alumni.udsm.ac.tz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d1:9e:a6:0f:c3:d4:b3:d9:b6:f5:3a:2a:91:0c:bc:5e:f9 was issued on by Let's Encrypt.

With 65 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=alumni.udsm.ac.tz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d1:9e:a6:0f:c3:d4:b3:d9:b6:f5:3a:2a:91:0c:bc:5e:f9
Serial Number (int): 332666752746120876286011072088912816791289
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: dd:12:0d:3c:b1:2d:db:10:82:3c:07:27:53:26:e6:e9:b3:5b:36:65
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e8:ff:a8:19:60:aa:4a:7f:09:f0:af:07:21:f0:02:79:49:b9:e2:2f
Fingerprint (sha256): aa:25:02:2e:5e:95:9f:aa:9a:4e:32:ec:03:7a:c0:41:14:ae:26:88:38:6f:61:22:62:16:68:d3:c6:f8:a1:48

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate alumni.udsm.ac.tz

65

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alumni.udsm.ac.tz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aceconnection.org
acomconnect.com
aexrochester.org
africanhumanities.org
ahlefconnect.com
aisalumniconnect.org
alemanyconnect.org
allhandsandheartsalumni.org
allhandsbeta.com
alumni.cayetano.edu.pe
alumni.cdl.ch
alumni.harpercollege.edu
alumni.maua.br
alumni.puc-campinas.edu.br
alumni.siebelinstitute.com
alumni.trilogyed.com
alumni.uarts.edu
alumni.udsm.ac.tz
alumni.unach.cl
alumniatbhs.com
alumnijaveriana.com
alumniknightnetwork.com
alumniuii.net
ampleforthglobal.org.uk
andoveralumni.org
andrewsnetwork.org
antigosalunos.aaapucrio.com.br
apuconnect.com
asfmalumni.com
asulawalumninetwork.com
atecunited.com
athenianlink.com
auconnect.net
avonoldfarmsalumni.com
www.aceconnection.org
www.acomconnect.com
www.aexrochester.org
www.africanhumanities.org
www.ahlefconnect.com
www.aisalumniconnect.org
www.alemanyconnect.org
www.allhandsandheartsalumni.org
www.allhandsbeta.com
www.alumni.cayetano.edu.pe
www.alumni.harpercollege.edu
www.alumni.maua.br
www.alumni.puc-campinas.edu.br
www.alumni.uarts.edu
www.alumni.udsm.ac.tz
www.alumni.unach.cl
www.alumniatbhs.com
www.alumnijaveriana.com
www.alumniknightnetwork.com
www.alumniuii.net
www.ampleforthglobal.org.uk
www.andoveralumni.org
www.andrewsnetwork.org
www.antigosalunos.aaapucrio.com.br
www.apuconnect.com
www.asfmalumni.com
www.asulawalumninetwork.com
www.atecunited.com
www.athenianlink.com
www.auconnect.net
www.avonoldfarmsalumni.com

Other certificates including the domain name udsm.ac.tz

(limited to 100 certificates)
auconnect.net
antigosalunos.aaapucrio.com.br
swahiliwikipedia.udsm.ac.tz
bill.udsm.ac.tz
journals.udsm.ac.tz
cccs.udsm.ac.tz
alphaphinetwork.com
tjs.udsm.ac.tz
aceconnection.org
timetable.udsm.ac.tz
acsconnects.org
mbb.udsm.ac.tz
aceconnection.org
edu.udsm.ac.tz
halostudy.ac.tz
aatlconnected.com
library.udsm.ac.tz
www2.udsm.ac.tz
alumni.udsm.ac.tz
alumniucsh.com
gdpc.udsm.ac.tz
cccs.udsm.ac.tz
ira.udsm.ac.tz
sol.udsm.ac.tz
chemistry.udsm.ac.tz
*.udsm.ac.tz
coict.udsm.ac.tz
coss.udsm.ac.tz
aceconnection.org
aatlconnected.com
library.udsm.ac.tz
cheza.udsm.ac.tz
doso.udsm.ac.tz
cse.udsm.ac.tz
ahlafoundationconnect.com
opras.udsm.ac.tz
ete.udsm.ac.tz
udbs.udsm.ac.tz
udiemso.udsm.ac.tz
coasft.udsm.ac.tz
ptms.coict.udsm.ac.tz
aris2.udsm.ac.tz
www.coict.udsm.ac.tz
usab.udsm.ac.tz
geology.udsm.ac.tz
temco.udsm.ac.tz
ahlafoundationconnect.com
daruso.udsm.ac.tz
maths.udsm.ac.tz
www.eaump.udsm.ac.tz
coasft.udsm.ac.tz
undergraduate.udsm.ac.tz
coet.udsm.ac.tz
udiemso.udsm.ac.tz
access.fortefoundation.org
udicti.coict.udsm.ac.tz
edu.udsm.ac.tz
cvl.udsm.ac.tz
iks.udsm.ac.tz
coet.udsm.ac.tz
lac.udsm.ac.tz
bill.udsm.ac.tz
coet.udsm.ac.tz
statistics.udsm.ac.tz
lms.udsm.ac.tz
aatlconnected.com
postgraduate.udsm.ac.tz
conas.udsm.ac.tz
udbs.udsm.ac.tz
coss.udsm.ac.tz
sjmc.udsm.ac.tz
access.fortefoundation.org
softwaretest1.udsm.ac.tz
coet.udsm.ac.tz
mail.ims.udsm.ac.tz
sol.udsm.ac.tz
ete.udsm.ac.tz
cohu.udsm.ac.tz
aatlconnected.com
conas.udsm.ac.tz
aatlconnected.com
aquatic.udsm.ac.tz
library.udsm.ac.tz
sohs.udsm.ac.tz
usab.udsm.ac.tz
alumnisabana.com
aatlconnected.com
cme.udsm.ac.tz
ud.udsm.ac.tz
opras.udsm.ac.tz
cse.udsm.ac.tz
aceconnection.org
alumni.udsm.ac.tz
pmis.udsm.ac.tz
zoology.udsm.ac.tz
confucius.udsm.ac.tz
swahiliwikipedia.udsm.ac.tz
softwaretest1.udsm.ac.tz
linguistics.udsm.ac.tz
smtp.udsm.ac.tz

Certificate

The complete raw certificate details for alumni.udsm.ac.tz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDAvmFAoCSfOp1v81dk/
Cmxy0IAvKUgYuqehIMilnw/qE40BlWiyxuONx8jdwIJbrlr9QL59KngP/A7faTbV
dIw7VfZqexL7G/5qP46pxpHmxUdVgEPzZCjKhrxB3JGvNYfPgeRrD8Z+TgXqyTdN
gOlqlAcQWvbReIjrl1j7wf1rnLWYSlGWyxUyC+vic4ICzLFrFCAIdchlHl/AGa2k
fo87k7yw3OXo9c7GKHkBP5dWfKjS6EvbfmdG1syVoKzTzU5XKf+N81jpOfi3WE9a
Ya93ZdxxroiPA+FMJtXg5Aauar4uCzvEg6/zdbO7C3Wa3YiRZqN8NNkgU0VjipSr
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332666752746120876286011072088912816791289
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-02 07:07:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-01 07:07:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alumni.udsm.ac.tz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22746656255587186602163481377549131810088179058049003120597969392825202185971430864961496465785397027179400276114587964965812706489717329139077033578524455132972919643801032489264292936681462389445522160764566932254022330373586107531424336262681298185663037248321760079991673786962312855034573870341147700860229148520578504071003688414908209422056076794457530215654111044560257233483513725253531264847261962247285013974258661155234818166920498818971244520987481497113695960112859957137467670599485463719026234911168138026760409736672226008531174317125556783626217259812643403935596739031760522608709411048631410404133
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:3|t:29|false]  
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1465 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aceconnection.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acomconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aexrochester.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africanhumanities.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahlefconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aisalumniconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alemanyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allhandsandheartsalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allhandsbeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.cayetano.edu.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.cdl.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.harpercollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.maua.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.puc-campinas.edu.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.siebelinstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.trilogyed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.uarts.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.udsm.ac.tz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.unach.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniatbhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnijaveriana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniknightnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniuii.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ampleforthglobal.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andoveralumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrewsnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antigosalunos.aaapucrio.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asfmalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asulawalumninetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atecunited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athenianlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auconnect.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avonoldfarmsalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aceconnection.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acomconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aexrochester.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.africanhumanities.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahlefconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aisalumniconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alemanyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allhandsandheartsalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allhandsbeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.cayetano.edu.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.harpercollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.maua.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.puc-campinas.edu.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.uarts.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.udsm.ac.tz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.unach.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniatbhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnijaveriana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniknightnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniuii.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ampleforthglobal.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andoveralumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andrewsnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antigosalunos.aaapucrio.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asfmalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asulawalumninetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atecunited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athenianlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auconnect.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avonoldfarmsalumni.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016cf1037cf100000403004630440220173de8cf67bce43038eb3eaab2fc57db568cf07bbfc735ab22228303ba403e020220086c41d222281dc5a489859e08441cc814dbbb3dfe811ae23fb5cf0d2c0e5058007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016cf1037ec6000004030047304502202d3fde5a82cf93d396dee3384c773eb8982b3776bb1a72be0e6fcec3b1539b3002210089de19380f0e68de268389b717387ee565ed38762f067be4d8baad232e3309bc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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