cualumni.network

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f4:c1:81:03:d1:15:94:13:d0:41:0d:df:46:ae:59:e2:85 was issued on by Let's Encrypt.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cualumni.network

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f4:c1:81:03:d1:15:94:13:d0:41:0d:df:46:ae:59:e2:85
Serial Number (int): 344622966210883557757400000548200196465285
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 25:f2:ff:c3:5f:b3:8d:2f:e2:16:84:8a:3f:24:f8:6d:0b:42:f3:a8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bf:86:04:c0:f7:c0:c5:c0:f8:e4:76:56:e5:7e:39:b8:ab:85:1d:57
Fingerprint (sha256): 5d:a7:4c:af:41:91:ce:c1:26:78:0b:2a:0c:62:b6:9b:66:2b:e0:4b:ed:74:b0:5b:5e:25:c7:ff:54:d9:68:2e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cualumni.network

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cualumni.network

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

canisiusconnect.com
cardinalsconnect.com
careerdesignlabs.org
carreirasuvv.com
carrollalumni.com
carrollconnect.com
cbumusicconnect.com
cdl-family.org
cdl.sps.columbia.edu
centralalumni.com
centrumconnect.com
chadwickconnect.org
chahtascholars.com
champlainconnect.org
chargerconnect.org
churchillconnect.com
cityuconnect.com
cleoconnection.com
clippersconnect.org
cluconnect.com
codalumniconnect.com
cokescholarsconnect.org
collegetrackconnect.com
coloradoacademyconnect.org
columbusacademyalumni.org
communikeynetwork.com
connect.cbu.edu
connect.harvardae.org
connect.psichi.org
connect.ruw.edu.bh
connect.woodstockacademy.org
connect2bristol.org
connectbumc.com
connectddd.org
connectgettysburg.com
connectlatinschool.org
connects.emory.edu
connectstc.com
cookeconnect.com
cooperalumnione.com
coppeadconnect.com
corviasconnects.com
cpl-alumni.org
crew-connect.org
crusadersconnect.org
csun.matadormentoring.com
cualumni.network
cuembaalumni.com
www.canisiusconnect.com
www.cardinalsconnect.com
www.careerdesignlabs.org
www.carreirasuvv.com
www.carrollalumni.com
www.carrollconnect.com
www.cbumusicconnect.com
www.cdl-family.org
www.cdl.sps.columbia.edu
www.centralalumni.com
www.centrumconnect.com
www.chadwickconnect.org
www.chahtascholars.com
www.champlainconnect.org
www.chargerconnect.org
www.churchillconnect.com
www.cityuconnect.com
www.cleoconnection.com
www.clippersconnect.org
www.cluconnect.com
www.codalumniconnect.com
www.cokescholarsconnect.org
www.collegetrackconnect.com
www.coloradoacademyconnect.org
www.columbusacademyalumni.org
www.communikeynetwork.com
www.connect.cbu.edu
www.connect.harvardae.org
www.connect.psichi.org
www.connect.ruw.edu.bh
www.connect2bristol.org
www.connectbumc.com
www.connectddd.org
www.connectgettysburg.com
www.connectlatinschool.org
www.connectstc.com
www.cookeconnect.com
www.cooperalumnione.com
www.coppeadconnect.com
www.corviasconnects.com
www.cpl-alumni.org
www.crew-connect.org
www.crusadersconnect.org
www.cualumni.network
www.cuembaalumni.com

Other certificates including the domain name cualumni.network

(limited to 100 certificates)
canterburycommunity.org
cualumni.network
cecconnect.com
cualumni.network
canisiusconnect.com
canisiusconnect.com
cualumni.network
cecconnect.com
cualumni.network
canterburycommunity.org
cualumni.network
cualumni.network
cualumni.network
cecconnect.com
cualumni.network
cadetcommunity.com
cualumni.network
cecconnect.com
cecconnect.com
cualumni.network
collegecrusadenetwork.com
cualumni.network
canterburycommunity.org
cecconnect.com
cualumni.network
cardinalsconnect.com
cualumni.network
cualumni.network
canisiusconnect.com
cualumni.network
cualumni.network
cadetcommunity.com
canterburycommunity.org
canterburycommunity.org
canterburycommunity.org
cecconnect.com
cecconnect.com
canisiusconnect.com
cualumni.network
cardinalsconnect.com
cualumni.network
collegecrusadenetwork.com
cualumni.network
cardinalsconnect.com
canterburycommunity.org
cecconnect.com
cecconnect.com
collegecrusadenetwork.com
canterburycommunity.org
collegecrusadenetwork.com
cualumni.network
cualumni.network
collegecrusadenetwork.com
cardinalsconnect.com
cecconnect.com
canisiusconnect.com
cualumni.network
collegecrusadenetwork.com
collegecrusadenetwork.com

Certificate

The complete raw certificate details for cualumni.network in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GJ5du9d6MolEk2ytdl4
WCbqmcnPFpUII8hzjf8nbUD54EYVOlufulyLKW1QgFumkXrNyopknVQQyGE8v4Aw
+D2mrWhA0u7auJfF4LNEduldlPmEsV9K3M/aL8ci5d2Osc7LVkH2dVR8A4IfKiaB
hy9lhbjmFzachjw6hhOxHn6AfYLF1Y3gHIcoVHKAex6G60IvBDDSinL0kSQOwoZp
5nDYNaX8s0RzmP2on3Gdo6/XE0+F1ACupIdTT8iGV/slHTa1ctzwq1fclG7NXiWQ
gO02QYFuXZXZOpF1GKTxvzXWAieWlKWb56nOemcu8Ys5fhkdujAMD58joYy4h7pk
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344622966210883557757400000548200196465285
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-23 13:49:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-21 13:49:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cualumni.network'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27316033444185644128858076663324168443852144835474212270972248566314652521745653739077603179080057546006982798501274454130014699787782241023946362063119900893784287216944695385481567773569438508022739569747186481041493856179745554106344746381638647591070601137331153898608720543223679880851974536601292543558898925190298681760282871381863481094736209724350464325933082887826995843608624553635278664721224844119175150056892587762221639686062408845937812152720288046423363339144142946508357485025921205521317445475244304492191741938171940841507198031912573177127714772044821371432397458894740874653519233247860603118767
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							25f2ffc35fb38d2fe216848a3f24f86d0b42f3a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2099 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canisiusconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardinalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careerdesignlabs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carreirasuvv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrollalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrollconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbumusicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdl-family.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdl.sps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centrumconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chadwickconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chahtascholars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'champlainconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chargerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchillconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleoconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clippersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cluconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cokescholarsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegetrackconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradoacademyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbusacademyalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communikeynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.cbu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.harvardae.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.psichi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.ruw.edu.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.woodstockacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect2bristol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectbumc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectddd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectgettysburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectlatinschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connects.emory.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectstc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cooperalumnione.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coppeadconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corviasconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpl-alumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crew-connect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crusadersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csun.matadormentoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cualumni.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuembaalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canisiusconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardinalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.careerdesignlabs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carreirasuvv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrollalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrollconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbumusicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdl-family.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdl.sps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centrumconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chadwickconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chahtascholars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.champlainconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chargerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.churchillconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cleoconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clippersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cluconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cokescholarsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegetrackconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coloradoacademyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbusacademyalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communikeynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.cbu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.harvardae.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.psichi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.ruw.edu.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect2bristol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectbumc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectddd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectgettysburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectlatinschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectstc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cookeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cooperalumnione.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coppeadconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corviasconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpl-alumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crew-connect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crusadersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cualumni.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cuembaalumni.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c1f4f798600000403004630440220695c78e3db6081976d69197031abefe3b97e96b36cd7d1e28e2203ce541cd33f02200ede5a4e82a99449378c1243aa751ee8f09f4b84ffe21c5ee296589b7dba3504007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c1f4f77d800000403004730450220659fb59f34b51b8f45065454867ee54593e320c4b85f003be64129bc1f797bf80221009feb19889bbb7ca2addbf66f58fa2b1e9dd8110dfae47f7968aa389e8260ea0e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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