ssldo1group1.rschooltoday.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:25:11:4c:71:29:56:d2:ac:2c:a1:30:58:b5:b0:75:f6:4f was issued on by Let's Encrypt.

With 65 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ssldo1group1.rschooltoday.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:25:11:4c:71:29:56:d2:ac:2c:a1:30:58:b5:b0:75:f6:4f
Serial Number (int): 273950299157032565578816349189529471940175
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 71:c8:67:e3:83:8f:79:c8:68:fe:72:41:d1:38:37:37:be:7c:59:60
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1b:48:2f:bd:5a:f8:b4:77:e4:2d:36:46:cc:5b:df:0c:a7:da:c4:1c
Fingerprint (sha256): 01:4f:34:10:03:9b:3c:ac:57:ee:cd:82:63:d3:4c:e9:03:18:19:5e:38:94:2b:6d:06:6e:3e:c3:27:c1:cb:08

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ssldo1group1.rschooltoday.com

65

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssldo1group1.rschooltoday.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bethelhill.net
byronps.new.rschooltoday.com
cherryschool.net
cpschools.portal.rschooltoday.com
duranths.portal.rschooltoday.com
eastcentral.k12.mn.us
finishtheride.com
ge.portal.rschooltoday.com
gk12.net
globalacademy.us
hallsville.portal.rschooltoday.com
isd2142.net
isd2154.k12.mn.us
kimball.k12.mn.us
lesterprairiemn.us
loganview.org
lsi.portal.rschooltoday.com
mncda.org
mtwhs.portal.rschooltoday.com
northeastrangeschool.net
northlandsped.org
northwoodsschool.net
ohshalloffame.com
pwms.portal.rschooltoday.com
southridgeschool.net
ssldo1group1.rschooltoday.com
streetsare4everyone.com
streetsare4everyone.org
streetsareforeveryone.com
tcu2905.us
towersoudanschool.net
vhsfacilities.portal.rschooltoday.com
westcentralconference.com
www.bethelhill.net
www.byronps.new.rschooltoday.com
www.cherryschool.net
www.cpschools.portal.rschooltoday.com
www.duranths.portal.rschooltoday.com
www.eastcentral.k12.mn.us
www.finishtheride.com
www.ge.portal.rschooltoday.com
www.gk12.net
www.globalacademy.us
www.hallsville.portal.rschooltoday.com
www.isd2142.net
www.isd2154.k12.mn.us
www.isd77.k12.mn.us
www.lesterprairiemn.us
www.loganview.org
www.lsi.portal.rschooltoday.com
www.mncda.org
www.mtwhs.portal.rschooltoday.com
www.northeastrangeschool.net
www.northlandsped.org
www.northwoodsschool.net
www.ohshalloffame.com
www.pwms.portal.rschooltoday.com
www.southridgeschool.net
www.streetsare4everyone.com
www.streetsare4everyone.org
www.streetsareforeveryone.com
www.tcu2905.us
www.towersoudanschool.net
www.vhsfacilities.portal.rschooltoday.com
www.westcentralconference.com

Other certificates including the domain name rschooltoday.com

(limited to 100 certificates)
sslttsgroup5.rschooltoday.com
sslttsgroup2.rschooltoday.com
custom4-rst7.rschooltoday.com
ppm.portal.rschooltoday.com
ssldo1group1.rschooltoday.com
sslttsgroup2.rschooltoday.com
vavschool1.drupal-stg2.rschooltoday.com
ssldo1group7.rschooltoday.com
www.fsview.rschooltoday.com
egf.portal.rschooltoday.com
1.as1sslgroup7.rschooltoday.com
custom1-rst7.rschooltoday.com
1.as1sslgroup3.rschooltoday.com
as1sslgroup2.rschooltoday.com
as2sslgroup1.rschooltoday.com
ssldo2group1.rschooltoday.com
as3sslgroup2.rschooltoday.com
sslttsgroup4.rschooltoday.com
custom1-rst7.rschooltoday.com
1.ssldo1group9.rschooltoday.com
as3sslgroup3.rschooltoday.com
as2sslgroup4.rschooltoday.com
beta.api.rschooltoday.com
ssldo1group1.rschooltoday.com
as1sslgroup4.rschooltoday.com
ssldo2group1.rschooltoday.com
ssldo1group6.rschooltoday.com
custom3-rst7.rschooltoday.com
*.fee.rschooltoday.com
ssldo1group1.rschooltoday.com
egf.portal.rschooltoday.com
ssldo1group1.rschooltoday.com
officials.rschooltoday.com
vavschool1.drupal-stg2.rschooltoday.com
as2test.rschooltoday.com
as2sslgroup4.rschooltoday.com
stpatrickelementaryschool.new.rschooltoday.com
as2sslgroup6.rschooltoday.com
sslttsgroup5.rschooltoday.com
tryssl.rschooltoday.com
ppm.portal.rschooltoday.com
ssldo1group1.rschooltoday.com
greececsd.portal.rschooltoday.com
as2sslgroup1.rschooltoday.com
as1sslgroup4.rschooltoday.com
ssldo2group3.rschooltoday.com
stpatrickelementaryschool.new.rschooltoday.com
as1sslgroup2.rschooltoday.com
abbotsford.new.rschooltoday.com
as3sslgroup4.rschooltoday.com
as2sslgroup3.rschooltoday.com
as3sslgroup1.rschooltoday.com
as1sslgroup5.rschooltoday.com
www.intranet.rschooltoday.com
as2sslgroup5.rschooltoday.com
as1sslgroup1.rschooltoday.com
sslttsgroup3.rschooltoday.com
custom3-rst7.rschooltoday.com
academyresourcemanagement.portal.rschooltoday.com
greececsd.portal.rschooltoday.com
1aevergreen.com
egf.portal.rschooltoday.com
learnssl.rschooltoday.com
custom3-rst7.rschooltoday.com
greececsd.portal.rschooltoday.com
sslttsgroup3.rschooltoday.com
stpatrickelementaryschool.new.rschooltoday.com
mndotlsc.mnscu.portal.rschooltoday.com
as2sslgroup2.rschooltoday.com
abbotsford.new.rschooltoday.com
as1sslgroup4.rschooltoday.com
ssldo1group8.rschooltoday.com
ssldo2group1.rschooltoday.com
as3sslgroup4.rschooltoday.com
mndotlsc.mnscu.portal.rschooltoday.com
as1sslgroup4.rschooltoday.com
egf.portal.rschooltoday.com
as2sslgroup3.rschooltoday.com
sslttsgroup5.rschooltoday.com
sslttsgroup3.rschooltoday.com
ssldo1group7.rschooltoday.com
*.cr3.rschooltoday.com
beta.api.rschooltoday.com
sslttsgroup5.rschooltoday.com
*.rschooltoday.com
as2sslgroup1.rschooltoday.com
as1sslgroup1.rschooltoday.com
www.info.rschooltoday.com
custom3-rst7.rschooltoday.com
as3sslgroup3.rschooltoday.com
ssldo1group7.rschooltoday.com
ssldo2group4.rschooltoday.com
as1sslgroup2.rschooltoday.com
1aevergreen.com
beta.api.rschooltoday.com
1.as1sslgroup9.rschooltoday.com
sslttsgroup3.rschooltoday.com
sslttsgroup6.rschooltoday.com
sslttsgroup4.rschooltoday.com
ssldo2group5.rschooltoday.com

Certificate

The complete raw certificate details for ssldo1group1.rschooltoday.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhScWIULRt227gbTc5a7
k1lvbF4PJMmTJ5lVtXe40PjFAc04NWRenX4oEld/ZAfn7cFG4OJ3TriaNxsV5QJQ
BWLBcHpCFnjuFgYPiRClptUVvQc3mcGUkNhl4I7mxN3TXHCvVwaPbRSqco5Magaf
jdOmELLsWd96n8/rgmW6zF362gykFV9aZrv/XyiooMXHOw170WIOhCIurQdN+XKv
APU2bxFuK4Ky1WLkreclUQC7oP0gA9h+fM4ADt/9Vwnf6vBSOPNlfihTLaOz85U/
CWcxWrTSwvtgQftDh2COuBZIBOKdxiAFyDsY8pG8s6D3wCILXAnFAI6Ur1AW8Mi6
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273950299157032565578816349189529471940175
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-16 16:23:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-14 16:23:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssldo1group1.rschooltoday.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25005347910923856420030791058275907181675467873414249082512935317368249856509991790942637028629457201969092323012988506253421359464292433973539612179454733999892291853452600669500041736879452889570636126138109527785530629513821341042131454609224395146748894545251404435256486323367503862838534972434669220883756277372774454388038426286965397927950502040764436965195785712207789762474057806326548222782579938808825174681404884421436459219783403829602012893234794145782945274196072802301441442307186860121852172735500747672158680749553371140479175385689956468157145910270869876149350742323353059016264880961468062284377
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							71c867e3838f79c868fe7241d1383737be7c5960
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1641 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bethelhill.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byronps.new.rschooltoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cherryschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpschools.portal.rschooltoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duranths.portal.rschooltoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastcentral.k12.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finishtheride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ge.portal.rschooltoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gk12.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalacademy.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hallsville.portal.rschooltoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isd2142.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isd2154.k12.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kimball.k12.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesterprairiemn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loganview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsi.portal.rschooltoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mncda.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtwhs.portal.rschooltoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northeastrangeschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northlandsped.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northwoodsschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohshalloffame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pwms.portal.rschooltoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southridgeschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssldo1group1.rschooltoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streetsare4everyone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streetsare4everyone.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streetsareforeveryone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcu2905.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'towersoudanschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vhsfacilities.portal.rschooltoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westcentralconference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bethelhill.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.byronps.new.rschooltoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cherryschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpschools.portal.rschooltoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duranths.portal.rschooltoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastcentral.k12.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.finishtheride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge.portal.rschooltoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gk12.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globalacademy.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hallsville.portal.rschooltoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isd2142.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isd2154.k12.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isd77.k12.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lesterprairiemn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loganview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lsi.portal.rschooltoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mncda.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtwhs.portal.rschooltoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northeastrangeschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northlandsped.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northwoodsschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ohshalloffame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pwms.portal.rschooltoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southridgeschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.streetsare4everyone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.streetsare4everyone.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.streetsareforeveryone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tcu2905.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.towersoudanschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vhsfacilities.portal.rschooltoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westcentralconference.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001671d8c97900000040300463044022040c1be394d1c43b3f8672a35fdd647a9694b4e971477e8f84281342ad5c5abe60220727e7783afe7072fc3cb4f92a3b23dafaa3aa8cac1d77a689c212d85ff204ed8007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001671d8c97a80000040300473045022100c9b17e8a0c2bd98f2cada51bb4ea7a2648e238d9dcb6df9419f071125c6e8ac902207bb96d22a590811665018c5ac97cad8faff98a3d0d6d22aa5f034b69a7715658
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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