cecconnect.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e3:d5:5b:ad:d4:97:87:cd:6b:f9:5d:8a:06:2c:41:1a:41 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cecconnect.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e3:d5:5b:ad:d4:97:87:cd:6b:f9:5d:8a:06:2c:41:1a:41
Serial Number (int): 338864556674150213192609034840648445925953
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7c:0b:54:ec:6a:a2:af:5a:a8:64:a6:b7:99:e8:49:06:fe:9a:31:d2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7c:ee:2e:d6:b9:7e:fc:90:24:54:73:6e:ff:69:68:a7:4e:2e:be:25
Fingerprint (sha256): ba:fb:f5:b3:2a:57:57:25:60:8c:96:53:23:7d:95:a5:c6:d5:97:36:34:38:4e:7c:30:f3:74:cb:34:4e:59:08

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cecconnect.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cecconnect.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

canisiusconnect.com
cardinalsconnect.com
careerdesignlabs.org
carreirasuvv.com
carrollalumni.com
carrollconnect.com
cbumusicconnect.com
cdl-family.org
cdl.sps.columbia.edu
cecconnect.com
centralalumni.com
centrumconnect.com
cerritosconnect.com
chadwickconnect.org
chahtascholars.com
champlainconnect.org
chargerconnect.org
churchillconnect.com
cityuconnect.com
cleoconnection.com
clippersconnect.org
cluconnect.com
codalumniconnect.com
cokescholarsconnect.org
collegecrusadenetwork.com
collegetrackconnect.com
coloradoacademyconnect.org
columbusacademyalumni.org
communikeynetwork.com
connect.cbu.edu
connect.harvardae.org
connect.psichi.org
connect.ruw.edu.bh
connect.woodstockacademy.org
connect2bristol.org
connectbumc.com
connectddd.org
connectgettysburg.com
connectlatinschool.org
connects.emory.edu
connectstc.com
cookeconnect.com
cooperalumnione.com
coppeadconnect.com
corviasconnects.com
cpl-alumni.org
crew-connect.org
crusadersconnect.org
csun.matadormentoring.com
cualumni.network
cuembaalumni.com
www.canisiusconnect.com
www.cardinalsconnect.com
www.careerdesignlabs.org
www.carreirasuvv.com
www.carrollalumni.com
www.carrollconnect.com
www.cbumusicconnect.com
www.cdl-family.org
www.cdl.sps.columbia.edu
www.cecconnect.com
www.centralalumni.com
www.centrumconnect.com
www.cerritosconnect.com
www.chadwickconnect.org
www.chahtascholars.com
www.champlainconnect.org
www.chargerconnect.org
www.churchillconnect.com
www.cityuconnect.com
www.cleoconnection.com
www.clippersconnect.org
www.cluconnect.com
www.codalumniconnect.com
www.cokescholarsconnect.org
www.collegecrusadenetwork.com
www.collegetrackconnect.com
www.coloradoacademyconnect.org
www.columbusacademyalumni.org
www.communikeynetwork.com
www.connect.cbu.edu
www.connect.harvardae.org
www.connect.psichi.org
www.connect.ruw.edu.bh
www.connect2bristol.org
www.connectbumc.com
www.connectddd.org
www.connectgettysburg.com
www.connectlatinschool.org
www.connectstc.com
www.cookeconnect.com
www.cooperalumnione.com
www.coppeadconnect.com
www.corviasconnects.com
www.cpl-alumni.org
www.crew-connect.org
www.crusadersconnect.org
www.cualumni.network
www.cuembaalumni.com

Other certificates including the domain name cecconnect.com

(limited to 100 certificates)
canterburycommunity.org
cecconnect.com
canisiusconnect.com
cecconnect.com
cooperalumnione.com
cecconnect.com
m.cecconnect.com
canterburycommunity.org
cooperalumnione.com
cecconnect.com
cooperalumnione.com
cooperalumnione.com
cecconnect.com
cecconnect.com
cecconnect.com
collegecrusadenetwork.com
cooperalumnione.com
canterburycommunity.org
cooperalumnione.com
cooperalumnione.com
cecconnect.com
cardinalsconnect.com
canisiusconnect.com
cooperalumnione.com
cooperalumnione.com
m.cecconnect.com
cecconnect.com
canterburycommunity.org
canterburycommunity.org
cecconnect.com
canterburycommunity.org
cooperalumnione.com
m.cecconnect.com
m.cecconnect.com
cecconnect.com
cecconnect.com
cooperalumnione.com
cooperalumnione.com
cecconnect.com
canisiusconnect.com
cooperalumnione.com
m.cecconnect.com
cecconnect.com
collegecrusadenetwork.com
cooperalumnione.com
cooperalumnione.com
cecconnect.com
canterburycommunity.org
cecconnect.com
cecconnect.com
cecconnect.com
collegecrusadenetwork.com
canterburycommunity.org
collegecrusadenetwork.com
cecconnect.com
m.cecconnect.com
cooperalumnione.com
collegecrusadenetwork.com
cecconnect.com
cardinalsconnect.com
cooperalumnione.com
cecconnect.com
cooperalumnione.com
m.cecconnect.com
collegecrusadenetwork.com
collegecrusadenetwork.com

Certificate

The complete raw certificate details for cecconnect.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1o1mt6k5fenA1lABTpLT
9A1pc558fTsP6X3GqtjulyT3csExIJ8m1gHXmW128BjtYsEiwMwuA/yKaQATg7Dw
OSFbsL9YCbG2SKefPGfyKCWirXNBHT0DFESzrTEu+rEiJRjKHp0wHru/OOOrA8qr
IbMiGORd3zPjo6s4J+Dl+rsl6iTmwgsYjYMY28EDAv9N1n9SjMtVzaHW23+SaPqW
BORlTr3VwuqH1PRuTRtVvbtdOm5l9b6Yj0v11uElorEMAvYW0EReuuNVHlvJTEAL
L1GUEepCjRUXpcYJqpZdQL8T2z6uCqq+A88bPdL/AEVLXaViLrRuTJt8kywUICDP
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 338864556674150213192609034840648445925953
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-27 20:55:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-25 20:55:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cecconnect.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27084724812934794621843905068711184797545523928913202745973096721371299396348315967349649138750410590836173916878722387942214059198072606392756387310155523106585105655399844770078782843728751462302603786153125880382497875012555676541518109816065427240846687693909419471274474132652584732857359020115030603703998992345645781621749726153816389159749253404885316241238662870214918313293629125630308910937143829899112269806845173731709779217471672725741329289615344342468397945592648023703357033829259954596748394245890501920651038965790053450917380283688732301209041617219033246776897623979880950959374065679287971794741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7c0b54ec6aa2af5aa864a6b799e84906fe9a31d2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2239 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canisiusconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardinalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careerdesignlabs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carreirasuvv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrollalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrollconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbumusicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdl-family.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdl.sps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cecconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centrumconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cerritosconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chadwickconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chahtascholars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'champlainconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chargerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchillconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleoconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clippersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cluconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cokescholarsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegecrusadenetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegetrackconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradoacademyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbusacademyalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communikeynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.cbu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.harvardae.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.psichi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.ruw.edu.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.woodstockacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect2bristol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectbumc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectddd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectgettysburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectlatinschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connects.emory.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectstc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cooperalumnione.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coppeadconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corviasconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpl-alumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crew-connect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crusadersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csun.matadormentoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cualumni.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuembaalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canisiusconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardinalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.careerdesignlabs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carreirasuvv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrollalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrollconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbumusicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdl-family.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdl.sps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cecconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centrumconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cerritosconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chadwickconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chahtascholars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.champlainconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chargerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.churchillconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cleoconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clippersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cluconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cokescholarsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegecrusadenetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegetrackconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coloradoacademyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbusacademyalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communikeynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.cbu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.harvardae.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.psichi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.ruw.edu.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect2bristol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectbumc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectddd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectgettysburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectlatinschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectstc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cookeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cooperalumnione.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coppeadconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corviasconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpl-alumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crew-connect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crusadersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cualumni.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cuembaalumni.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016cd5140bdb0000040300483046022100ee7b6288c2e3eb04038e25324ac5ac1a23d8a301f90a14c52c846953c44d37f4022100c41c5335078b0252d46cd82f8641fbfbc2505f2c1c56a443c2c8b7e709b93cf0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016cd5140dec0000040300473045022100f1ef6a716a9d61026b57415b7c18d5e90507d25d98e348dcf75d90d94690692d02202120e397ec13dff6625fff5683619923de1e7bb6d14d9fc727fc8a6076822a48
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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