cecconnect.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:97:f6:f6:f2:a5:94:37:d9:e2:46:2f:dc:47:02:1d:48:26 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cecconnect.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:97:f6:f6:f2:a5:94:37:d9:e2:46:2f:dc:47:02:1d:48:26
Serial Number (int): 313047767513794378995031263888141845350438
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 17:ab:b4:aa:28:e8:30:96:fe:13:92:a9:09:5e:f1:5a:82:3e:1f:10
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e2:4d:c7:6c:92:20:be:93:38:74:6b:fd:39:e3:44:d9:53:37:97:97
Fingerprint (sha256): bc:5b:6d:a0:4f:57:ba:19:3e:d4:1b:dc:38:a4:4d:68:a5:ae:bc:f8:f4:01:a1:5c:7c:93:00:6d:2d:a1:2c:b0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cecconnect.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cecconnect.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

canisiusconnect.com
cardinalsconnect.com
careerdesignlabs.org
carreirasuvv.com
carrollalumni.com
carrollconnect.com
cbumusicconnect.com
cdl-family.org
cdl.sps.columbia.edu
cecconnect.com
centralalumni.com
centrumconnect.com
cerritosconnect.com
chadwickconnect.org
chahtascholars.com
champlainconnect.org
chargerconnect.org
churchillconnect.com
cityuconnect.com
cleoconnection.com
clippersconnect.org
cluconnect.com
codalumniconnect.com
cokescholarsconnect.org
collegecrusadenetwork.com
collegetrackconnect.com
coloradoacademyconnect.org
columbusacademyalumni.org
communikeynetwork.com
connect.cbu.edu
connect.harvardae.org
connect.psichi.org
connect.ruw.edu.bh
connect.woodstockacademy.org
connect2bristol.org
connectbumc.com
connectddd.org
connectgettysburg.com
connectlatinschool.org
connects.emory.edu
connectstc.com
cookeconnect.com
cooperalumnione.com
coppeadconnect.com
corviasconnects.com
cpl-alumni.org
crew-connect.org
crusadersconnect.org
csun.matadormentoring.com
cualumni.network
cuembaalumni.com
www.canisiusconnect.com
www.cardinalsconnect.com
www.careerdesignlabs.org
www.carreirasuvv.com
www.carrollalumni.com
www.carrollconnect.com
www.cbumusicconnect.com
www.cdl-family.org
www.cdl.sps.columbia.edu
www.cecconnect.com
www.centralalumni.com
www.centrumconnect.com
www.cerritosconnect.com
www.chadwickconnect.org
www.chahtascholars.com
www.champlainconnect.org
www.chargerconnect.org
www.churchillconnect.com
www.cityuconnect.com
www.cleoconnection.com
www.clippersconnect.org
www.cluconnect.com
www.codalumniconnect.com
www.cokescholarsconnect.org
www.collegecrusadenetwork.com
www.collegetrackconnect.com
www.coloradoacademyconnect.org
www.columbusacademyalumni.org
www.communikeynetwork.com
www.connect.cbu.edu
www.connect.harvardae.org
www.connect.psichi.org
www.connect.ruw.edu.bh
www.connect2bristol.org
www.connectbumc.com
www.connectddd.org
www.connectgettysburg.com
www.connectlatinschool.org
www.connectstc.com
www.cookeconnect.com
www.cooperalumnione.com
www.coppeadconnect.com
www.corviasconnects.com
www.cpl-alumni.org
www.crew-connect.org
www.crusadersconnect.org
www.cualumni.network
www.cuembaalumni.com

Other certificates including the domain name cecconnect.com

(limited to 100 certificates)
canterburycommunity.org
cecconnect.com
canisiusconnect.com
cecconnect.com
cooperalumnione.com
cecconnect.com
m.cecconnect.com
canterburycommunity.org
cooperalumnione.com
cecconnect.com
cooperalumnione.com
cooperalumnione.com
cecconnect.com
cecconnect.com
cecconnect.com
collegecrusadenetwork.com
cooperalumnione.com
canterburycommunity.org
cooperalumnione.com
cooperalumnione.com
cecconnect.com
cardinalsconnect.com
canisiusconnect.com
cooperalumnione.com
cooperalumnione.com
m.cecconnect.com
cecconnect.com
canterburycommunity.org
canterburycommunity.org
cecconnect.com
canterburycommunity.org
cooperalumnione.com
m.cecconnect.com
m.cecconnect.com
cecconnect.com
cecconnect.com
cooperalumnione.com
cooperalumnione.com
cecconnect.com
canisiusconnect.com
cooperalumnione.com
m.cecconnect.com
cecconnect.com
collegecrusadenetwork.com
cooperalumnione.com
cooperalumnione.com
cecconnect.com
canterburycommunity.org
cecconnect.com
cecconnect.com
cecconnect.com
collegecrusadenetwork.com
canterburycommunity.org
collegecrusadenetwork.com
cecconnect.com
m.cecconnect.com
cooperalumnione.com
collegecrusadenetwork.com
cecconnect.com
cardinalsconnect.com
cooperalumnione.com
cecconnect.com
cooperalumnione.com
m.cecconnect.com
collegecrusadenetwork.com
collegecrusadenetwork.com

Certificate

The complete raw certificate details for cecconnect.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlerq/+snARR5VVwXZ5md
cVUetqx3Mvd9Wz4MNQjrM5M40cstgGgEdOZogoy0y6VzjEEOu4VDNIRK1TIDh7DZ
4Wr79Ph5dvEkQTY7fTWzKYHfnpWfYgK4kJasDoNjRJMXTeTeUeaqOr0Nygzmhb16
r1oWceX8SqXZ95jrucpB46DutQNrln9owhnatPfHcY0pVUm9CYikun8sxNBoE996
dhNWpXHXDESEs+yOKhRIjx0bcBIkrkUGgeIJT0Z7ifOAGysMQSutl/QRyILZ7Fqy
H6dLKXbldkEa1LnS6jDb0jATfsmcotytFB/ubu1wk20grXnxEQEEGs3JGK0PBn80
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313047767513794378995031263888141845350438
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-24 22:55:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-23 22:55:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cecconnect.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18925349807224780698864327359974923991213079961432145462315605868347805343951702273692092330575949043145567994574973873217054898362721339719696120169606576220060875192624727523668905949467801018020258367887836262736143746319563408508852485227183498904078274702305608025212696496870602439434204360947983916723452188532752634343755510650924234242233206061233746941265446544693398455645298659367760380830382609115676601676153878889561396733571088954520017070074233087634079898290004552957534636891205248085532385361111942337482609403995415138546341282414544010680963925354136624327067245654677633552434584792297719673973
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							17abb4aa28e83096fe1392a9095ef15a823e1f10
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2239 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canisiusconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardinalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careerdesignlabs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carreirasuvv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrollalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrollconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbumusicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdl-family.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdl.sps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cecconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centrumconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cerritosconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chadwickconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chahtascholars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'champlainconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chargerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchillconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleoconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clippersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cluconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cokescholarsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegecrusadenetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegetrackconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradoacademyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbusacademyalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communikeynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.cbu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.harvardae.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.psichi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.ruw.edu.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.woodstockacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect2bristol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectbumc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectddd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectgettysburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectlatinschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connects.emory.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectstc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cooperalumnione.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coppeadconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corviasconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpl-alumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crew-connect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crusadersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csun.matadormentoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cualumni.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuembaalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canisiusconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardinalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.careerdesignlabs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carreirasuvv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrollalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrollconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbumusicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdl-family.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdl.sps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cecconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centrumconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cerritosconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chadwickconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chahtascholars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.champlainconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chargerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.churchillconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cleoconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clippersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cluconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cokescholarsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegecrusadenetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegetrackconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coloradoacademyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbusacademyalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communikeynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.cbu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.harvardae.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.psichi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.ruw.edu.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect2bristol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectbumc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectddd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectgettysburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectlatinschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectstc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cookeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cooperalumnione.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coppeadconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corviasconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpl-alumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crew-connect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crusadersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cualumni.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cuembaalumni.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d65b39b200000040300473045022100a9492141dc43669274cd9641d5f04ee89d4e93a7dbf3ef1b50c41f44850a0e910220314cbc555ec7a0f57a48a7c812e60d9fa424d7e104a470034a2b90842b314dfc00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d65b39b3e000004030046304402201134211a67336fcd9aa1e8ba8c3e7843afe67b7b7fdc27ccbd0773247437564f02207e777c3e98a0a044985e852dea45b296abf03d192f709f27c6bbab3d5ebdf14f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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