alumni.brandman.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8b:97:dd:aa:7f:fe:fe:9f:5e:6d:57:09:27:42:90:e6:b5 was issued on by Let's Encrypt.

With 74 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=alumni.brandman.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8b:97:dd:aa:7f:fe:fe:9f:5e:6d:57:09:27:42:90:e6:b5
Serial Number (int): 308837971180410971127341639250423747503797
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d0:b8:6f:dc:c9:7a:fe:5a:e7:b5:13:eb:f6:6a:5b:85:c3:50:f7:06
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 23:16:22:ca:10:e1:89:9e:3b:a3:6a:06:9a:6e:d6:64:e1:f2:2a:02
Fingerprint (sha256): 60:44:33:49:39:d6:df:6c:f7:83:87:6d:0f:9b:3b:59:c3:75:1f:c3:1f:19:14:b4:9e:81:23:51:86:45:d8:0a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate alumni.brandman.edu

74

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alumni.brandman.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aceconnection.org
acomconnect.com
aexrochester.org
africanhumanities.org
ahlefconnect.com
aisalumniconnect.org
alemanyconnect.org
allhandsandheartsalumni.org
allhandsbeta.com
alumni.bcm.edu
alumni.brandman.edu
alumni.cayetano.edu.pe
alumni.cdl.ch
alumni.estacio.br
alumni.harpercollege.edu
alumni.maua.br
alumni.puc-campinas.edu.br
alumni.siebelinstitute.com
alumni.trilogyed.com
alumni.uarts.edu
alumni.udsm.ac.tz
alumni.unach.cl
alumniatbhs.com
alumnijaveriana.com
alumniknightnetwork.com
alumniuii.net
alumniupaep.mx
ampleforthglobal.org.uk
andoveralumni.org
andrewsnetwork.org
antigosalunos.aaapucrio.com.br
apuconnect.com
aqsaintsnetwork.com
arrowsconnect.org
asfmalumni.com
asulawalumninetwork.com
atecunited.com
athenianlink.com
avonoldfarmsalumni.com
www.aceconnection.org
www.acomconnect.com
www.aexrochester.org
www.africanhumanities.org
www.ahlefconnect.com
www.aisalumniconnect.org
www.alemanyconnect.org
www.allhandsandheartsalumni.org
www.allhandsbeta.com
www.alumni.brandman.edu
www.alumni.cayetano.edu.pe
www.alumni.estacio.br
www.alumni.harpercollege.edu
www.alumni.maua.br
www.alumni.puc-campinas.edu.br
www.alumni.uarts.edu
www.alumni.udsm.ac.tz
www.alumni.unach.cl
www.alumniatbhs.com
www.alumnijaveriana.com
www.alumniknightnetwork.com
www.alumniuii.net
www.alumniupaep.mx
www.ampleforthglobal.org.uk
www.andoveralumni.org
www.andrewsnetwork.org
www.antigosalunos.aaapucrio.com.br
www.apuconnect.com
www.aqsaintsnetwork.com
www.arrowsconnect.org
www.asfmalumni.com
www.asulawalumninetwork.com
www.atecunited.com
www.athenianlink.com
www.avonoldfarmsalumni.com

Other certificates including the domain name brandman.edu

(limited to 100 certificates)
alphaphinetwork.com
acsconnects.org
ssbprod.brandman.edu
aceconnection.org
aatlconnected.com
ssb.brandman.edu
alumniucsh.com
aceconnection.org
aatlconnected.com
ssbtest.brandman.edu
ahlafoundationconnect.com
digitalcommons.brandman.edu
digitalcommons.brandman.edu
ahlafoundationconnect.com
aatlconnected.com
access.fortefoundation.org
sni.cloudflaressl.com
mywindow.brandman.edu
aatlconnected.com
aatlconnected.com
digitalcommons.brandman.edu
alumnisabana.com
aatlconnected.com
digitalcommons.brandman.edu
akamai-san91.exacttarget.com
digitalcommons.brandman.edu
aceconnection.org
*.brandman.edu
aatlconnected.com
selfservice.chapman.edu
access.fortefoundation.org
alumniucsh.com
alumnisabana.com
aatlconnected.com
alumnigsb.com
alphaphinetwork.com
adenalumni.net
ssb.brandman.edu
aceconnection.org
careerlink.brandman.edu
akamai-san91.exacttarget.com
aceconnection.org
aatlconnected.com
aatlconnected.com
mywindowdev.chapman.edu
access.fortefoundation.org
aatlconnected.com
access.fortefoundation.org
www.ahlafoundationconnect.com
ahlafoundationconnect.com
aatlconnected.com
access.fortefoundation.org
alphaphinetwork.com
www.brandman.edu
aatlconnected.com
access.fortefoundation.org
nextcatalog.brandman.edu
calvsexpe-002b.brandman.edu
aatlconnected.com
alumni.harding.edu
digitalcommons.brandman.edu
alumnisabana.com
access.fortefoundation.org
adenalumni.net
dgw-dev.brandman.edu
alumni.pcci.edu
alumni.pcci.edu
alumni.harding.edu
aatlconnected.com
alumni.bcm.edu
ssbprod.brandman.edu
exchange.chapman.edu
alumni.facamp.com.br
alumnisabana.com
dgwprod.brandman.edu
digitalcommons.brandman.edu
aatlconnected.com
mywindow.brandman.edu
alumnigsb.com
alumni.brandman.edu
alumni.pcci.edu
alumni.nonprofitpractice.org
access.fortefoundation.org
access.fortefoundation.org
alumni.thrivescholars.org
exchange.chapman.edu
alumniucsh.com
alphaphinetwork.com
access.fortefoundation.org
acomconnect.com
mypath.brandman.edu
access.fortefoundation.org
access.fortefoundation.org
ssb.brandman.edu
aatlconnected.com
digitalcommons.brandman.edu
access.fortefoundation.org
mypath.brandman.edu
alumni.facamp.com.br
ssb.brandman.edu

Certificate

The complete raw certificate details for alumni.brandman.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2uZGdP1WmgywHdzH8gH
fOYUUrNxzswPyC1+tvnPTZdzar7I7FXHUaxdY/ZF+20+A1f62KoZsW4m/XOHLs6i
EH01/romcOfvkYPQ6CQncW90xk2e7uQZr54g9Ygfa/betu/JzUoxItaSDZN2lFoA
rxFiICOfJa5i6WyzHZh0Gh4nNYEu1BrGJz3yLKk0cYPR3HBqWmLWCgsVOL+X1ChY
DkBvFoa5nCqQ6gXTep/sa/ySFtcqHTyNdtHg+99UZo70Ace/esHFI31AD3dcjDJs
pOqwCbqkUHBvO3+QSuJ5BF7Pk95SAL5sdIITtRs2y75viqeIex6nGUXoyPHWP5HC
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308837971180410971127341639250423747503797
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-28 09:37:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-26 09:37:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alumni.brandman.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17600182966431640385078420085382895334156961152773265298752115349477378990394255214917764241117056068814920107211373455312979844873477236008610532267887924012889387452928388199977831599901246209019252294322167205309123797240202175917562740270067666785632839733789389076150815972056548494509057819293209332099706458582040777561426905025906906524948675094520576998139592722986650349888229213235418801603565270816470304178890265054139932118559411749090317514784316396588480620110603914222443485908530211843413572087713883912202998509451196610437107876046319214600984268050734717980447119361695279470662298068523169202943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d0b86fdcc97afe5ae7b513ebf66a5b85c350f706
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1659 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aceconnection.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acomconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aexrochester.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africanhumanities.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahlefconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aisalumniconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alemanyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allhandsandheartsalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allhandsbeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.bcm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.brandman.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.cayetano.edu.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.cdl.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.estacio.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.harpercollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.maua.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.puc-campinas.edu.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.siebelinstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.trilogyed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.uarts.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.udsm.ac.tz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.unach.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniatbhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnijaveriana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniknightnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniuii.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniupaep.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ampleforthglobal.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andoveralumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrewsnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antigosalunos.aaapucrio.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqsaintsnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arrowsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asfmalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asulawalumninetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atecunited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athenianlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avonoldfarmsalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aceconnection.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acomconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aexrochester.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.africanhumanities.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahlefconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aisalumniconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alemanyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allhandsandheartsalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allhandsbeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.brandman.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.cayetano.edu.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.estacio.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.harpercollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.maua.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.puc-campinas.edu.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.uarts.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.udsm.ac.tz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.unach.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniatbhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnijaveriana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniknightnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniuii.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniupaep.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ampleforthglobal.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andoveralumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andrewsnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antigosalunos.aaapucrio.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aqsaintsnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arrowsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asfmalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asulawalumninetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atecunited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athenianlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avonoldfarmsalumni.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e11f10642000004030046304402207b137a252ddeb94b0361381be3e49ce2c8a398cccfcc17c958c9e5b8446cde0802206a01d602095496236882860dcba18645aa1b2c664aef7ae7f1b502c1e8ac020e00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e11f1066c0000040300463044022066fcc9d953c716930a9ca76cab6000f23a29c0d3986f6a11440c67a04860de0802206c6eccbc26a111151c53a0f44c9a014ecd68fc2707188cd7a62ae1e44f1523f5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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