bucknellconnect.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:43:1e:42:7a:f8:e4:39:8f:d9:55:73:95:f9:15:57:95:c3 was issued on by Let's Encrypt.

With 76 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bucknellconnect.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:43:1e:42:7a:f8:e4:39:8f:d9:55:73:95:f9:15:57:95:c3
Serial Number (int): 284175998404623015886088234528755181655491
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 86:92:ae:20:ad:a3:85:fb:1c:52:21:a6:a9:79:19:62:fb:71:5c:45
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 06:7c:98:92:fa:b2:5e:61:6d:f5:20:3a:d7:47:e3:17:76:d5:23:41
Fingerprint (sha256): da:70:44:26:36:2f:d2:12:11:b3:04:ca:60:37:65:6d:9b:ca:7f:80:59:31:82:a4:a7:d2:a5:35:d3:d0:86:db

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bucknellconnect.com

76

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bucknellconnect.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

baalumninetwork.com
bacalumni.net
badgerbridgebeta.com
badgerbridgetest.manual.graduway.com
badgersinfinancetest.manual.graduway.com
baldwinalumniconnect.org
bartonalumni.com
baueralumniconnect.com
bbnsconnect.org
bbnsgraduates.org
bchighnetwork.com
beardown.arizonaalumni.com
beardownnetwork.com
beardownnetwork1.com
belenalumni.org
benjaminconnect.com
benningtonalumni.com
berkeleyischoolconnect.com
berkeleyjnetwork.com
berkeleylawlink.com
berkeleylawnetwork.com
berkeleyprepconnect.com
berkshirealumni.com
berkshireschoolconnect.com
bermudacollegeconnect.com
bgaconnects.com
bolivaralumni.com
bonnerconnect.org
boscoalumni.org
bouchetconnect.org
branchout.marlboro.edu
branchoutconnect.com
brandmanalumni.com
bridgewaterconnect.com
bridgezbt.com
brockportalumniconnect.com
brooksiansconnect.com
bucknellcareerconnect.com
bucknellconnect.com
bucsconnect.org
www.baalumninetwork.com
www.bacalumni.net
www.badgerbridgebeta.com
www.baldwinalumniconnect.org
www.bartonalumni.com
www.baueralumniconnect.com
www.bbnsconnect.org
www.bbnsgraduates.org
www.bchighnetwork.com
www.beardownnetwork.com
www.belenalumni.org
www.benjaminconnect.com
www.benningtonalumni.com
www.berkeleyischoolconnect.com
www.berkeleyjnetwork.com
www.berkeleylawlink.com
www.berkeleylawnetwork.com
www.berkeleyprepconnect.com
www.berkshirealumni.com
www.berkshireschoolconnect.com
www.bermudacollegeconnect.com
www.bgaconnects.com
www.bolivaralumni.com
www.bonnerconnect.org
www.boscoalumni.org
www.bouchetconnect.org
www.branchout.marlboro.edu
www.branchoutconnect.com
www.brandmanalumni.com
www.bridgewaterconnect.com
www.bridgezbt.com
www.brockportalumniconnect.com
www.brooksiansconnect.com
www.bucknellcareerconnect.com
www.bucknellconnect.com
www.bucsconnect.org

Other certificates including the domain name bucknellconnect.com

(limited to 100 certificates)
baalumninetwork.com
bobcatconnect.org
beachwoodconnect.com
beachwoodconnect.com
baalumninetwork.com
bestbuddiesconnect.org
boscoalumni.org
beachwoodconnect.com
bergencatholicconnect.com
beachwoodconnect.com
bobcatconnect.org
bobcatconnect.org
bucknellcareerconnect.com
bobcatconnect.org
bergencatholicconnect.com
bucknellconnect.com
bobcatconnect.org
badgersinfinance.net
baalumninetwork.com
bobcatconnect.org
backlot.afi.com
bobcatconnect.org
boyslatinconnect.com
bobcatconnect.org
bucknellcareerconnect.com
bucknellconnect.com
bucknellconnect.com
baalumninetwork.com
boscoalumni.org
bucknellcareerconnect.com
bucknellconnect.com
bucknellconnect.com
beachwoodconnect.com

Certificate

The complete raw certificate details for bucknellconnect.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMZzCCC0+gAwIBAgISA0MeQnr45DmP2VVzlfkVV5XDMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MTExMjU2NDlaFw0x
OTEyMTAxMjU2NDlaMB4xHDAaBgNVBAMTE2J1Y2tuZWxsY29ubmVjdC5jb20wggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnXX16G1IILGN5KmV4MYqZ8+FK
NTRElRXclZ+Cv+6+gnfyLrZhSfa4HtsILnb+vlC9DrU9PbSbprOaoTX58470NOjr
qizrTSyrLygSPwAk2MP4FHtHMVOCmiTWo1D2TDdKXR0FGSpH3EtDGBmtkF9L8hGq
LFEF/GuLu5Gtvf8aoVDeYUbRxud9AHxuGpAKwG/1IkjDywO7YP4upjB/X429NhSz
1LQXAT2fOIpxzqX5KzO8iVP952i33MDdYwN/p+Cl+BC+38yuCDppxKOzuLDLxSZ2
usCgh1Fq/WTz5V7xgxdPJbHiMwQR/xTbRedx+ZIY3cXMgjPjE571FgY6mmSbAgMB
AAGjgglxMIIJbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFIaSriCto4X7HFIhpql5
GWL7cVxFMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUF
BwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNy
eXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy
eXB0Lm9yZy8wggclBgNVHREEggccMIIHGIITYmFhbHVtbmluZXR3b3JrLmNvbYIN
YmFjYWx1bW5pLm5ldIIUYmFkZ2VyYnJpZGdlYmV0YS5jb22CJGJhZGdlcmJyaWRn
ZXRlc3QubWFudWFsLmdyYWR1d2F5LmNvbYIoYmFkZ2Vyc2luZmluYW5jZXRlc3Qu
bWFudWFsLmdyYWR1d2F5LmNvbYIYYmFsZHdpbmFsdW1uaWNvbm5lY3Qub3JnghBi
YXJ0b25hbHVtbmkuY29tghZiYXVlcmFsdW1uaWNvbm5lY3QuY29tgg9iYm5zY29u
bmVjdC5vcmeCEWJibnNncmFkdWF0ZXMub3JnghFiY2hpZ2huZXR3b3JrLmNvbYIa
YmVhcmRvd24uYXJpem9uYWFsdW1uaS5jb22CE2JlYXJkb3dubmV0d29yay5jb22C
FGJlYXJkb3dubmV0d29yazEuY29tgg9iZWxlbmFsdW1uaS5vcmeCE2JlbmphbWlu
Y29ubmVjdC5jb22CFGJlbm5pbmd0b25hbHVtbmkuY29tghpiZXJrZWxleWlzY2hv
b2xjb25uZWN0LmNvbYIUYmVya2VsZXlqbmV0d29yay5jb22CE2JlcmtlbGV5bGF3
bGluay5jb22CFmJlcmtlbGV5bGF3bmV0d29yay5jb22CF2JlcmtlbGV5cHJlcGNv
bm5lY3QuY29tghNiZXJrc2hpcmVhbHVtbmkuY29tghpiZXJrc2hpcmVzY2hvb2xj
b25uZWN0LmNvbYIZYmVybXVkYWNvbGxlZ2Vjb25uZWN0LmNvbYIPYmdhY29ubmVj
dHMuY29tghFib2xpdmFyYWx1bW5pLmNvbYIRYm9ubmVyY29ubmVjdC5vcmeCD2Jv
c2NvYWx1bW5pLm9yZ4ISYm91Y2hldGNvbm5lY3Qub3JnghZicmFuY2hvdXQubWFy
bGJvcm8uZWR1ghRicmFuY2hvdXRjb25uZWN0LmNvbYISYnJhbmRtYW5hbHVtbmku
Y29tghZicmlkZ2V3YXRlcmNvbm5lY3QuY29tgg1icmlkZ2V6YnQuY29tghpicm9j
a3BvcnRhbHVtbmljb25uZWN0LmNvbYIVYnJvb2tzaWFuc2Nvbm5lY3QuY29tghli
dWNrbmVsbGNhcmVlcmNvbm5lY3QuY29tghNidWNrbmVsbGNvbm5lY3QuY29tgg9i
dWNzY29ubmVjdC5vcmeCF3d3dy5iYWFsdW1uaW5ldHdvcmsuY29tghF3d3cuYmFj
YWx1bW5pLm5ldIIYd3d3LmJhZGdlcmJyaWRnZWJldGEuY29tghx3d3cuYmFsZHdp
bmFsdW1uaWNvbm5lY3Qub3JnghR3d3cuYmFydG9uYWx1bW5pLmNvbYIad3d3LmJh
dWVyYWx1bW5pY29ubmVjdC5jb22CE3d3dy5iYm5zY29ubmVjdC5vcmeCFXd3dy5i
Ym5zZ3JhZHVhdGVzLm9yZ4IVd3d3LmJjaGlnaG5ldHdvcmsuY29tghd3d3cuYmVh
cmRvd25uZXR3b3JrLmNvbYITd3d3LmJlbGVuYWx1bW5pLm9yZ4IXd3d3LmJlbmph
bWluY29ubmVjdC5jb22CGHd3dy5iZW5uaW5ndG9uYWx1bW5pLmNvbYIed3d3LmJl
cmtlbGV5aXNjaG9vbGNvbm5lY3QuY29tghh3d3cuYmVya2VsZXlqbmV0d29yay5j
b22CF3d3dy5iZXJrZWxleWxhd2xpbmsuY29tghp3d3cuYmVya2VsZXlsYXduZXR3
b3JrLmNvbYIbd3d3LmJlcmtlbGV5cHJlcGNvbm5lY3QuY29tghd3d3cuYmVya3No
aXJlYWx1bW5pLmNvbYIed3d3LmJlcmtzaGlyZXNjaG9vbGNvbm5lY3QuY29tgh13
d3cuYmVybXVkYWNvbGxlZ2Vjb25uZWN0LmNvbYITd3d3LmJnYWNvbm5lY3RzLmNv
bYIVd3d3LmJvbGl2YXJhbHVtbmkuY29tghV3d3cuYm9ubmVyY29ubmVjdC5vcmeC
E3d3dy5ib3Njb2FsdW1uaS5vcmeCFnd3dy5ib3VjaGV0Y29ubmVjdC5vcmeCGnd3
dy5icmFuY2hvdXQubWFybGJvcm8uZWR1ghh3d3cuYnJhbmNob3V0Y29ubmVjdC5j
b22CFnd3dy5icmFuZG1hbmFsdW1uaS5jb22CGnd3dy5icmlkZ2V3YXRlcmNvbm5l
Y3QuY29tghF3d3cuYnJpZGdlemJ0LmNvbYIed3d3LmJyb2NrcG9ydGFsdW1uaWNv
bm5lY3QuY29tghl3d3cuYnJvb2tzaWFuc2Nvbm5lY3QuY29tgh13d3cuYnVja25l
bGxjYXJlZXJjb25uZWN0LmNvbYIXd3d3LmJ1Y2tuZWxsY29ubmVjdC5jb22CE3d3
dy5idWNzY29ubmVjdC5vcmcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC
3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcw
ggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIg
CMY3NXnmEHvMVgAAAW0gnMxoAAAEAwBHMEUCIAkiWPm/qXXP0i68/7w48i+J06Dx
UfB4tAByxi30BsXjAiEA+fESWOXS715q1vBeqSSoRd+58Sm5DIUUbf+AtAOxJsUA
dgApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAW0gnMxTAAAEAwBH
MEUCIAjLnSjZrRHYgu3rNj5ict+oeKeNZ880lxtJKKGaxnulAiEA3M2eX1Xjv0TY
3lp0OXsWzQ69AFJ1wGdPJGyLUQH2KbAwDQYJKoZIhvcNAQELBQADggEBAJxj+FmZ
Gv7zo4j/j0I+GoeCJqW7sxSdWIf74B3zVpPSXmi/lig1D4q+ibUMQG8jdXD/2cAx
wSlNBA6kkrd69PLiwW2STNXqdUSmaZR888nnc9qURxMlTGZ1MzBKlv814kRTfyD0
rM1jeyhSF/SEvmi5P1Zw64ZuWgNDnNz4WhGIhUrJEkTQYsEBYSR4iYB40EBSZ9pg
mpCREu8WVvwKFnyrz8HzivFZzhmt2Bj+cIc0ozLqyJ6WwdQZ8xottF3a20W/c08R
fjdlGcIjyEySN5GozsqR6GsFZyU+017NHt/9XCCsIti5pLJfCqfe4/bz6DBMC/Qb
Z35OiJ1ycK/Dg4I=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp119ehtSCCxjeSpleDGK
mfPhSjU0RJUV3JWfgr/uvoJ38i62YUn2uB7bCC52/r5QvQ61PT20m6azmqE1+fOO
9DTo66os600sqy8oEj8AJNjD+BR7RzFTgpok1qNQ9kw3Sl0dBRkqR9xLQxgZrZBf
S/IRqixRBfxri7uRrb3/GqFQ3mFG0cbnfQB8bhqQCsBv9SJIw8sDu2D+LqYwf1+N
vTYUs9S0FwE9nziKcc6l+SszvIlT/edot9zA3WMDf6fgpfgQvt/Mrgg6acSjs7iw
y8UmdrrAoIdRav1k8+Ve8YMXTyWx4jMEEf8U20XncfmSGN3FzIIz4xOe9RYGOppk
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284175998404623015886088234528755181655491
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-11 12:56:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-10 12:56:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bucknellconnect.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21127898637794630351008253370451473883841088811201830962312855206231621938780001931408351964812511210886816794877016073408442369262061395530030766073852393973033245918843048586592967406009572625064429217670893112347698540223565432165194387262796899010614283806787091346152026030889792921001360118869227548938174715051208804740239511570450417504584478811909526696880662195838228046246813265539523262912807084034199969263443089106838805066378387808411117120628644798214132908579039204673579411692002843192712869623156138330577084394134472590760477182908403149038633947554099367114963454200873852845200265571703379879067
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8692ae20ada385fb1c5221a6a9791962fb715c45
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1820 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baalumninetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bacalumni.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badgerbridgebeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badgerbridgetest.manual.graduway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badgersinfinancetest.manual.graduway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baldwinalumniconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bartonalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baueralumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbnsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbnsgraduates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bchighnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beardown.arizonaalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beardownnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beardownnetwork1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belenalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benjaminconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benningtonalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleyischoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleyjnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleylawlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleylawnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleyprepconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkshirealumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkshireschoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bermudacollegeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bgaconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bolivaralumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonnerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boscoalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bouchetconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branchout.marlboro.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branchoutconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandmanalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridgewaterconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridgezbt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brockportalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brooksiansconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucknellcareerconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucknellconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baalumninetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bacalumni.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badgerbridgebeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baldwinalumniconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bartonalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baueralumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbnsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbnsgraduates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bchighnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beardownnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belenalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benjaminconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benningtonalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleyischoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleyjnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleylawlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleylawnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleyprepconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkshirealumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkshireschoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bermudacollegeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bgaconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bolivaralumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bonnerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boscoalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bouchetconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.branchout.marlboro.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.branchoutconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brandmanalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bridgewaterconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bridgezbt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brockportalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brooksiansconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bucknellcareerconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bucknellconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bucsconnect.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d209ccc6800000403004730450220092258f9bfa975cfd22ebcffbc38f22f89d3a0f151f078b40072c62df406c5e3022100f9f11258e5d2ef5e6ad6f05ea924a845dfb9f129b90c85146dff80b403b126c5007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d209ccc530000040300473045022008cb9d28d9ad11d882edeb363e6272dfa878a78d67cf34971b4928a19ac67ba5022100dccd9e5f55e3bf44d8de5a74397b16cd0ebd005275c0674f246c8b5101f629b0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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