backlot.afi.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e7:dc:9f:a5:b1:05:2a:b2:5d:f3:55:24:3b:28:3d:39:7a was issued on by Let's Encrypt.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=backlot.afi.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e7:dc:9f:a5:b1:05:2a:b2:5d:f3:55:24:3b:28:3d:39:7a
Serial Number (int): 340235343648913281939341260081849738017146
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 15:5c:3c:71:c7:4c:83:b9:f1:f5:cd:d3:63:9f:58:27:9c:47:82:5d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cb:f4:d4:85:84:fd:a9:ae:e0:f6:88:29:7c:ed:90:9c:b0:95:b0:9c
Fingerprint (sha256): 9f:fe:fd:a4:4d:47:26:23:66:6e:9d:26:eb:54:ae:e8:1e:08:76:1f:69:2d:31:45:5e:b5:49:a2:c9:e7:bc:73

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate backlot.afi.com

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for backlot.afi.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

baalumninetwork.com
bacalumni.net
backlot.afi.com
badgerbridgebeta.com
badgerbridgetest.manual.graduway.com
badgersinfinancetest.manual.graduway.com
baldwinalumniconnect.org
bartonalumni.com
baueralumniconnect.com
bbnsconnect.org
bbnsgraduates.org
bchighnetwork.com
beardown.arizonaalumni.com
beardownnetwork.com
beardownnetwork1.com
belenalumni.org
benjaminconnect.com
benningtonalumni.com
bergencatholicconnect.com
berkeleyischoolconnect.com
berkeleyjnetwork.com
berkeleylawlink.com
berkeleylawnetwork.com
berkeleyprepconnect.com
berkshirealumni.com
berkshireschoolconnect.com
bermudacollegeconnect.com
bestbuddiesconnect.org
bgaconnects.com
biolahub.biola.edu
bolivaralumni.com
bonnerconnect.org
boscoalumni.org
bouchetconnect.org
boyslatinconnect.com
branchout.marlboro.edu
branchoutconnect.com
brandmanalumni.com
bridgewaterconnect.com
bridgezbt.com
brockportalumniconnect.com
brooksiansconnect.com
bucknellcareerconnect.com
bucknellconnect.com
bucsconnect.org
www.baalumninetwork.com
www.bacalumni.net
www.backlot.afi.com
www.badgerbridgebeta.com
www.baldwinalumniconnect.org
www.bartonalumni.com
www.baueralumniconnect.com
www.bbnsconnect.org
www.bbnsgraduates.org
www.bchighnetwork.com
www.beardownnetwork.com
www.belenalumni.org
www.benjaminconnect.com
www.benningtonalumni.com
www.bergencatholicconnect.com
www.berkeleyischoolconnect.com
www.berkeleyjnetwork.com
www.berkeleylawlink.com
www.berkeleylawnetwork.com
www.berkeleyprepconnect.com
www.berkshirealumni.com
www.berkshireschoolconnect.com
www.bermudacollegeconnect.com
www.bestbuddiesconnect.org
www.bgaconnects.com
www.bolivaralumni.com
www.bonnerconnect.org
www.boscoalumni.org
www.bouchetconnect.org
www.boyslatinconnect.com
www.branchout.marlboro.edu
www.branchoutconnect.com
www.brandmanalumni.com
www.bridgewaterconnect.com
www.bridgezbt.com
www.brockportalumniconnect.com
www.brooksiansconnect.com
www.bucknellcareerconnect.com
www.bucknellconnect.com
www.bucsconnect.org

Other certificates including the domain name afi.com

(limited to 100 certificates)
securessl-pst1.tessituranetworkhost.com
ssl392100.cloudflaressl.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
baalumninetwork.com
secure-uswe2-1.tessituranetwork.com
ssl392102.cloudflaressl.com
secure-uswe2-1.tessituranetwork.com
ssl392102.cloudflaressl.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
ssl392101.cloudflaressl.com
secure-uswe2-1.tessituranetwork.com
ssl392100.cloudflaressl.com
ssl392101.cloudflaressl.com
secure-uswe2-1.tessituranetwork.com
afi.com
afi.com
ssl392102.cloudflaressl.com
secure-uswe2-1.tessituranetwork.com
ssl392102.cloudflaressl.com
securessl-pst1.tessituranetworkhost.com
ssl392100.cloudflaressl.com
ssl392102.cloudflaressl.com
support.afi.com
secure-uswe2-1.tessituranetwork.com

*.loyalty.afi.com
ssl392101.cloudflaressl.com
ssl392102.cloudflaressl.com
securessl-pst1.tessituranetworkhost.com
bobcatconnect.org
support.afi.com
secure-uswe2-1.tessituranetwork.com
beachwoodconnect.com
ssl392102.cloudflaressl.com

ssl392102.cloudflaressl.com
ssl392101.cloudflaressl.com
webtixs.afi.com
secure-uswe2-1.tessituranetwork.com
ssl392100.cloudflaressl.com
beachwoodconnect.com
baalumninetwork.com
ssl392101.cloudflaressl.com
securessl-pst1.tessituranetworkhost.com
ssl392102.cloudflaressl.com
support.afi.com
ssl392102.cloudflaressl.com
secure-uswe2-1.tessituranetwork.com
webtixs5.afi.com
ssl392102.cloudflaressl.com
secure-uswe2-1.tessituranetwork.com
support.afi.com
aficatalog.afi.com
sni.cloudflaressl.com
ssl392102.cloudflaressl.com
ssl392100.cloudflaressl.com
securessl-pst1.tessituranetworkhost.com
ssl392102.cloudflaressl.com
securessl-pst1.tessituranetworkhost.com
ssl392100.cloudflaressl.com
beachwoodconnect.com
bergencatholicconnect.com
www.loyalty.afi.com
secure-uswe2-1.tessituranetwork.com
ssl392102.cloudflaressl.com
ssl392102.cloudflaressl.com
www.loyalty.afi.com
sni.cloudflaressl.com
beachwoodconnect.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
ssl392102.cloudflaressl.com
securessl-pst1.tessituranetworkhost.com
bobcatconnect.org
*.afi.com
ssl392100.cloudflaressl.com
secure-uswe2-1.tessituranetwork.com
americanfilm.afi.com
afi.com
secure-uswe2-1.tessituranetwork.com
ssl392102.cloudflaressl.com
backlot.afi.com
ssl392102.cloudflaressl.com
ssl392101.cloudflaressl.com

bobcatconnect.org
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
ssl392102.cloudflaressl.com
securessl-pst1.tessituranetworkhost.com
secure-uswe2-1.tessituranetwork.com
securessl-pst1.tessituranetworkhost.com
ssl392102.cloudflaressl.com
fest.afi.com
ssl392102.cloudflaressl.com
ssl392101.cloudflaressl.com
afi.edu

Certificate

The complete raw certificate details for backlot.afi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZ+l3aCAGIBvw547nn8a
ESTl2buUFmnGfbvfTTGQ8lwnghkWhOsT1x9gheAWthloG+x44/08947r5szcs+2x
pNGvMIlG8FEvN/QAtRXHqW2J27gsjkfuQyjzZBBVmMyfMb+zylftA/rnX/U2mK2r
IjguWJT2lksgcpAuIH4KPteICqrCUS3RoBVIASPicx2r992CJbrNMi43GSPxMz07
hIVAInpYsu/RyR2omhfsk4WzzrhX3FaAw5i9M4jk+/4cTCkfNczxyA1U9jvTleon
85TWf18YoMP28TyxkwRHUIXPxCkRJwOlZF/pSqTO+ojmHA1VM5jbuHDO+A47worb
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340235343648913281939341260081849738017146
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-27 08:28:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-26 08:28:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'backlot.afi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23432811738758418171698309408890940626990099894021922064356577513867868534104880644061980206711584336977784726078781674687846465767671709096226235043971215303960080760199804878990433685485760099232758729229300876300000449071029797327203538244562343100858717155421427548741222648040398988629010489018210329217794477289977425743302591738814078501930046928268468466453422208724218869012495257492172816088634333748169573501247054891913918980676805680981180997094078872173942823001642732454098245017932846315947157813060974565197332282675133591492708949428723184565963366893364897864019817418434280178442330759176888441631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							155c3c71c74c83b9f1f5cdd3639f58279c47825d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2036 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baalumninetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bacalumni.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backlot.afi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badgerbridgebeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badgerbridgetest.manual.graduway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badgersinfinancetest.manual.graduway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baldwinalumniconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bartonalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baueralumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbnsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbnsgraduates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bchighnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beardown.arizonaalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beardownnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beardownnetwork1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belenalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benjaminconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benningtonalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bergencatholicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleyischoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleyjnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleylawlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleylawnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleyprepconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkshirealumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkshireschoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bermudacollegeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestbuddiesconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bgaconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biolahub.biola.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bolivaralumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonnerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boscoalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bouchetconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boyslatinconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branchout.marlboro.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branchoutconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandmanalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridgewaterconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridgezbt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brockportalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brooksiansconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucknellcareerconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucknellconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baalumninetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bacalumni.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.backlot.afi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badgerbridgebeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baldwinalumniconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bartonalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baueralumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbnsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbnsgraduates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bchighnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beardownnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belenalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benjaminconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benningtonalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bergencatholicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleyischoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleyjnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleylawlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleylawnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleyprepconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkshirealumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkshireschoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bermudacollegeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestbuddiesconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bgaconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bolivaralumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bonnerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boscoalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bouchetconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boyslatinconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.branchout.marlboro.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.branchoutconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brandmanalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bridgewaterconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bridgezbt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brockportalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brooksiansconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bucknellcareerconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bucknellconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bucsconnect.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d720cb52f0000040300463044022000810c349bf3a9388d5cfcb86caf8f0d160a7ef59ffaa654e4f880daa1581bce0220028e78238098710960470eae322aafec0ca57ba8f5f37e91100974645e7a5bca00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d720cb5550000040300483046022100bc5bdfe9bcc1fb1bc17dc9ed8bd9336b2c0923b4f6fb9848dfe0cab801f2b1c5022100d89c51a39f640e1ecffe470128c818431a74da2a04f1ab2adc83e749fe63cd51
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006b90528b0e3dc6d04418fc0abd4513fe42037a1f17c07ed15ae450dd208e8408a5755223684aa21e37e474caad6f79e74d7dc5181e4e7b56893b0bdfef6cb43cb7cf7016a9a0b1228c2a993af042783761b98560c2752a40b2628fe986200f8c158b02be91779ac3951d911a069b75bd917b3bf91683934c2d53ae76c0b77098a7a8cf672c47f6c2df073a0663026aaf2b1b06f1f3685de7eda7cb17386dd222c3efeac92a2aa7894a72d661f961d89c467737b2c6bbc1be1f222c1d4cbff0af30177db428d020640953dcce57998cf6e05bef7453f6fa9737880e1774e41f8b5ece70cc9b79d72bb1c68c8e8ebb016943d378f4be10becc4660dd50d92c8df2