collegecrusadenetwork.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:72:9e:02:56:34:1b:fd:c7:73:bd:4e:f5:29:ca:e3:e1:44 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=collegecrusadenetwork.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:72:9e:02:56:34:1b:fd:c7:73:bd:4e:f5:29:ca:e3:e1:44
Serial Number (int): 300339077780611211812439349933118375321924
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 47:c6:40:90:ea:21:9b:55:03:a6:e3:41:d6:c2:12:93:24:83:91:77
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f6:9c:7c:01:a4:1a:9f:14:13:df:9a:8f:68:cb:bd:fe:c3:3b:26:71
Fingerprint (sha256): fd:5a:e1:83:85:d0:38:c1:0c:21:af:bd:b7:00:88:fc:63:98:ab:29:c7:16:7c:14:93:b1:df:b6:80:36:81:74

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate collegecrusadenetwork.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for collegecrusadenetwork.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

canisiusconnect.com
cardinalsconnect.com
careerdesignlabs.org
carreirasuvv.com
carrollalumni.com
carrollconnect.com
cbumusicconnect.com
cctigerlink.com
cdl-family.org
cdl.sps.columbia.edu
cecconnect.com
centralalumni.com
centrumconnect.com
chadwickconnect.org
chahtascholars.com
champlainconnect.org
chargerconnect.org
churchillconnect.com
cityuconnect.com
cleoconnection.com
clippersconnect.org
cluconnect.com
codalumniconnect.com
cokescholarsconnect.org
collegecrusadenetwork.com
collegetrackconnect.com
coloradoacademyconnect.org
columbusacademyalumni.org
communikeynetwork.com
connect.cbu.edu
connect.harvardae.org
connect.psichi.org
connect.ruw.edu.bh
connect.woodstockacademy.org
connect2bristol.org
connectbumc.com
connectddd.org
connectgettysburg.com
connectlatinschool.org
connects.emory.edu
connectstc.com
cookeconnect.com
cooperalumnione.com
coppeadconnect.com
corviasconnects.com
cpl-alumni.org
crew-connect.org
crusadersconnect.org
csun.matadormentoring.com
cualumni.network
cuembaalumni.com
www.canisiusconnect.com
www.cardinalsconnect.com
www.careerdesignlabs.org
www.carreirasuvv.com
www.carrollalumni.com
www.carrollconnect.com
www.cbumusicconnect.com
www.cctigerlink.com
www.cdl-family.org
www.cdl.sps.columbia.edu
www.cecconnect.com
www.centralalumni.com
www.centrumconnect.com
www.chadwickconnect.org
www.chahtascholars.com
www.champlainconnect.org
www.chargerconnect.org
www.churchillconnect.com
www.cityuconnect.com
www.cleoconnection.com
www.clippersconnect.org
www.cluconnect.com
www.codalumniconnect.com
www.cokescholarsconnect.org
www.collegecrusadenetwork.com
www.collegetrackconnect.com
www.coloradoacademyconnect.org
www.columbusacademyalumni.org
www.communikeynetwork.com
www.connect.cbu.edu
www.connect.harvardae.org
www.connect.psichi.org
www.connect.ruw.edu.bh
www.connect2bristol.org
www.connectbumc.com
www.connectddd.org
www.connectgettysburg.com
www.connectlatinschool.org
www.connectstc.com
www.cookeconnect.com
www.cooperalumnione.com
www.coppeadconnect.com
www.corviasconnects.com
www.cpl-alumni.org
www.crew-connect.org
www.crusadersconnect.org
www.cualumni.network
www.cuembaalumni.com

Other certificates including the domain name collegecrusadenetwork.com

(limited to 100 certificates)
canterburycommunity.org
cecconnect.com
canisiusconnect.com
cecconnect.com
canterburycommunity.org
cecconnect.com
cecconnect.com
cecconnect.com
collegecrusadenetwork.com
canterburycommunity.org
cecconnect.com
cardinalsconnect.com
canterburycommunity.org
canterburycommunity.org
canterburycommunity.org
cecconnect.com
cecconnect.com
canisiusconnect.com
collegecrusadenetwork.com
canterburycommunity.org
cecconnect.com
cecconnect.com
collegecrusadenetwork.com
canterburycommunity.org
collegecrusadenetwork.com
collegecrusadenetwork.com
cardinalsconnect.com
cecconnect.com
collegecrusadenetwork.com
collegecrusadenetwork.com

Certificate

The complete raw certificate details for collegecrusadenetwork.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmBRDKKSIUGP4rQzpIn7
9xM1f+62ng/i4h1xnd5lvwAVx0TtJtBcs7r8x2d5KC+pNI+iM5PPrcuITgp/0+uv
icbmdi0rLQM5cCO/9w36w+LygrQ29xnid0EHb8w1/YQud6y+UlduLxBIGm/IhNT1
rpGG92QoNzp/eANKwIr3dv1LmchT8CztHLihd9F8ZKc/HtfZf9ANvx7ukP92Hh2u
azf1q4kGE9K+0lKVJW3oYmfNpmymjst4ExBVLQMl7gnfTx7bSb1+VCnTo8raSSuG
AzJ4JeR38CH7/h2rQXFq2GdV3Ip0cNDTI95IsiRvGPJ24WB9Heafevug9TrOIVer
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300339077780611211812439349933118375321924
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-15 07:23:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-13 07:23:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'collegecrusadenetwork.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16963428350622138359898076885379962215406026062653788823490685375574105580927254105979608512203685790877465963389491085434838346112088110516110446455594369925555933914146993518158058417173148850915629648395237137046181335724530751666910345996103046822612359137984612644648176722283333879820785417029953427336234714025687543867461797997533769513892850773175271800914637704134565500660927813457498081834486409876082060241308266497156065352153380666943418485377621082023359346744202842892488450501551687527958399758918829099632763432586998364378976494762624156092541926586980524754981537042282272003623614482951171451661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							47c64090ea219b5503a6e341d6c2129324839177
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2231 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canisiusconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardinalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careerdesignlabs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carreirasuvv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrollalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrollconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbumusicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cctigerlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdl-family.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdl.sps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cecconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centrumconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chadwickconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chahtascholars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'champlainconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chargerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchillconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleoconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clippersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cluconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cokescholarsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegecrusadenetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegetrackconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradoacademyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbusacademyalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communikeynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.cbu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.harvardae.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.psichi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.ruw.edu.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.woodstockacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect2bristol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectbumc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectddd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectgettysburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectlatinschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connects.emory.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectstc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cooperalumnione.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coppeadconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corviasconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpl-alumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crew-connect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crusadersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csun.matadormentoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cualumni.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuembaalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canisiusconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardinalsconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.careerdesignlabs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carreirasuvv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrollalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrollconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbumusicconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cctigerlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdl-family.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdl.sps.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cecconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralalumni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centrumconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chadwickconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chahtascholars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.champlainconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chargerconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.churchillconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityuconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cleoconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clippersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cluconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codalumniconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cokescholarsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegecrusadenetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegetrackconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coloradoacademyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbusacademyalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communikeynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.cbu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.harvardae.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.psichi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.ruw.edu.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect2bristol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectbumc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectddd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectgettysburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectlatinschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectstc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cookeconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cooperalumnione.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coppeadconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corviasconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpl-alumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crew-connect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crusadersconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cualumni.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cuembaalumni.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c946022760000040300483046022100d2b473a7084985e835ec4823414db32b8066a7c615bd1a76e850e9eafea56957022100cf13d319f4c7b0aeaac9ecc7d7b3e2bb37ecea698aedbb556357477ceb85b2bc00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c946022760000040300473045022100d98985ae6cf3ffb04d11435fe14b0217867ac3c8d463d6d84dfe74253d02fe2502202b7ec363ff16759cc10ebf8331dbb76e12ecfb826c9a3d33ff6a83dd867c8e03
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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