alumni.cdl.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4a:cd:25:4f:20:ff:bb:65:dc:77:73:05:bb:1d:fe:b5:22 was issued on by Let's Encrypt.

With 60 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=alumni.cdl.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4a:cd:25:4f:20:ff:bb:65:dc:77:73:05:bb:1d:fe:b5:22
Serial Number (int): 286790438406474664895325994451941556401442
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 89:4f:8b:26:eb:ef:21:93:6a:87:4d:a4:2f:bf:25:1b:a3:13:c7:a7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bb:8a:a7:d0:8d:aa:f9:9b:9e:51:d7:e7:e5:c2:b0:ca:03:e7:d2:66
Fingerprint (sha256): de:1c:68:08:cb:8c:0b:61:f2:b2:38:71:bf:2e:4f:0d:4d:bd:d4:ed:12:2d:6c:21:c4:f5:b6:09:bf:50:89:35

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate alumni.cdl.ch

60

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alumni.cdl.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aceconnection.org
aexrochester.org
africanhumanities.org
ahlefconnect.com
aisalumniconnect.org
alemanyconnect.org
allhandsandheartsalumni.org
allhandsbeta.com
alumni.cayetano.edu.pe
alumni.cdl.ch
alumni.harpercollege.edu
alumni.maua.br
alumni.puc-campinas.edu.br
alumni.trilogyed.com
alumni.uarts.edu
alumni.udsm.ac.tz
alumni.unach.cl
alumniatbhs.com
alumnicapilanou.ca
alumnijaveriana.com
alumniknightnetwork.com
alumniuii.net
ampleforthglobal.org.uk
andrewsnetwork.org
antigosalunos.aaapucrio.com.br
asfmalumni.com
asulawalumninetwork.com
athenianlink.com
auconnect.net
aveconnect.org
avonoldfarmsalumni.com
www.aceconnection.org
www.aexrochester.org
www.africanhumanities.org
www.ahlefconnect.com
www.aisalumniconnect.org
www.alemanyconnect.org
www.allhandsandheartsalumni.org
www.allhandsbeta.com
www.alumni.cayetano.edu.pe
www.alumni.harpercollege.edu
www.alumni.maua.br
www.alumni.puc-campinas.edu.br
www.alumni.uarts.edu
www.alumni.udsm.ac.tz
www.alumni.unach.cl
www.alumniatbhs.com
www.alumnicapilanou.ca
www.alumnijaveriana.com
www.alumniknightnetwork.com
www.alumniuii.net
www.ampleforthglobal.org.uk
www.andrewsnetwork.org
www.antigosalunos.aaapucrio.com.br
www.asfmalumni.com
www.asulawalumninetwork.com
www.athenianlink.com
www.auconnect.net
www.aveconnect.org
www.avonoldfarmsalumni.com

Other certificates including the domain name cdl.ch

(limited to 100 certificates)
*.cdl.ch
alphaphinetwork.com
aceconnection.org
acsconnects.org
aceconnection.org
aatlconnected.com
alumniucsh.com
aceconnection.org
aatlconnected.com
*.cdl.ch
www.cdl.ch
klvin.cedricantonio.com
ahlafoundationconnect.com
*.cdl.ch
ahlafoundationconnect.com
reenroll.cdl.ch
blogs.cdl.ch
access.fortefoundation.org
aatlconnected.com
access.fortefoundation.org
aatlconnected.com
aatlconnected.com
alumnisabana.com
aatlconnected.com
cdl.ch
welcome.cdl.ch
aceconnection.org
*.cdl.ch
aatlconnected.com
*.cdl.ch
*.cdl.ch
access.fortefoundation.org
alumniucsh.com
alumnisabana.com
aceconnection.org
aatlconnected.com
atecunited.com
alumnigsb.com
alphaphinetwork.com
adenalumni.net
aceconnection.org
*.cdl.ch
blogs.cdl.ch
apuconnect.com
*.cdl.ch
access.fortefoundation.org
cdl.ch
aceconnection.org
aatlconnected.com
cdl.ch
aatlconnected.com
access.fortefoundation.org
blogs.cdl.ch
*.cdl.ch
blogs.cdl.ch
aatlconnected.com
access.fortefoundation.org
cedricantonio.com
www.ahlafoundationconnect.com
ahlafoundationconnect.com
binjerwah.cedricantonio.com
aatlconnected.com
access.fortefoundation.org
alphaphinetwork.com
aatlconnected.com
access.fortefoundation.org
mdm.cdl.ch
blogs.cdl.ch
aatlconnected.com
alumni.harding.edu
alumnisabana.com
access.fortefoundation.org
andoveralumni.org
adenalumni.net
alumni.pcci.edu
alumni.pcci.edu
alumni.harding.edu
aatlconnected.com
access.fortefoundation.org
access.fortefoundation.org
alumni.bcm.edu
gapyear.cdl.ch
gapyear.cdl.ch
gapyear.cdl.ch
blogs.cdl.ch
alumni.facamp.com.br
access.fortefoundation.org
blogs.cdl.ch
alumnisabana.com
aatlconnected.com
*.cdl.ch
alumnigsb.com
alumni.brandman.edu
alumni.pcci.edu
gapyear.cdl.ch
alumni.nonprofitpractice.org
access.fortefoundation.org
access.fortefoundation.org
alumni.thrivescholars.org
webmail.cdl.ch

Certificate

The complete raw certificate details for alumni.cdl.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKmTCCCYGgAwIBAgISA0rNJU8g/7tl3HdzBbsd/rUiMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MzEwNjUyMDFaFw0x
OTEwMjkwNjUyMDFaMBgxFjAUBgNVBAMTDWFsdW1uaS5jZGwuY2gwggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCH5YNrV6jfln21apro6gEudLuWmkfLXcUR
2keOMQEBiUQRFGPXCiJPQZTGeXKG2n9Jsobi/uyMQeNyOSBLqTueJeGYE60U3zVW
qouLVXISvih+gmcgmCLE6kv43d3H+pWXZBLlm5bJFkvI44AzBRFlg1HQRmA2jydh
2K63ujKQW3J65Jmc4oMBmv5Gux+lbOPQL/C3UQZxvHTNQk49nA44VB/TFZnF+sy+
imj1VtamIpWtT9RtHvxmdtVnrrfeUB5NC5HHLIXh4SOeSIsaeteAZKL5SC5qZwl9
pbk1dEdXVfndw8qwKBJlS+TEiyukzMalnokPEQ4L00O+WZZCEtZZAgMBAAGjggep
MIIHpTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFIlPiybr7yGTaodNpC+/JRujE8en
MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMw
YTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9y
ZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9y
Zy8wggVeBgNVHREEggVVMIIFUYIRYWNlY29ubmVjdGlvbi5vcmeCEGFleHJvY2hl
c3Rlci5vcmeCFWFmcmljYW5odW1hbml0aWVzLm9yZ4IQYWhsZWZjb25uZWN0LmNv
bYIUYWlzYWx1bW5pY29ubmVjdC5vcmeCEmFsZW1hbnljb25uZWN0Lm9yZ4IbYWxs
aGFuZHNhbmRoZWFydHNhbHVtbmkub3JnghBhbGxoYW5kc2JldGEuY29tghZhbHVt
bmkuY2F5ZXRhbm8uZWR1LnBlgg1hbHVtbmkuY2RsLmNoghhhbHVtbmkuaGFycGVy
Y29sbGVnZS5lZHWCDmFsdW1uaS5tYXVhLmJyghphbHVtbmkucHVjLWNhbXBpbmFz
LmVkdS5icoIUYWx1bW5pLnRyaWxvZ3llZC5jb22CEGFsdW1uaS51YXJ0cy5lZHWC
EWFsdW1uaS51ZHNtLmFjLnR6gg9hbHVtbmkudW5hY2guY2yCD2FsdW1uaWF0Ymhz
LmNvbYISYWx1bW5pY2FwaWxhbm91LmNhghNhbHVtbmlqYXZlcmlhbmEuY29tghdh
bHVtbmlrbmlnaHRuZXR3b3JrLmNvbYINYWx1bW5pdWlpLm5ldIIXYW1wbGVmb3J0
aGdsb2JhbC5vcmcudWuCEmFuZHJld3NuZXR3b3JrLm9yZ4IeYW50aWdvc2FsdW5v
cy5hYWFwdWNyaW8uY29tLmJygg5hc2ZtYWx1bW5pLmNvbYIXYXN1bGF3YWx1bW5p
bmV0d29yay5jb22CEGF0aGVuaWFubGluay5jb22CDWF1Y29ubmVjdC5uZXSCDmF2
ZWNvbm5lY3Qub3JnghZhdm9ub2xkZmFybXNhbHVtbmkuY29tghV3d3cuYWNlY29u
bmVjdGlvbi5vcmeCFHd3dy5hZXhyb2NoZXN0ZXIub3Jnghl3d3cuYWZyaWNhbmh1
bWFuaXRpZXMub3JnghR3d3cuYWhsZWZjb25uZWN0LmNvbYIYd3d3LmFpc2FsdW1u
aWNvbm5lY3Qub3JnghZ3d3cuYWxlbWFueWNvbm5lY3Qub3Jngh93d3cuYWxsaGFu
ZHNhbmRoZWFydHNhbHVtbmkub3JnghR3d3cuYWxsaGFuZHNiZXRhLmNvbYIad3d3
LmFsdW1uaS5jYXlldGFuby5lZHUucGWCHHd3dy5hbHVtbmkuaGFycGVyY29sbGVn
ZS5lZHWCEnd3dy5hbHVtbmkubWF1YS5icoIed3d3LmFsdW1uaS5wdWMtY2FtcGlu
YXMuZWR1LmJyghR3d3cuYWx1bW5pLnVhcnRzLmVkdYIVd3d3LmFsdW1uaS51ZHNt
LmFjLnR6ghN3d3cuYWx1bW5pLnVuYWNoLmNsghN3d3cuYWx1bW5pYXRiaHMuY29t
ghZ3d3cuYWx1bW5pY2FwaWxhbm91LmNhghd3d3cuYWx1bW5pamF2ZXJpYW5hLmNv
bYIbd3d3LmFsdW1uaWtuaWdodG5ldHdvcmsuY29tghF3d3cuYWx1bW5pdWlpLm5l
dIIbd3d3LmFtcGxlZm9ydGhnbG9iYWwub3JnLnVrghZ3d3cuYW5kcmV3c25ldHdv
cmsub3JngiJ3d3cuYW50aWdvc2FsdW5vcy5hYWFwdWNyaW8uY29tLmJyghJ3d3cu
YXNmbWFsdW1uaS5jb22CG3d3dy5hc3VsYXdhbHVtbmluZXR3b3JrLmNvbYIUd3d3
LmF0aGVuaWFubGluay5jb22CEXd3dy5hdWNvbm5lY3QubmV0ghJ3d3cuYXZlY29u
bmVjdC5vcmeCGnd3dy5hdm9ub2xkZmFybXNhbHVtbmkuY29tMEwGA1UdIARFMEMw
CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j
cHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYA4mlL
ribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFsRwO4fgAABAMARzBFAiBj
2adSpyNj/0QwGSEjUSzBwXrCnYkaj4i2uiLiqJbqGQIhALBz4IMc+YMyCfdBHBt3
INvoY9CQD9NainYKOT/gKP8SAHUAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHH
aFRL2I0AAAFsRwO4ogAABAMARjBEAiA0tMcrOBBRoiWIWcTBoc6+Tm8MdQjd961H
5bejH5wrawIgYFvdtu6DCwge/6aaKDpmT1Pb02a1lDggYbTFV8BMuSwwDQYJKoZI
hvcNAQELBQADggEBACyhI3yAWIew91ybq0Kj5Ov4lNoJO0BrOvGN7ZckBHAKuunb
356rvCAC+2e93pNHTtp71kevGSiATZ8rdZJaD6yc+UyUG0MLGBzjtxF3xeySVjqi
4CSVme5V7A0AP66UfBy6ctJH82l6EBBnNkrh6dFU/Q3IALU7CFeb+LnLBQWsqTtR
NCxmTz3ifbvXLYz6W7GD9FewV5gPF3SmtSChBowLp2IXgN6s5iMqbxk/iw1y78YL
RRTX1qGhKowff2mkjRXb7CqPUYoJowYIjjd0nJRkfUob/1bIHizDidActH2K+Gfy
VTk6gUxagSKjxGVGYAmxzphEqmgR7SpHHIJ+2RM=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+WDa1eo35Z9tWqa6OoB
LnS7lppHy13FEdpHjjEBAYlEERRj1woiT0GUxnlyhtp/SbKG4v7sjEHjcjkgS6k7
niXhmBOtFN81VqqLi1VyEr4ofoJnIJgixOpL+N3dx/qVl2QS5ZuWyRZLyOOAMwUR
ZYNR0EZgNo8nYdiut7oykFtyeuSZnOKDAZr+RrsfpWzj0C/wt1EGcbx0zUJOPZwO
OFQf0xWZxfrMvopo9VbWpiKVrU/UbR78ZnbVZ6633lAeTQuRxyyF4eEjnkiLGnrX
gGSi+UguamcJfaW5NXRHV1X53cPKsCgSZUvkxIsrpMzGpZ6JDxEOC9NDvlmWQhLW
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286790438406474664895325994451941556401442
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-31 06:52:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-29 06:52:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alumni.cdl.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17155348424763635003908413738553275596062117638075836921856478888238587021038136450429158024649933221644524524404408975583106902315546326395192390590945351149043001636332902312472960335407230534063155177131966864315008987362893806713107731194723225311148160809345534685880371137328468677518691830016390723271669345263296862439223944461632217869719857919953160224513790431279153835956571420954671944555291114501716088464755608797379525140519438813042400537472853351207262924944706537459952662520781792824205515276700964717662712603447223600305762108202369429128624137480784231988737174884223801613331281245363021993561
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							894f8b26ebef21936a874da42fbf251ba313c7a7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aceconnection.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aexrochester.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africanhumanities.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahlefconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aisalumniconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alemanyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allhandsandheartsalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allhandsbeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.cayetano.edu.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.cdl.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.harpercollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.maua.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.puc-campinas.edu.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.trilogyed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.uarts.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.udsm.ac.tz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.unach.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniatbhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnicapilanou.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnijaveriana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniknightnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniuii.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ampleforthglobal.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrewsnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antigosalunos.aaapucrio.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asfmalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asulawalumninetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athenianlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auconnect.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aveconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avonoldfarmsalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aceconnection.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aexrochester.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.africanhumanities.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahlefconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aisalumniconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alemanyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allhandsandheartsalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allhandsbeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.cayetano.edu.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.harpercollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.maua.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.puc-campinas.edu.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.uarts.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.udsm.ac.tz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.unach.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniatbhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnicapilanou.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumnijaveriana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniknightnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniuii.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ampleforthglobal.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andrewsnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antigosalunos.aaapucrio.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asfmalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asulawalumninetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athenianlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auconnect.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aveconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avonoldfarmsalumni.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c4703b87e0000040300473045022063d9a752a72363ff4430192123512cc1c17ac29d891a8f88b6ba22e2a896ea19022100b073e0831cf9833209f7411c1b7720dbe863d0900fd35a8a760a393fe028ff1200750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c4703b8a20000040300463044022034b4c72b381051a2258859c4c1a1cebe4e6f0c7508ddf7ad47e5b7a31f9c2b6b0220605bddb6ee830b081effa69a283a664f53dbd366b594382061b4c557c04cb92c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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