alumni.cdl.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5f:86:64:a5:c4:11:02:ab:23:7d:10:b5:9d:b4:ce:89:ac was issued on by Let's Encrypt.

With 60 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=alumni.cdl.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5f:86:64:a5:c4:11:02:ab:23:7d:10:b5:9d:b4:ce:89:ac
Serial Number (int): 293842321796022495105143598140216683956652
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: eb:1c:f9:af:19:7d:b4:76:e8:ca:36:c1:41:4b:76:7c:21:3a:d9:af
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2d:6b:70:11:06:02:6d:07:d9:97:01:0c:11:71:95:bb:d0:8b:73:e7
Fingerprint (sha256): 87:79:a3:48:df:f2:87:c4:dd:d8:60:8b:17:76:95:85:3d:52:78:b8:51:30:44:d6:45:23:76:e2:40:a7:56:bf

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate alumni.cdl.ch

60

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alumni.cdl.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aceconnection.org
aexrochester.org
africanhumanities.org
ahlefconnect.com
aisalumniconnect.org
alemanyconnect.org
allhandsandheartsalumni.org
allhandsbeta.com
alumni.cayetano.edu.pe
alumni.cdl.ch
alumni.harpercollege.edu
alumni.maua.br
alumni.puc-campinas.edu.br
alumni.trilogyed.com
alumni.uarts.edu
alumni.udsm.ac.tz
alumni.unach.cl
alumniatbhs.com
alumnicapilanou.ca
alumnijaveriana.com
alumniknightnetwork.com
alumniuii.net
ampleforthglobal.org.uk
andrewsnetwork.org
antigosalunos.aaapucrio.com.br
asfmalumni.com
asulawalumninetwork.com
athenianlink.com
auconnect.net
aveconnect.org
avonoldfarmsalumni.com
www.aceconnection.org
www.aexrochester.org
www.africanhumanities.org
www.ahlefconnect.com
www.aisalumniconnect.org
www.alemanyconnect.org
www.allhandsandheartsalumni.org
www.allhandsbeta.com
www.alumni.cayetano.edu.pe
www.alumni.harpercollege.edu
www.alumni.maua.br
www.alumni.puc-campinas.edu.br
www.alumni.uarts.edu
www.alumni.udsm.ac.tz
www.alumni.unach.cl
www.alumniatbhs.com
www.alumnicapilanou.ca
www.alumnijaveriana.com
www.alumniknightnetwork.com
www.alumniuii.net
www.ampleforthglobal.org.uk
www.andrewsnetwork.org
www.antigosalunos.aaapucrio.com.br
www.asfmalumni.com
www.asulawalumninetwork.com
www.athenianlink.com
www.auconnect.net
www.aveconnect.org
www.avonoldfarmsalumni.com

Other certificates including the domain name cdl.ch

(limited to 100 certificates)
*.cdl.ch
alphaphinetwork.com
aceconnection.org
acsconnects.org
aceconnection.org
aatlconnected.com
alumniucsh.com
aceconnection.org
aatlconnected.com
*.cdl.ch
www.cdl.ch
klvin.cedricantonio.com
ahlafoundationconnect.com
*.cdl.ch
ahlafoundationconnect.com
reenroll.cdl.ch
blogs.cdl.ch
access.fortefoundation.org
aatlconnected.com
access.fortefoundation.org
aatlconnected.com
aatlconnected.com
alumnisabana.com
aatlconnected.com
cdl.ch
welcome.cdl.ch
aceconnection.org
*.cdl.ch
aatlconnected.com
*.cdl.ch
*.cdl.ch
access.fortefoundation.org
alumniucsh.com
alumnisabana.com
aceconnection.org
aatlconnected.com
atecunited.com
alumnigsb.com
alphaphinetwork.com
adenalumni.net
aceconnection.org
*.cdl.ch
blogs.cdl.ch
apuconnect.com
*.cdl.ch
access.fortefoundation.org
cdl.ch
aceconnection.org
aatlconnected.com
cdl.ch
aatlconnected.com
access.fortefoundation.org
blogs.cdl.ch
*.cdl.ch
blogs.cdl.ch
aatlconnected.com
access.fortefoundation.org
cedricantonio.com
www.ahlafoundationconnect.com
ahlafoundationconnect.com
binjerwah.cedricantonio.com
aatlconnected.com
access.fortefoundation.org
alphaphinetwork.com
aatlconnected.com
access.fortefoundation.org
mdm.cdl.ch
blogs.cdl.ch
aatlconnected.com
alumni.harding.edu
alumnisabana.com
access.fortefoundation.org
andoveralumni.org
adenalumni.net
alumni.pcci.edu
alumni.pcci.edu
alumni.harding.edu
aatlconnected.com
access.fortefoundation.org
access.fortefoundation.org
alumni.bcm.edu
gapyear.cdl.ch
gapyear.cdl.ch
gapyear.cdl.ch
blogs.cdl.ch
alumni.facamp.com.br
access.fortefoundation.org
blogs.cdl.ch
alumnisabana.com
aatlconnected.com
*.cdl.ch
alumnigsb.com
alumni.brandman.edu
alumni.pcci.edu
gapyear.cdl.ch
alumni.nonprofitpractice.org
access.fortefoundation.org
access.fortefoundation.org
alumni.thrivescholars.org
webmail.cdl.ch

Certificate

The complete raw certificate details for alumni.cdl.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhu1VqrqV+efjfsorXgmR
hCbKJaehvw76CYfrJ6PfXtLOXH17oWYWZsG1e8xfRyKv5nuz7jB2QtThbwakKF99
Bygix+6ZTvO94s+wCjAn+7vJeAOuaFAfSOH18l7c2+U+rIdBzw39c2Vxblz8hRFi
wr0RI5wWKpq30/fO0u0P37OMZuE2pqvQAKLrCQBTr0pVLAC9NyBH62sZ3ojIAMyC
jix4xkeupQrfSG3I3J0ZfkCaTYc44dgIsogc2avVYfksQeWFgmfBIGaKz/tVMJTt
XLAtwjo858T1DGRnipC481tj2BMxuIToKHkFuff42fOfyDbX8yTMAMeo2unGpeRF
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293842321796022495105143598140216683956652
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-31 06:50:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-29 06:50:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alumni.cdl.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17032966936563260056082781664093649231074527487379624841097326558103812760103308445524546071080911882078362981884004280511673097684565133038203016500519400529303738639579802570261785065360894000398725611965966906835135887892460086864327214891978823192523225307492712969545156051134661797324992945429714675011652969058904662019070450275197167516559091215145418054292251682735755552246819031352955551649127638390288822337890856799466775462210012704822606516709035074447130245572311361406135193183305031503693852817493200550442356154265629948462941363245603840677552899156570644247209196856424054321529257971744812320049
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eb1cf9af197db476e8ca36c1414b767c213ad9af
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aceconnection.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aexrochester.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africanhumanities.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahlefconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aisalumniconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alemanyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allhandsandheartsalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allhandsbeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.cayetano.edu.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.cdl.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.harpercollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.maua.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.puc-campinas.edu.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.trilogyed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.uarts.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.udsm.ac.tz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.unach.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniatbhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnicapilanou.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnijaveriana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniknightnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniuii.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ampleforthglobal.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrewsnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antigosalunos.aaapucrio.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asfmalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asulawalumninetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athenianlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auconnect.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aveconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avonoldfarmsalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aceconnection.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aexrochester.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.africanhumanities.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahlefconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aisalumniconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alemanyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allhandsandheartsalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allhandsbeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.cayetano.edu.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.harpercollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.maua.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.puc-campinas.edu.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.uarts.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.udsm.ac.tz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.unach.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniatbhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnicapilanou.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnijaveriana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniknightnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniuii.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ampleforthglobal.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andrewsnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antigosalunos.aaapucrio.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asfmalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asulawalumninetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athenianlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auconnect.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aveconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avonoldfarmsalumni.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c470219ca0000040300483046022100f7f3b5dd21249b1b01467a796897070559b1723bdb5a631cef5e13b3c4b14d67022100ea09bfde41454d12fb094cec4e60161e5a38fd53a06a82002f663f966570fd2a007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c470217f4000004030048304602210081c3e3fafcb79ac298eebc8a42f335fb09b537650ed2994ead293a1b3b9d67a3022100f04eebaf132d56684d371cb9fd853e3626827c33c4f1470b51358387260a5fa3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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