ms.bsd29j.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:98:f0:0e:db:45:27:bc:e7:6d:57:fe:6c:74:e6:cb:fc:74 was issued on by Let's Encrypt.

With 76 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ms.bsd29j.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:98:f0:0e:db:45:27:bc:e7:6d:57:fe:6c:74:e6:cb:fc:74
Serial Number (int): 313378869425734530382909227376507435613300
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d6:89:fb:ff:36:5b:61:1a:0d:9b:a2:db:9b:d4:96:d4:ab:a9:12:52
Fingerprint (sha256): 03:33:45:20:4f:b7:45:cd:4a:20:63:f9:f4:8c:ca:dc:1c:f9:0f:35:ab:d2:6a:05:93:66:84:33:cd:6a:fd:3a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ms.bsd29j.com

76

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ms.bsd29j.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.afsenyc.org
admin.alc.ucboe.us
admin.annaleeelementaryandsteammagnet.org
admin.ashlandcityccs.net
admin.balloustay.com
admin.bbcms.bbrook.org
admin.bereanchristian.org
admin.bronxbetterlearning.net
admin.ccprep-academy.org
admin.cheathammiddleccs.net
admin.cjh.coloma.org
admin.grandcenterartsacademy.org
admin.harpethhighccs.net
admin.houstonelem.net
admin.kingstonspringsccs.net
admin.les.lammersvilleschooldistrict.net
admin.livingstonchristianschools.org
admin.mhs.molineschools.org
admin.ourladyofgrace.co
admin.pleasantviewccs.net
admin.sre.dcs.edu
admin.sycamorehighccs.net
admin.sycamoremiddleccs.net
admin.tjs.org
admin.wes.lammersvilleschooldistrict.net
admin.wes.wintersisd.org
admin.whs.wintersisd.org
arcataschooldistrict.org
bbcms.bbrook.org
bbrook.org
brookhavenelementary.com
ccprep-academy.org
cm.dekalbcentral.net
elportal.ljsd.org
flacsms.flacsnyc.com
healthystartacademy.org
hpiam.marquezhs.net
hs.bsd29j.com
jordan.ljsd.org
les.lammersvilleschooldistrict.net
lisawesthigh.org
livingstonchristianschools.org
lunadabay.pvpusd.net
macy.ljsd.org
meadowgreen.ljsd.org
mfp.fuesd.org
ms.bsd29j.com
olita.ljsd.org
ourladyofgrace.co
phacs.org
ranchostarbuck.ljsd.org
sainte-school.org
summer.materdeicatholic.org
tjs.org
virtualacademy.riverviewschools.com
wes.lammersvilleschooldistrict.net
www.afsenyc.org
www.bronxdalehs.org
www.brookhavenelementary.com
www.cheathamcountyschools.net
www.cheathamhighccs.net
www.eastcheathamccs.net
www.grandcenterartsacademy.org
www.harpethhighccs.net
www.harpethmiddleccs.net
www.lammersvilleschooldistrict.net
www.lisawesthigh.org
www.livingstonchristianschools.org
www.ljsd.org
www.ourladyofgrace.co
www.pegramccs.net
www.sachs.org
www.sycamorehighccs.net
www.tjs.org
www.twenty-eight-st.org
www.westcheathamccs.net

Other certificates including the domain name bsd29j.com

(limited to 100 certificates)
ms.bsd29j.com
elem.bsd29j.com
www.phacs.org
admin.hs.wvsd208.org
bsd29j.com
is.bsd29j.com
bsd29j.com
admin.wjh.wintersisd.org
ps.bsd29j.com
ms.bsd29j.com
bsd29j.com
admin.hpiam.marquezhs.net
hhs.hattiesburgpsd.com
woodsboro.pylusd.org
www.holynamesf.com
bsd29j.com
admin.westcheathamccs.net
ps.bsd29j.com
admin.arcataschooldistrict.org
ljef.ljsd.org
admin.riverviewschools.com
bsd29j.com
jh.iasd.cc
bsd29j.com
balloustay.com
admin.arcataschooldistrict.org
admin.jh.iasd.cc
bsd29j.com
bsd29j.com
is.bsd29j.com
admin.elportal.ljsd.org
admin.arcataschooldistrict.org
admin.elportal.ljsd.org
admin.arcataschooldistrict.org
bsd29j.com
admin.wintersisd.org
admin.arcataschooldistrict.org
admin.aes.lammersvilleschooldistrict.net
admin.ike.iasd.cc
colegioangloamericanohgo.edu.mx
www.wintersisd.org
admin.arcataschooldistrict.org
cranburyschool.org
bsd29j.com
hs.bsd29j.com
admin.aes.lammersvilleschooldistrict.net
mail.bsd29j.com
www.lacountycharterselpa.org
admin.marquezhs.net
www.sainte-school.org
colonies.sunrisesd.ca
ri.jcboe.org
ps17.jcboe.org
www.bsd29j.com
mail.bsd29j.com
bsd29j.com
bsd29j.com
admin.afsenyc.org

Certificate

The complete raw certificate details for ms.bsd29j.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQbTHb+2z7
rfYVCl+ph5m8FJJOEgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5pV3R4RBg
n18RTHnTD9fS27JxyeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGrmQF3Z/h2
e6StagubO+pVwFzG8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK7wAhJO8e
l2z375LDd2VIwrdWQP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlWZ1AdjOKf
RiY0ckFuu/DYkuvkNKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5Tu7zbek/
MR/JMR9nceWyZ2Mund+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzwWzBvTD8F
7q6ckUbIgpeo7stn7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuaivjW/P+Tm
64XjXNjP9F1W8+5tlcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ4Iudx/o3
Q4E2w6Aud9PYyV05pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/h0omUmCI
DiQVG30eHhb3OIP3bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUnohkUi6ik
D4me6o58sq/IQVmyem1M/E0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313378869425734530382909227376507435613300
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-20 00:58:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-19 00:58:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ms.bsd29j.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1854 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.afsenyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.alc.ucboe.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.annaleeelementaryandsteammagnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ashlandcityccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.balloustay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bbcms.bbrook.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bereanchristian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bronxbetterlearning.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ccprep-academy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cheathammiddleccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cjh.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.grandcenterartsacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.harpethhighccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.houstonelem.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kingstonspringsccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.les.lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.livingstonchristianschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mhs.molineschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ourladyofgrace.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pleasantviewccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sre.dcs.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sycamorehighccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sycamoremiddleccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tjs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wes.lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wes.wintersisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.whs.wintersisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcataschooldistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbcms.bbrook.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbrook.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brookhavenelementary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccprep-academy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cm.dekalbcentral.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elportal.ljsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flacsms.flacsnyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthystartacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpiam.marquezhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.bsd29j.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jordan.ljsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'les.lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lisawesthigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingstonchristianschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lunadabay.pvpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macy.ljsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meadowgreen.ljsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfp.fuesd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.bsd29j.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olita.ljsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourladyofgrace.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phacs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranchostarbuck.ljsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sainte-school.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summer.materdeicatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tjs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualacademy.riverviewschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wes.lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afsenyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bronxdalehs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brookhavenelementary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheathamcountyschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheathamhighccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastcheathamccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandcenterartsacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harpethhighccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harpethmiddleccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lisawesthigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingstonchristianschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ljsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourladyofgrace.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pegramccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sachs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sycamorehighccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tjs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twenty-eight-st.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westcheathamccs.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000165f4b3a4a200000403004730450220786bbcebf1782d01e4c33af514af3313eae4573c4630ab4368302dbc6e251505022100ce00539f0f7c4a0fc0a33c7073b09ba6d482cde082505d25d6bf2227eff92756007500a4501269055a15545e6211ab37bc103f62ae5576a45e4b1714453e1b22106a2500000165f4b3a48800000403004630440220071c5b4481d4e6b43d03d78d4c23e5860a91213022c9b6ce8fb165a415f6895902206ebeea7214dddd8c493e8b43fd88b5b6fadba677899011b900b05721f38d6754
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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