331243474854189615538882944191771653558018332931892814360294395798966012155579586329393446362683011829165146607124328560093238432607
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3af7ea797c94e49594b069711f2b56889e440a9f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1782 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baalumninetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bacalumni.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badgerbridgebeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badgerbridgetest.manual.graduway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badgersinfinancetest.manual.graduway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baldwinalumniconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bartonalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baueralumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbnsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbnsgraduates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bchighnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beardown.arizonaalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beardownnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beardownnetwork1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belenalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benjaminconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benningtonalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleyischoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleyjnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleylawlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleylawnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleyprepconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkshirealumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkshireschoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bermudacollegeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bgaconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bolivaralumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonnerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bouchetconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branchout.marlboro.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branchoutconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandmanalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridgewaterconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridgezbt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brockportalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brooksiansconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucknellcareerconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucknellconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baalumninetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bacalumni.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badgerbridgebeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baldwinalumniconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bartonalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baueralumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbnsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbnsgraduates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bchighnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beardownnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belenalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benjaminconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benningtonalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleyischoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleyjnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleylawlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleylawnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleyprepconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkshirealumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkshireschoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bermudacollegeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bgaconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bolivaralumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bonnerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bouchetconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.branchout.marlboro.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.branchoutconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brandmanalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bridgewaterconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bridgezbt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brockportalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brooksiansconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bucknellcareerconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bucknellconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bucsconnect.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016cb3eed13100000403004730450220144fb9c2bc662429109b2c69026d7f2c4a8f87c40c122cbabd4ee4e4afb1c773022100ed3f5516317cba24d95638c67f5912495da097e5cc7d42e3bb0ad0044580af3500770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016cb3eed1200000040300483046022100a457c4ca54ffada7a62444652a594c2da1227a7be2cef335419a6f134cbee8ec022100b7255092f8d23d718dbe00e9940ebb92b4cd34ce5c03447156eb5117b8f5b08e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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