bucknellcareerconnect.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:37:0a:01:42:02:0d:6c:97:a2:74:fb:0c:c9:ad:00:c1:45 was issued on by Let's Encrypt.

With 74 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bucknellcareerconnect.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:37:0a:01:42:02:0d:6c:97:a2:74:fb:0c:c9:ad:00:c1:45
Serial Number (int): 280065686786988707875143081837439593005381
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b6:a4:e1:ed:f9:c5:6e:e7:0b:88:94:0a:6e:aa:b6:41:ce:52:65:fb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c8:63:91:d9:f4:c1:85:c2:e3:86:13:ac:12:21:c6:cc:2e:31:27:e4
Fingerprint (sha256): cf:e5:3a:88:dd:de:0e:46:dd:ab:d5:22:84:67:78:a5:41:d0:29:e1:b6:3d:d8:1d:00:c5:5c:ac:41:15:34:0c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bucknellcareerconnect.com

74

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bucknellcareerconnect.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

baalumninetwork.com
bacalumni.net
badgerbridgebeta.com
badgerbridgetest.manual.graduway.com
badgersinfinancetest.manual.graduway.com
baldwinalumniconnect.org
bartonalumni.com
baueralumniconnect.com
bbnsconnect.org
bbnsgraduates.org
bchighnetwork.com
beardown.arizonaalumni.com
beardownnetwork.com
beardownnetwork1.com
belenalumni.org
benjaminconnect.com
benningtonalumni.com
berkeleyischoolconnect.com
berkeleyjnetwork.com
berkeleylawlink.com
berkeleylawnetwork.com
berkeleyprepconnect.com
berkshirealumni.com
berkshireschoolconnect.com
bermudacollegeconnect.com
bgaconnects.com
bolivaralumni.com
bonnerconnect.org
bouchetconnect.org
branchout.marlboro.edu
branchoutconnect.com
brandmanalumni.com
bridgewaterconnect.com
bridgezbt.com
brockportalumniconnect.com
brooksiansconnect.com
bucknellcareerconnect.com
bucknellconnect.com
bucsconnect.org
www.baalumninetwork.com
www.bacalumni.net
www.badgerbridgebeta.com
www.baldwinalumniconnect.org
www.bartonalumni.com
www.baueralumniconnect.com
www.bbnsconnect.org
www.bbnsgraduates.org
www.bchighnetwork.com
www.beardownnetwork.com
www.belenalumni.org
www.benjaminconnect.com
www.benningtonalumni.com
www.berkeleyischoolconnect.com
www.berkeleyjnetwork.com
www.berkeleylawlink.com
www.berkeleylawnetwork.com
www.berkeleyprepconnect.com
www.berkshirealumni.com
www.berkshireschoolconnect.com
www.bermudacollegeconnect.com
www.bgaconnects.com
www.bolivaralumni.com
www.bonnerconnect.org
www.bouchetconnect.org
www.branchout.marlboro.edu
www.branchoutconnect.com
www.brandmanalumni.com
www.bridgewaterconnect.com
www.bridgezbt.com
www.brockportalumniconnect.com
www.brooksiansconnect.com
www.bucknellcareerconnect.com
www.bucknellconnect.com
www.bucsconnect.org

Other certificates including the domain name bucknellcareerconnect.com

(limited to 100 certificates)
graduway.com
bucknellcareerconnect.com
baalumninetwork.com
ipadeconnect.com
ipadeconnect.com
ipadeconnect.com
graduway.com
ipadeconnect.com
ipadeconnect.com
ipadeconnect.com
graduway.com
ipadeconnect.com
ipadeconnect.com
ipadeconnect.com
graduway.com
bobcatconnect.org
ipadeconnect.com
beachwoodconnect.com
bucknellcareerconnect.com
beachwoodconnect.com
baalumninetwork.com
ipadeconnect.com
graduway.com
graduway.com
bestbuddiesconnect.org
graduway.com
ipadeconnect.com
ipadeconnect.com
graduway.com
boscoalumni.org
graduway.com
beachwoodconnect.com
m.bucknellcareerconnect.com
bergencatholicconnect.com
ipadeconnect.com
m.bucknellcareerconnect.com
beachwoodconnect.com
ipadeconnect.com
bbnsconnect.org
bbnsconnect.org
ipadeconnect.com
bobcatconnect.org
graduway.com
ipadeconnect.com
bobcatconnect.org
graduway.com
graduway.com
bucknellcareerconnect.com
ipadeconnect.com
graduway.com
graduway.com
bobcatconnect.org
bergencatholicconnect.com
bbnsconnect.org
graduway.com
ipadeconnect.com
ipadeconnect.com
bucknellconnect.com
bobcatconnect.org
graduway.com
graduway.com
ipadeconnect.com
bucknellcareerconnect.com
ipadeconnect.com
ipadeconnect.com
ipadeconnect.com
badgersinfinance.net
graduway.com
ipadeconnect.com
graduway.com
baalumninetwork.com
graduway.com
bobcatconnect.org
ipadeconnect.com
graduway.com
bucknellcareerconnect.com
ipadeconnect.com
backlot.afi.com
bobcatconnect.org
ipadeconnect.com
ipadeconnect.com
ipadeconnect.com
boyslatinconnect.com
bobcatconnect.org
ipadeconnect.com
bucknellcareerconnect.com
graduway.com
ipadeconnect.com
bucknellconnect.com
graduway.com
graduway.com
baalumninetwork.com
graduway.com
ipadeconnect.com
ipadeconnect.com
graduway.com
ipadeconnect.com
boscoalumni.org
graduway.com
graduway.com

Certificate

The complete raw certificate details for bucknellcareerconnect.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Jx7e7oTiHlOYmDznTor
RR4gOBg0p8Upc/Y+PmUxcwZ/jNP7cs7aj70CI1ql3dfforSNZr+puxmYOaYEbG4T
fGEm98Vq6+srcQrttUnv/zXPSM6fVhUqb5nexmp83vYF5jr9CxB67cj68VEvciSi
RrT3XW/duuZccYjttoYKplOSgCQZ0OVj8V5PjQiJbFjkDkzGZ+ztvspEHaTgPkxY
C/M3Z7mGolAs8SI1l1Nv5hdHLZMXtLvqhXm4TdAakPVtyCNnDAfeE51zqttLqVRP
mjcZukm+8WZTNR983fZ23dTzJdGwymuJqcwnIGHDszLGvcS8uIwfY2idbqStHyGQ
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280065686786988707875143081837439593005381
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-07 11:30:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-05 11:30:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bucknellcareerconnect.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31889217177475584888128972863702679452148709647495095606972001866742453904107568956046092937130094772348421959486541184221450849151400108844232306702072427448469296636255138612815574012058499031263692480535405312473760938118615177956707445606649822182090138616053410685932606188466590696397726364907272553517361032501602570021812506328239990895087191255912875970896218165356843865759125392057149880255208403960829905114241941172275184804902644144666286881894736461883902818316310510262927499174290866761685636229511436819122627178468226644498652261515356058833495578553393091344556653221287771629174536650692367585281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b6a4e1edf9c56ee70b88940a6eaab641ce5265fb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1782 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baalumninetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bacalumni.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badgerbridgebeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badgerbridgetest.manual.graduway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badgersinfinancetest.manual.graduway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baldwinalumniconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bartonalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baueralumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbnsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbnsgraduates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bchighnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beardown.arizonaalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beardownnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beardownnetwork1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belenalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benjaminconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benningtonalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleyischoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleyjnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleylawlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleylawnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleyprepconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkshirealumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkshireschoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bermudacollegeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bgaconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bolivaralumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonnerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bouchetconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branchout.marlboro.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branchoutconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandmanalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridgewaterconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridgezbt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brockportalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brooksiansconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucknellcareerconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucknellconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baalumninetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bacalumni.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badgerbridgebeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baldwinalumniconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bartonalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baueralumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbnsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbnsgraduates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bchighnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beardownnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belenalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benjaminconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benningtonalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleyischoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleyjnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleylawlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleylawnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleyprepconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkshirealumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkshireschoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bermudacollegeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bgaconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bolivaralumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bonnerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bouchetconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.branchout.marlboro.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.branchoutconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brandmanalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bridgewaterconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bridgezbt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brockportalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brooksiansconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bucknellcareerconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bucknellconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bucsconnect.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c6c0f9b600000040300483046022100ec925a852c49b777e3fbd7914bd8337050967b621361087db5a9311b250f9e0d022100d38f17a6a73888293be35ed5c941fcfd2e08e444e618f9d336c12c2d131819d6007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c6c0f9b36000004030048304602210091654099190268581c1537d8f645e1ee5699da9b3a6207f2aeaa028afe56076a0221009cd68b8a20f1d4a7bf5c2278db270d3c149dfb01daf9dc9aeab0d215980ad69e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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