canterburycommunity.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6f:69:21:e7:d5:1c:4f:da:1a:bc:d2:bf:b3:aa:a8:85:29 was issued on by Let's Encrypt.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=canterburycommunity.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6f:69:21:e7:d5:1c:4f:da:1a:bc:d2:bf:b3:aa:a8:85:29
Serial Number (int): 299247945510979636374730954996803290301737
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4e:14:5c:36:01:76:00:07:7b:cb:7f:a4:62:83:90:f8:d9:2d:84:be
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 79:0a:a3:31:53:04:0b:04:e3:c4:ca:bd:67:b5:c9:23:2e:91:5e:3f
Fingerprint (sha256): 79:63:b5:28:e0:4f:d6:0d:63:51:41:98:c1:74:0a:06:4d:d6:23:45:80:0c:c8:a8:08:c5:4f:d0:92:37:cd:b8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate canterburycommunity.org

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for canterburycommunity.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

canisiusconnect.com
canterburycommunity.org
cardinalsconnect.com
careerdesignlabs.org
carreirasuvv.com
carrollalumni.com
carrollconnect.com
cbumusicconnect.com
cdl-family.org
cdl.sps.columbia.edu
cecconnect.com
centralalumni.com
centrumconnect.com
chadwickconnect.org
chahtascholars.com
champlainconnect.org
chargerconnect.org
churchillconnect.com
cityuconnect.com
cleoconnection.com
clippersconnect.org
cluconnect.com
codalumniconnect.com
cokescholarsconnect.org
collegecrusadenetwork.com
coloradoacademyconnect.org
columbusacademyalumni.org
communikeynetwork.com
connect.cbu.edu
connect.collegetrack.org
connect.harvardae.org
connect.psichi.org
connect.ruw.edu.bh
connect.woodstockacademy.org
connect2bristol.org
connectbumc.com
connectddd.org
connectgettysburg.com
connectlatinschool.org
connects.emory.edu
connectstc.com
cookeconnect.com
cooperalumnione.com
coppeadconnect.com
corviasconnects.com
cpl-alumni.org
crusadersconnect.org
csun.matadormentoring.com
cualumni.network
www.canisiusconnect.com
www.canterburycommunity.org
www.cardinalsconnect.com
www.careerdesignlabs.org
www.carreirasuvv.com
www.carrollalumni.com
www.carrollconnect.com
www.cbumusicconnect.com
www.cdl-family.org
www.cdl.sps.columbia.edu
www.cecconnect.com
www.centralalumni.com
www.centrumconnect.com
www.chadwickconnect.org
www.chahtascholars.com
www.champlainconnect.org
www.chargerconnect.org
www.churchillconnect.com
www.cityuconnect.com
www.cleoconnection.com
www.clippersconnect.org
www.cluconnect.com
www.codalumniconnect.com
www.cokescholarsconnect.org
www.collegecrusadenetwork.com
www.coloradoacademyconnect.org
www.columbusacademyalumni.org
www.communikeynetwork.com
www.connect.cbu.edu
www.connect.collegetrack.org
www.connect.harvardae.org
www.connect.psichi.org
www.connect.ruw.edu.bh
www.connect2bristol.org
www.connectbumc.com
www.connectddd.org
www.connectgettysburg.com
www.connectlatinschool.org
www.connectstc.com
www.cookeconnect.com
www.cooperalumnione.com
www.coppeadconnect.com
www.corviasconnects.com
www.cpl-alumni.org
www.crusadersconnect.org
www.cualumni.network

Other certificates including the domain name canterburycommunity.org

(limited to 100 certificates)
canterburycommunity.org
canterburycommunity.org
canterburycommunity.org
cardinalsconnect.com
canterburycommunity.org
canterburycommunity.org
canterburycommunity.org
canterburycommunity.org
canterburycommunity.org
cardinalsconnect.com

Certificate

The complete raw certificate details for canterburycommunity.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbFJ31S8EbOueF4Fh9/C
OOhc/p1T+RR+qM11YwvfjOiyTUJi6KpJhfhhHp+w82BMAlaCx+DTEzfOdg/eWLyk
qWvNdXgM5HUJSQjzJ328B5C1OyVih+l0mFbuHIQxXbFtzfiG3XX3Bec5C/C8M29M
z49n832lR2CLAAjNPhTWQsPrUrh0rIXFmI7QC2FyuQGPd3kEd9vi2IKjW0UmIe0e
j4ItfckrEqKvwdm5c3ZuogNeuOMCaz99HElX193DaztUTNTB8tfLfxfVkSxQyekJ
ms9PQCIUqSZjT2N8fHzAr0SuyHcupTcm49YaCQj316Gf49E7UnMEGICzGWX0IQ/r
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299247945510979636374730954996803290301737
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-13 05:24:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-13 05:24:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'canterburycommunity.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24451417107709302663229236646091097117934772343230693378960519199646422353831838178799337977214328652862274328423025428539921191864818218320638081530794474143690772128722005858447998166569314136933507157294544748386793345653323629446338914001945874780717805344395198766294272937176803901462445824387369763220238812410317996554897965020729791257332413301008626607074664210833318540272212311136090550788861795389595396233427921196393629585478779102936931799803871996946112389394729596874551690931767608805524944879194067361332326175539189185955328830287788871264603555663709285635402472707426490014251640614841396226851
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4e145c36017600077bcb7fa4628390f8d92d84be
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canisiusconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburycommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardinalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careerdesignlabs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carreirasuvv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrollalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrollconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbumusicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdl-family.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdl.sps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cecconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centrumconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chadwickconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chahtascholars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'champlainconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chargerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchillconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleoconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clippersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cluconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cokescholarsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegecrusadenetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradoacademyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbusacademyalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communikeynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.cbu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.collegetrack.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.harvardae.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.psichi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.ruw.edu.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.woodstockacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect2bristol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectbumc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectddd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectgettysburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectlatinschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connects.emory.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectstc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cooperalumnione.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coppeadconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corviasconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpl-alumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crusadersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csun.matadormentoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cualumni.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canisiusconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburycommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardinalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.careerdesignlabs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carreirasuvv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrollalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrollconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbumusicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdl-family.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdl.sps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cecconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centrumconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chadwickconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chahtascholars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.champlainconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chargerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.churchillconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cleoconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clippersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cluconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cokescholarsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegecrusadenetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coloradoacademyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbusacademyalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communikeynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.cbu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.collegetrack.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.harvardae.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.psichi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.ruw.edu.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect2bristol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectbumc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectddd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectgettysburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectlatinschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectstc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cookeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cooperalumnione.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coppeadconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corviasconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpl-alumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crusadersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cualumni.network'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001703d38939c0000040300463044022050233a232d3807cb955b9f8e959226d68a1e0a1e765fbe8bacb120a6c184b823022032292ce0abe31c2cf0f188bfcc017017a511685de1e788070bc35e66ccce0b650075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001703d3893ee000004030046304402204d6408cb38b715c08653e3f9ffa5f021fad08c31f6b8cc4910c9812a584cd47d02204e376ff082c137e3890dc6cc346b1f510aab94bd91dcbc9fccf59b42a773d275
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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