canterburycommunity.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:f6:78:30:e1:21:d2:ff:8a:ba:1f:43:5f:41:f0:e3:06:8c was issued on by Let's Encrypt.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=canterburycommunity.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f6:78:30:e1:21:d2:ff:8a:ba:1f:43:5f:41:f0:e3:06:8c
Serial Number (int): 432318367145557239142823352255689766667916
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 09:50:89:16:dd:b8:46:5a:2a:42:ce:77:47:30:13:9b:cb:52:d3:0e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ae:91:a5:b5:df:0e:d3:37:1f:65:0f:d9:1e:25:b9:01:cc:20:cc:e4
Fingerprint (sha256): 58:27:59:34:c2:0b:dc:4a:3c:65:d8:f4:bd:6c:ee:be:7f:bf:ca:4e:61:71:2b:86:a8:73:d6:ce:ed:5e:69:06

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate canterburycommunity.org

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for canterburycommunity.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

canisiusconnect.com
canterburycommunity.org
cardinalsconnect.com
careerdesignlabs.org
carreirasuvv.com
carrollalumni.com
carrollconnect.com
cbumusicconnect.com
cdl-family.org
cdl.sps.columbia.edu
cecconnect.com
centralalumni.com
centrumconnect.com
chadwickconnect.org
chahtascholars.com
champlainconnect.org
chargerconnect.org
churchillconnect.com
cityuconnect.com
cleoconnection.com
clippersconnect.org
cluconnect.com
codalumniconnect.com
cokescholarsconnect.org
collegecrusadenetwork.com
coloradoacademyconnect.org
columbusacademyalumni.org
communikeynetwork.com
connect.cbu.edu
connect.collegetrack.org
connect.harvardae.org
connect.psichi.org
connect.ruw.edu.bh
connect.woodstockacademy.org
connect2bristol.org
connectbumc.com
connectddd.org
connectgettysburg.com
connectlatinschool.org
connects.emory.edu
connectstc.com
cookeconnect.com
cooperalumnione.com
coppeadconnect.com
corviasconnects.com
cpl-alumni.org
crusadersconnect.org
csun.matadormentoring.com
cualumni.network
www.canisiusconnect.com
www.canterburycommunity.org
www.cardinalsconnect.com
www.careerdesignlabs.org
www.carreirasuvv.com
www.carrollalumni.com
www.carrollconnect.com
www.cbumusicconnect.com
www.cdl-family.org
www.cdl.sps.columbia.edu
www.cecconnect.com
www.centralalumni.com
www.centrumconnect.com
www.chadwickconnect.org
www.chahtascholars.com
www.champlainconnect.org
www.chargerconnect.org
www.churchillconnect.com
www.cityuconnect.com
www.cleoconnection.com
www.clippersconnect.org
www.cluconnect.com
www.codalumniconnect.com
www.cokescholarsconnect.org
www.collegecrusadenetwork.com
www.coloradoacademyconnect.org
www.columbusacademyalumni.org
www.communikeynetwork.com
www.connect.cbu.edu
www.connect.collegetrack.org
www.connect.harvardae.org
www.connect.psichi.org
www.connect.ruw.edu.bh
www.connect2bristol.org
www.connectbumc.com
www.connectddd.org
www.connectgettysburg.com
www.connectlatinschool.org
www.connectstc.com
www.cookeconnect.com
www.cooperalumnione.com
www.coppeadconnect.com
www.corviasconnects.com
www.cpl-alumni.org
www.crusadersconnect.org
www.cualumni.network

Other certificates including the domain name canterburycommunity.org

(limited to 100 certificates)
canterburycommunity.org
canterburycommunity.org
canterburycommunity.org
cardinalsconnect.com
canterburycommunity.org
canterburycommunity.org
canterburycommunity.org
canterburycommunity.org
canterburycommunity.org
cardinalsconnect.com

Certificate

The complete raw certificate details for canterburycommunity.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrAyJ1jOQqNE8nB6vHW6
YwidA8hCh8uF6U3bvQKYP22LaHAcSKmE1mF6XmDRJDqwKHxHrX9BjRbkeQr4mmx3
QDtz+C2L4lbi3tWS6HWvKRVBAH7VZTYMJ1EgLwShVgHjvbNisEQ2BI+rnIWRM2mN
WUzjSz28xAyVAF6Zpw7CisagQg3+mywXYLUiEjLFV6FLq8lvi9t3PjN5e2ltnVwa
0r7U7gFuDK+UiGcGuNqcoegUuGRWIFnpphBuh3PT7Q7NRoQfsiFr1zj5AEQjlaX+
vQYcsI9/MLgLGTEjbcNsvv6XMhjjNNnp7V3KAGk1NR74g+ad9CfiLioCC6q0503D
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 432318367145557239142823352255689766667916
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-31 17:43:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-29 17:43:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'canterburycommunity.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18012724748089217763000483983595752106465120299308844920751161312031982021951530850785549099902723054149423860377269791524951706373107971960310885027930254724851054908109512979931330967068621913804662552074231477864131957335595918222949567263298843963940359147390813485951893193699590629902041531987463005369794523367678818968102451710159398833598668865193336673779437722134478516126839717871224329034263371102405198979861471311860557472290312051443477972476502421564631078687778449983463015524967608620732745879212929865436414963507183573836894356944403155437512864319869493732566232488944953620574204395357148660519
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							09508916ddb8465a2a42ce774730139bcb52d30e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canisiusconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburycommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardinalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careerdesignlabs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carreirasuvv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrollalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrollconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbumusicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdl-family.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdl.sps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cecconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centrumconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chadwickconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chahtascholars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'champlainconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chargerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchillconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleoconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clippersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cluconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cokescholarsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegecrusadenetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradoacademyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbusacademyalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communikeynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.cbu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.collegetrack.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.harvardae.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.psichi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.ruw.edu.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.woodstockacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect2bristol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectbumc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectddd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectgettysburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectlatinschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connects.emory.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectstc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cooperalumnione.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coppeadconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corviasconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpl-alumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crusadersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csun.matadormentoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cualumni.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canisiusconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburycommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardinalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.careerdesignlabs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carreirasuvv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrollalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrollconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbumusicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdl-family.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdl.sps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cecconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centrumconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chadwickconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chahtascholars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.champlainconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chargerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.churchillconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cleoconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clippersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cluconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cokescholarsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegecrusadenetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coloradoacademyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbusacademyalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communikeynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.cbu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.collegetrack.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.harvardae.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.psichi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.ruw.edu.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect2bristol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectbumc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectddd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectgettysburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectlatinschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectstc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cookeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cooperalumnione.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coppeadconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corviasconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpl-alumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crusadersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cualumni.network'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017131e81d770000040300483046022100e56c80613b7e04de39d353aa0bc84ed364f5c036c02e6e778354016540cbef04022100bb20d9ff6c56d870154a4aebc057a70bb62c2bc58624b42c4925f221b31fbf8a00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017131e81d80000004030047304502204a087275aec3a51d62e89df6ea926815eb8c4b072f404186b47c48232338a47b022100de4cd6562ac229a2a5558d4d8047e65767ed357002a7c0017750a7ff602e2317
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007799310592ba2995087e37a873259de177f1124ca937bf7c00524048b7c28457626b5cefd02fd8869c5687f75d387ae397087a975975f34ee166ebaf0fa2a9b7bec1b0bc8c0122949ae4018d3b894625efbafb818f6c85d41b2162b942a9655a0139d0e9d40f774517775cf86a4e779d35440e3b0756886b264489203061625a745558036a314cf9f49f32237ed55b3c2e6b8629ae9f6f0d5a16e84cd75e48c0eb4e69d6cf1052bdd67f84f74a387bd99d0b1fa42b0accca11954b24d317535b06fab20fe399322a310e3404d38dcaa8c385e7357031578b7913ab5aac51f675b412a0f2c98c2d75500975cfbde229b1325ea3f80d55c5400cf9460eb5551d08