collegecrusadenetwork.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:dd:45:c1:92:3d:84:32:6b:5d:00:4f:8a:d8:80:56:71:f1 was issued on by Let's Encrypt.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=collegecrusadenetwork.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:dd:45:c1:92:3d:84:32:6b:5d:00:4f:8a:d8:80:56:71:f1
Serial Number (int): 336631982695916629803350343848097576546801
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6d:e6:cb:7f:4a:97:95:fc:42:7b:c7:58:13:cd:ee:be:74:3b:a4:e9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3f:0e:2d:c9:c7:43:a7:35:35:33:11:a3:f5:94:2a:0f:ce:bf:99:54
Fingerprint (sha256): c0:7b:63:72:c3:8a:25:3a:dc:5d:02:ad:0c:89:4f:a7:62:68:d7:4c:de:9f:fe:de:c1:59:d5:c5:79:e7:28:29

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate collegecrusadenetwork.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for collegecrusadenetwork.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

canisiusconnect.com
cardinalsconnect.com
careerdesignlabs.org
carreirasuvv.com
carrollalumni.com
carrollconnect.com
cbumusicconnect.com
cdl-family.org
cdl.sps.columbia.edu
cecconnect.com
centralalumni.com
centrumconnect.com
chadwickconnect.org
chahtascholars.com
champlainconnect.org
chargerconnect.org
churchillconnect.com
cityuconnect.com
cleoconnection.com
clippersconnect.org
cluconnect.com
codalumniconnect.com
cokescholarsconnect.org
collegecrusadenetwork.com
collegetrackconnect.com
coloradoacademyconnect.org
columbusacademyalumni.org
communikeynetwork.com
connect.cbu.edu
connect.harvardae.org
connect.psichi.org
connect.ruw.edu.bh
connect.woodstockacademy.org
connect2bristol.org
connectbumc.com
connectddd.org
connectgettysburg.com
connectlatinschool.org
connects.emory.edu
connectstc.com
cookeconnect.com
cooperalumnione.com
coppeadconnect.com
corviasconnects.com
cpl-alumni.org
crew-connect.org
crusadersconnect.org
csun.matadormentoring.com
cualumni.network
cuembaalumni.com
www.canisiusconnect.com
www.cardinalsconnect.com
www.careerdesignlabs.org
www.carreirasuvv.com
www.carrollalumni.com
www.carrollconnect.com
www.cbumusicconnect.com
www.cdl-family.org
www.cdl.sps.columbia.edu
www.cecconnect.com
www.centralalumni.com
www.centrumconnect.com
www.chadwickconnect.org
www.chahtascholars.com
www.champlainconnect.org
www.chargerconnect.org
www.churchillconnect.com
www.cityuconnect.com
www.cleoconnection.com
www.clippersconnect.org
www.cluconnect.com
www.codalumniconnect.com
www.cokescholarsconnect.org
www.collegecrusadenetwork.com
www.collegetrackconnect.com
www.coloradoacademyconnect.org
www.columbusacademyalumni.org
www.communikeynetwork.com
www.connect.cbu.edu
www.connect.harvardae.org
www.connect.psichi.org
www.connect.ruw.edu.bh
www.connect2bristol.org
www.connectbumc.com
www.connectddd.org
www.connectgettysburg.com
www.connectlatinschool.org
www.connectstc.com
www.cookeconnect.com
www.cooperalumnione.com
www.coppeadconnect.com
www.corviasconnects.com
www.cpl-alumni.org
www.crew-connect.org
www.crusadersconnect.org
www.cualumni.network
www.cuembaalumni.com

Other certificates including the domain name collegecrusadenetwork.com

(limited to 100 certificates)
canterburycommunity.org
cecconnect.com
canisiusconnect.com
cecconnect.com
canterburycommunity.org
cecconnect.com
cecconnect.com
cecconnect.com
collegecrusadenetwork.com
canterburycommunity.org
cecconnect.com
cardinalsconnect.com
canterburycommunity.org
canterburycommunity.org
canterburycommunity.org
cecconnect.com
cecconnect.com
canisiusconnect.com
collegecrusadenetwork.com
canterburycommunity.org
cecconnect.com
cecconnect.com
collegecrusadenetwork.com
canterburycommunity.org
collegecrusadenetwork.com
collegecrusadenetwork.com
cardinalsconnect.com
cecconnect.com
collegecrusadenetwork.com
collegecrusadenetwork.com

Certificate

The complete raw certificate details for collegecrusadenetwork.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvBBx1gdAIVSDTPiTALd
xK7exp2eskAZQWsk84Vit1M5YDwkcPcnMuwcWN6S7ZZyEv4/sDFfVUzaFr0Q873r
d1APudCdUkzGJ4d6cwcVw1iJm/2ErdswrDAHxBFbHGOV22j6+rilij45GowPiHhu
a3KEYJEpzvYq/Ou2mzypgSADSjDXjCjb8QnY9H3X9g6N0JGf+hKzQ3CBiDiIpKXt
ga0Il2oOLEwg7uLpALEpfhK28XMfLq47sXx/N11mm2y3yn0+un1GFfFgle/UKdLO
dNeXBGkS42YG/kkwgZIngpzz5IiPZfQgcZYhFMblqvluf7ft2oD74BDEY9Z/TdH3
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336631982695916629803350343848097576546801
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-22 10:55:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-20 10:55:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'collegecrusadenetwork.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25113659499966961896998353085077077838527560241569024508080050839353816296276850714539898424049653835588549641578751626482261176170897839198363863113018935071651204244070671475198135828946685899533506185941665455572013951940689701685153539517331773807563152290708875704583518517648571893578536961648463616389677982661184345288711728172049862251762367488559768402460549608470346456562462484577355835729900381419810027082917569460818959580100761992829142672151331104065577646292230063102506230031775512782575186226587189170248281302140212782505267603319152691020525302970147601728841162000778296837477498859490689283977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6de6cb7f4a9795fc427bc75813cdeebe743ba4e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2193 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canisiusconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardinalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careerdesignlabs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carreirasuvv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrollalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrollconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbumusicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdl-family.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdl.sps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cecconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centrumconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chadwickconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chahtascholars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'champlainconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chargerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchillconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleoconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clippersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cluconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cokescholarsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegecrusadenetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegetrackconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradoacademyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbusacademyalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communikeynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.cbu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.harvardae.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.psichi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.ruw.edu.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.woodstockacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect2bristol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectbumc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectddd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectgettysburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectlatinschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connects.emory.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectstc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cooperalumnione.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coppeadconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corviasconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpl-alumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crew-connect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crusadersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csun.matadormentoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cualumni.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuembaalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canisiusconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardinalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.careerdesignlabs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carreirasuvv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrollalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrollconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbumusicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdl-family.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdl.sps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cecconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centrumconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chadwickconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chahtascholars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.champlainconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chargerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.churchillconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cleoconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clippersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cluconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cokescholarsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegecrusadenetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegetrackconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coloradoacademyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbusacademyalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communikeynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.cbu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.harvardae.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.psichi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.ruw.edu.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect2bristol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectbumc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectddd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectgettysburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectlatinschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectstc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cookeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cooperalumnione.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coppeadconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corviasconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpl-alumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crew-connect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crusadersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cualumni.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cuembaalumni.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016cb92ef1bd00000403004730450220651588dc43a3c16727583a8629212cdafefdf9877b0c0a51284f066f514c1ec60221008b6d5b7badf3deb275d34aa10f381d0b2d6e424e1969fb4689ee62f8955a2623007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016cb92eefe50000040300473045022100f5b96d6aee375ca412fa50782508ad06e1ee07415b142ca29955ff0e48d41303022030609beb34a4b683023cf141cc008d1f6be7d92ba78bf5d35592d8728e40dccb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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