coloradoacademyconnect.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9d:cc:b5:e3:8f:05:94:b3:ab:21:58:df:41:23:34:25:53 was issued on by Let's Encrypt.

With 55 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=coloradoacademyconnect.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9d:cc:b5:e3:8f:05:94:b3:ab:21:58:df:41:23:34:25:53
Serial Number (int): 315033296334177930808494445323025567196499
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 08:d9:b1:7b:54:67:89:a4:a9:0e:af:06:2e:b5:41:a5:96:90:57:13
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 70:9c:74:3e:0b:47:ad:68:14:f2:93:09:ae:c6:0b:2c:11:4e:37:fc
Fingerprint (sha256): 87:4a:d7:02:fa:8f:d2:c7:ea:fb:89:a2:35:43:95:a8:21:35:f3:82:1c:ec:2d:c0:f0:49:c2:ed:79:16:74:7f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate coloradoacademyconnect.org

55

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for coloradoacademyconnect.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

calvertconnect.com
canfordglobalconnect.com
canisiusconnect.com
cardinalsconnect.com
careerdesignlabs.org
careerservices.manual.graduway.com
carreirasuvv.com
carrollalumni.com
carrollconnect.com
cbumusicconnect.com
cdl-family.org
cdl.sps.columbia.edu
centralalumni.com
centrumconnect.com
chadwickconnect.org
chahtascholars.com
champlainconnect.org
chargerconnect.org
churchillconnect.com
cityuconnect.com
cleoconnection.com
clippersconnect.org
cluconnect.com
codalumniconnect.com
cokescholarsconnect.org
collegetrackconnect.com
coloradoacademyconnect.org
columbusacademyalumni.org
www.calvertconnect.com
www.canfordglobalconnect.com
www.canisiusconnect.com
www.cardinalsconnect.com
www.careerdesignlabs.org
www.carreirasuvv.com
www.carrollalumni.com
www.carrollconnect.com
www.cbumusicconnect.com
www.cdl-family.org
www.cdl.sps.columbia.edu
www.centralalumni.com
www.centrumconnect.com
www.chadwickconnect.org
www.chahtascholars.com
www.champlainconnect.org
www.chargerconnect.org
www.churchillconnect.com
www.cityuconnect.com
www.cleoconnection.com
www.clippersconnect.org
www.cluconnect.com
www.codalumniconnect.com
www.cokescholarsconnect.org
www.collegetrackconnect.com
www.coloradoacademyconnect.org
www.columbusacademyalumni.org

Other certificates including the domain name coloradoacademyconnect.org

(limited to 100 certificates)
connect.woodstockacademy.org
canterburycommunity.org
cecconnect.com
connectlatinschool.org
coloradoacademyconnect.org
canisiusconnect.com
canisiusconnect.com
coloradoacademyconnect.org
coloradoacademyconnect.org
cecconnect.com
coloradoacademyconnect.org
canterburycommunity.org
coloradoacademyconnect.org
coloradoacademyconnect.org
coloradoacademyconnect.org
cecconnect.com
cadetcommunity.com
connectgettysburg.com
coloradoacademyconnect.org
cecconnect.com
coloradoacademyconnect.org
coloradoacademyconnect.org
cecconnect.com
coloradoacademyconnect.org
collegecrusadenetwork.com
canterburycommunity.org
cecconnect.com
cualumni.network
coloradoacademyconnect.org
cardinalsconnect.com
canisiusconnect.com
cadetcommunity.com
coloradoacademyconnect.org
coloradoacademyconnect.org
coloradoacademyconnect.org
canterburycommunity.org
canterburycommunity.org
canterburycommunity.org
coloradoacademyconnect.org
coloradoacademyconnect.org
coloradoacademyconnect.org
coloradoacademyconnect.org
connect.pepperdine.edu
cecconnect.com
coloradoacademyconnect.org
coloradoacademyconnect.org
cecconnect.com
canisiusconnect.com
coloradoacademyconnect.org
cardinalsconnect.com
collegecrusadenetwork.com
coloradoacademyconnect.org
cardinalsconnect.com
canterburycommunity.org
cecconnect.com
cecconnect.com
collegecrusadenetwork.com
canterburycommunity.org
collegecrusadenetwork.com
collegecrusadenetwork.com
cardinalsconnect.com
coloradoacademyconnect.org
coloradoacademyconnect.org
connect.woodstockacademy.org
cecconnect.com
canisiusconnect.com
coloradoacademyconnect.org
coloradoacademyconnect.org
coloradoacademyconnect.org
collegecrusadenetwork.com
coloradoacademyconnect.org
coloradoacademyconnect.org
collegecrusadenetwork.com

Certificate

The complete raw certificate details for coloradoacademyconnect.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeGHF45jNsIklCRaGkKY
lbyY8CECOp7oKuwVg2EogD9gCTFDhD79/lgNNx4aF3QbOh2MBcRa9GBRNRE/Qv4y
ifM7i5jMV4vnmJppyFGPICgNGWGGduMFoRmaa4iEjkBsB8BxHPx0tbAa3mxOPZi4
mh/I213WYufJccAcH6jNQ3Q20CVvTo8NiYVBlzyhDqqAiCqM1bv59D9YNDb8Sl74
e/DksejaXrbIDz12866Ov0ON2czcfuye0Qp2Ko1ZZz0ZN8HCi7wjLBwajQbzdz5L
Ir7RqAvAkAzsQrMekIrRvCAElMZX6SZWgwuEGda4ZQpMmWViUcG4P617AfeWEqNI
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315033296334177930808494445323025567196499
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-23 09:04:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-21 09:04:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'coloradoacademyconnect.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17910812855579427346996504068345748619444454105372164653351169837719878030873042738443743882275148641301515464097770199107521938558922202599145778976408819405765622020019414106426454084088575062185757925912808068285620611502853485918329471926338884588760433515084385000537525869131246808492452225477967498691204891414487850902374657769534629838746411554584529556731398395867813350413482362101451866441234454230654703153271473539902243269861159514609281835770563630340625471332246847409559720914337439940041306366526180584622879610586709933688175147926684606024444990016919921481272263437419379321136279759629785974889
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							08d9b17b546789a4a90eaf062eb541a596905713
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1294 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calvertconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canfordglobalconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canisiusconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardinalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careerdesignlabs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careerservices.manual.graduway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carreirasuvv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrollalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrollconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbumusicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdl-family.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdl.sps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centrumconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chadwickconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chahtascholars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'champlainconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chargerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchillconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleoconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clippersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cluconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cokescholarsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegetrackconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradoacademyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbusacademyalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.calvertconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canfordglobalconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canisiusconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardinalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.careerdesignlabs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carreirasuvv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrollalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrollconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbumusicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdl-family.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdl.sps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centrumconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chadwickconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chahtascholars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.champlainconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chargerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.churchillconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cleoconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clippersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cluconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cokescholarsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegetrackconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coloradoacademyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbusacademyalumni.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c1e4a0e540000040300473045022100e588ffff613ab69e23c67444c5f1af761b15363206fe1c4026697624765e910502201f6febffc39c491702d2dcbdce9a6eb44316018a03a79bba116472b8a41f03af00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c1e4a0e740000040300473045022033f56cbf93eeead964ee830e4badccc075eb92abcf237f26bfd30ca56a6ef324022100e30faf70a35b1147208605bb4cd8827e78d7a42bdf7d75be3b4e3df4b639feb0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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