bergencatholicconnect.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ca:e0:b2:b7:7a:63:ea:14:ec:09:04:b5:f9:46:f8:6d:24 was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bergencatholicconnect.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ca:e0:b2:b7:7a:63:ea:14:ec:09:04:b5:f9:46:f8:6d:24
Serial Number (int): 330372570934584665212733151275571394145572
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8f:21:58:42:4c:45:56:8f:fd:51:d2:6b:03:23:bf:47:26:71:25:25
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2e:58:9c:65:91:6e:ec:ae:c1:f9:90:0f:7f:2a:80:9e:eb:68:6f:2f
Fingerprint (sha256): 5f:96:1d:f1:7e:db:f9:f4:f8:e1:51:69:cc:1d:aa:31:7d:9f:f5:b5:6a:c2:f2:94:a8:e8:8b:ab:c0:40:dd:2e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bergencatholicconnect.com

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bergencatholicconnect.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

baalumninetwork.com
bacalumni.net
backlot.afi.com
badgerbridgebeta.com
badgerbridgetest.manual.graduway.com
badgersinfinancetest.manual.graduway.com
baldwinalumniconnect.org
bartonalumni.com
baueralumniconnect.com
bbnsconnect.org
bbnsgraduates.org
bchighnetwork.com
beardown.arizonaalumni.com
beardownnetwork.com
beardownnetwork1.com
belenalumni.org
benjaminconnect.com
benningtonalumni.com
bergencatholicconnect.com
berkeleyischoolconnect.com
berkeleyjnetwork.com
berkeleylawlink.com
berkeleylawnetwork.com
berkeleyprepconnect.com
berkshirealumni.com
berkshireschoolconnect.com
bermudacollegeconnect.com
bestbuddiesconnect.org
bgaconnects.com
biolahub.biola.edu
bolivaralumni.com
bonnerconnect.org
boscoalumni.org
bouchetconnect.org
boyslatinconnect.com
branchout.marlboro.edu
branchoutconnect.com
brandmanalumni.com
brehmcommunity.org
bridgewaterconnect.com
bridgezbt.com
brockportalumniconnect.com
brooksiansconnect.com
bucknellcareerconnect.com
bucknellconnect.com
bucsconnect.org
www.baalumninetwork.com
www.bacalumni.net
www.backlot.afi.com
www.badgerbridgebeta.com
www.baldwinalumniconnect.org
www.bartonalumni.com
www.baueralumniconnect.com
www.bbnsconnect.org
www.bbnsgraduates.org
www.bchighnetwork.com
www.beardownnetwork.com
www.belenalumni.org
www.benjaminconnect.com
www.benningtonalumni.com
www.bergencatholicconnect.com
www.berkeleyischoolconnect.com
www.berkeleyjnetwork.com
www.berkeleylawlink.com
www.berkeleylawnetwork.com
www.berkeleyprepconnect.com
www.berkshirealumni.com
www.berkshireschoolconnect.com
www.bermudacollegeconnect.com
www.bestbuddiesconnect.org
www.bgaconnects.com
www.bolivaralumni.com
www.bonnerconnect.org
www.boscoalumni.org
www.bouchetconnect.org
www.boyslatinconnect.com
www.branchout.marlboro.edu
www.branchoutconnect.com
www.brandmanalumni.com
www.brehmcommunity.org
www.bridgewaterconnect.com
www.bridgezbt.com
www.brockportalumniconnect.com
www.brooksiansconnect.com
www.bucknellcareerconnect.com
www.bucknellconnect.com
www.bucsconnect.org

Other certificates including the domain name bergencatholicconnect.com

(limited to 100 certificates)
baalumninetwork.com
bobcatconnect.org
beachwoodconnect.com
beachwoodconnect.com
baalumninetwork.com
beachwoodconnect.com
bergencatholicconnect.com
beachwoodconnect.com
bobcatconnect.org
bobcatconnect.org
bobcatconnect.org
bergencatholicconnect.com
bobcatconnect.org
badgersinfinance.net
baalumninetwork.com
bobcatconnect.org
backlot.afi.com
bobcatconnect.org
bobcatconnect.org
baalumninetwork.com
beachwoodconnect.com

Certificate

The complete raw certificate details for bergencatholicconnect.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINbzCCDFegAwIBAgISA8rgsrd6Y+oU7AkEtflG+G0kMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTgxMTMxMDZaFw0y
MDAxMTYxMTMxMDZaMCQxIjAgBgNVBAMTGWJlcmdlbmNhdGhvbGljY29ubmVjdC5j
b20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5wAdV81B7cSVhAopL
resWEpkDRc7B5+hv6/58SkF350sJG2g72xZ3exDHsIAFWX6/Hm9u/FdGFW81t0Kh
dgbDRAn8AeE9ye7D1twyt3ceSPdcEBY8PwKon31cSd5RyE7b3Njiv0PX9Ah5vfSO
eICQlySHYpP7G0YB4RbqLZq5Y8mgklExM1XanGkFH1b/wA7S3lwwl6k8Nl6VuLrg
q1R+Q8S7LR/TwYYHcQv1mbMt6TMLFwUbd+s/3Jrp0UyoQml98gN+97HvylKXgERu
2vlb6cQJemPaU9pooKuvNRRW8nNJYm74lrguPsGIWB8Vwrpzf1Y2FOY95PMBpo/3
b45xAgMBAAGjggpzMIIKbzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFI8hWEJMRVaP
/VHSawMjv0cmcSUlMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G
CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZy8wgggpBgNVHREEggggMIIIHIITYmFhbHVtbmluZXR3b3Jr
LmNvbYINYmFjYWx1bW5pLm5ldIIPYmFja2xvdC5hZmkuY29tghRiYWRnZXJicmlk
Z2ViZXRhLmNvbYIkYmFkZ2VyYnJpZGdldGVzdC5tYW51YWwuZ3JhZHV3YXkuY29t
gihiYWRnZXJzaW5maW5hbmNldGVzdC5tYW51YWwuZ3JhZHV3YXkuY29tghhiYWxk
d2luYWx1bW5pY29ubmVjdC5vcmeCEGJhcnRvbmFsdW1uaS5jb22CFmJhdWVyYWx1
bW5pY29ubmVjdC5jb22CD2JibnNjb25uZWN0Lm9yZ4IRYmJuc2dyYWR1YXRlcy5v
cmeCEWJjaGlnaG5ldHdvcmsuY29tghpiZWFyZG93bi5hcml6b25hYWx1bW5pLmNv
bYITYmVhcmRvd25uZXR3b3JrLmNvbYIUYmVhcmRvd25uZXR3b3JrMS5jb22CD2Jl
bGVuYWx1bW5pLm9yZ4ITYmVuamFtaW5jb25uZWN0LmNvbYIUYmVubmluZ3RvbmFs
dW1uaS5jb22CGWJlcmdlbmNhdGhvbGljY29ubmVjdC5jb22CGmJlcmtlbGV5aXNj
aG9vbGNvbm5lY3QuY29tghRiZXJrZWxleWpuZXR3b3JrLmNvbYITYmVya2VsZXls
YXdsaW5rLmNvbYIWYmVya2VsZXlsYXduZXR3b3JrLmNvbYIXYmVya2VsZXlwcmVw
Y29ubmVjdC5jb22CE2JlcmtzaGlyZWFsdW1uaS5jb22CGmJlcmtzaGlyZXNjaG9v
bGNvbm5lY3QuY29tghliZXJtdWRhY29sbGVnZWNvbm5lY3QuY29tghZiZXN0YnVk
ZGllc2Nvbm5lY3Qub3Jngg9iZ2Fjb25uZWN0cy5jb22CEmJpb2xhaHViLmJpb2xh
LmVkdYIRYm9saXZhcmFsdW1uaS5jb22CEWJvbm5lcmNvbm5lY3Qub3Jngg9ib3Nj
b2FsdW1uaS5vcmeCEmJvdWNoZXRjb25uZWN0Lm9yZ4IUYm95c2xhdGluY29ubmVj
dC5jb22CFmJyYW5jaG91dC5tYXJsYm9yby5lZHWCFGJyYW5jaG91dGNvbm5lY3Qu
Y29tghJicmFuZG1hbmFsdW1uaS5jb22CEmJyZWhtY29tbXVuaXR5Lm9yZ4IWYnJp
ZGdld2F0ZXJjb25uZWN0LmNvbYINYnJpZGdlemJ0LmNvbYIaYnJvY2twb3J0YWx1
bW5pY29ubmVjdC5jb22CFWJyb29rc2lhbnNjb25uZWN0LmNvbYIZYnVja25lbGxj
YXJlZXJjb25uZWN0LmNvbYITYnVja25lbGxjb25uZWN0LmNvbYIPYnVjc2Nvbm5l
Y3Qub3Jnghd3d3cuYmFhbHVtbmluZXR3b3JrLmNvbYIRd3d3LmJhY2FsdW1uaS5u
ZXSCE3d3dy5iYWNrbG90LmFmaS5jb22CGHd3dy5iYWRnZXJicmlkZ2ViZXRhLmNv
bYIcd3d3LmJhbGR3aW5hbHVtbmljb25uZWN0Lm9yZ4IUd3d3LmJhcnRvbmFsdW1u
aS5jb22CGnd3dy5iYXVlcmFsdW1uaWNvbm5lY3QuY29tghN3d3cuYmJuc2Nvbm5l
Y3Qub3JnghV3d3cuYmJuc2dyYWR1YXRlcy5vcmeCFXd3dy5iY2hpZ2huZXR3b3Jr
LmNvbYIXd3d3LmJlYXJkb3dubmV0d29yay5jb22CE3d3dy5iZWxlbmFsdW1uaS5v
cmeCF3d3dy5iZW5qYW1pbmNvbm5lY3QuY29tghh3d3cuYmVubmluZ3RvbmFsdW1u
aS5jb22CHXd3dy5iZXJnZW5jYXRob2xpY2Nvbm5lY3QuY29tgh53d3cuYmVya2Vs
ZXlpc2Nob29sY29ubmVjdC5jb22CGHd3dy5iZXJrZWxleWpuZXR3b3JrLmNvbYIX
d3d3LmJlcmtlbGV5bGF3bGluay5jb22CGnd3dy5iZXJrZWxleWxhd25ldHdvcmsu
Y29tght3d3cuYmVya2VsZXlwcmVwY29ubmVjdC5jb22CF3d3dy5iZXJrc2hpcmVh
bHVtbmkuY29tgh53d3cuYmVya3NoaXJlc2Nob29sY29ubmVjdC5jb22CHXd3dy5i
ZXJtdWRhY29sbGVnZWNvbm5lY3QuY29tghp3d3cuYmVzdGJ1ZGRpZXNjb25uZWN0
Lm9yZ4ITd3d3LmJnYWNvbm5lY3RzLmNvbYIVd3d3LmJvbGl2YXJhbHVtbmkuY29t
ghV3d3cuYm9ubmVyY29ubmVjdC5vcmeCE3d3dy5ib3Njb2FsdW1uaS5vcmeCFnd3
dy5ib3VjaGV0Y29ubmVjdC5vcmeCGHd3dy5ib3lzbGF0aW5jb25uZWN0LmNvbYIa
d3d3LmJyYW5jaG91dC5tYXJsYm9yby5lZHWCGHd3dy5icmFuY2hvdXRjb25uZWN0
LmNvbYIWd3d3LmJyYW5kbWFuYWx1bW5pLmNvbYIWd3d3LmJyZWhtY29tbXVuaXR5
Lm9yZ4Iad3d3LmJyaWRnZXdhdGVyY29ubmVjdC5jb22CEXd3dy5icmlkZ2V6YnQu
Y29tgh53d3cuYnJvY2twb3J0YWx1bW5pY29ubmVjdC5jb22CGXd3dy5icm9va3Np
YW5zY29ubmVjdC5jb22CHXd3dy5idWNrbmVsbGNhcmVlcmNvbm5lY3QuY29tghd3
d3cuYnVja25lbGxjb25uZWN0LmNvbYITd3d3LmJ1Y3Njb25uZWN0Lm9yZzBMBgNV
HSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpo
dHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQIGCisGAQQB1nkCBAIEgfMEgfAA
7gB1ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABbd7ZnxIAAAQD
AEYwRAIgXZNbHCtWOPtYUHcJyV1J3SmFQoKQzJlS/khXXiijpfICIEKjOgROhMi1
oiX5ThSY4Z04croq9SOQqqAC60GIT+lwAHUAXqdz+d9WwOe1Nkh90EngMnqRmgyE
oRIShBh1loFxRVgAAAFt3tmhEQAABAMARjBEAiBO0oBK1bYl+20bjGOvsJ21F4AB
WZkJ2SHKXNgfYS8Z2gIgEKpvLdRGS0fsNECXkruM2G5TG7r52bn6cln/uHusCvEw
DQYJKoZIhvcNAQELBQADggEBAEVAarISilEB/qvX7iEGE9Sz62rQRETHrRCBGHAI
LegxkHyd/V+3ehPkrP/400g0w021EBmgzq+42/uvWHTQk+7E5agPU1F9UjPtkf8n
Ri7ciBHRguO3vtq/pFzuOkwNbGLulkYpmOG2DaBxoN6NOQ0f8BWs6/VYIW46Al3N
NhthGBcDtfKyl7uHRrgv/4l84uRKfFnwpWey7/oHSlC28EAbWAqn7a6XSDYPy+65
ARFXskelTD5sz6LDIcgiyOReygRFtHBebLvKSE8OAuBNw6P0urnzqDa4WZL71A4O
dbFXjbS3ZK6BAcbHJkzCreIM1J8IEgfoXLkec7h9iXZod8w=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucAHVfNQe3ElYQKKS63r
FhKZA0XOwefob+v+fEpBd+dLCRtoO9sWd3sQx7CABVl+vx5vbvxXRhVvNbdCoXYG
w0QJ/AHhPcnuw9bcMrd3Hkj3XBAWPD8CqJ99XEneUchO29zY4r9D1/QIeb30jniA
kJckh2KT+xtGAeEW6i2auWPJoJJRMTNV2pxpBR9W/8AO0t5cMJepPDZelbi64KtU
fkPEuy0f08GGB3EL9ZmzLekzCxcFG3frP9ya6dFMqEJpffIDfvex78pSl4BEbtr5
W+nECXpj2lPaaKCrrzUUVvJzSWJu+Ja4Lj7BiFgfFcK6c39WNhTmPeTzAaaP92+O
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330372570934584665212733151275571394145572
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-18 11:31:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-16 11:31:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bergencatholicconnect.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23448779277875683102534576040514963201578960050479696107124215667129405425761899140892736108537975549307394236948676804428230809626455206444966283004705316071040039979560659990979290173669304230683183247503021728207717224517726337420197865767658592122223412995447718690590988367614666611282461717226125923469350248163307990695018232886787098488457238895741469761620144103445141612249664358542452578962826055655369716254127413298023036253857437488021243381449273980292535192298036876568585124254487298043719670138094027909654558968813401818562716207575033170978962901149065909779966475978421311600825684624835563458161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8f2158424c45568ffd51d26b0323bf4726712525
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2080 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baalumninetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bacalumni.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backlot.afi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badgerbridgebeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badgerbridgetest.manual.graduway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badgersinfinancetest.manual.graduway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baldwinalumniconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bartonalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baueralumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbnsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbnsgraduates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bchighnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beardown.arizonaalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beardownnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beardownnetwork1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belenalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benjaminconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benningtonalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bergencatholicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleyischoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleyjnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleylawlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleylawnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleyprepconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkshirealumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkshireschoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bermudacollegeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestbuddiesconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bgaconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biolahub.biola.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bolivaralumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonnerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boscoalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bouchetconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boyslatinconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branchout.marlboro.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branchoutconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandmanalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brehmcommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridgewaterconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridgezbt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brockportalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brooksiansconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucknellcareerconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucknellconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baalumninetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bacalumni.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.backlot.afi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badgerbridgebeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baldwinalumniconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bartonalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baueralumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbnsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbnsgraduates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bchighnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beardownnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belenalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benjaminconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benningtonalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bergencatholicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleyischoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleyjnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleylawlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleylawnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleyprepconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkshirealumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkshireschoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bermudacollegeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestbuddiesconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bgaconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bolivaralumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bonnerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boscoalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bouchetconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boyslatinconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.branchout.marlboro.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.branchoutconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brandmanalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brehmcommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bridgewaterconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bridgezbt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brockportalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brooksiansconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bucknellcareerconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bucknellconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bucsconnect.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dded99f12000004030046304402205d935b1c2b5638fb58507709c95d49dd2985428290cc9952fe48575e28a3a5f2022042a33a044e84c8b5a225f94e1498e19d3872ba2af52390aaa002eb41884fe9700075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dded9a111000004030046304402204ed2804ad5b625fb6d1b8c63afb09db5178001599909d921ca5cd81f612f19da022010aa6f2dd4464b47ec34409792bb8cd86e531bbaf9d9b9fa7259ffb87bac0af1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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