oce.lifeschools.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a8:e3:3c:09:b2:19:26:0b:9e:fc:9b:d6:ad:b7:09:d0:f2 was issued on by Let's Encrypt.

With 70 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=oce.lifeschools.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a8:e3:3c:09:b2:19:26:0b:9e:fc:9b:d6:ad:b7:09:d0:f2
Serial Number (int): 318806341927505172274235092731974023500018
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 20:11:2f:43:ab:c7:32:24:9d:85:dc:8b:a8:f4:61:d1:ba:67:08:53
Fingerprint (sha256): 04:28:a8:d6:49:c0:24:02:9a:f4:dd:d9:f4:44:82:7d:83:16:23:4a:1f:e2:ed:c1:b9:e8:db:ae:d2:78:7f:74

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate oce.lifeschools.net

70

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oce.lifeschools.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.ace.pusd.org
admin.arroyo.pusd.org
admin.believe.kippneworleans.org
admin.belmont.tcsk12.com
admin.burnsville.tcsk12.com
admin.careertech.tcsk12.com
admin.diamondpoint.pusd.org
admin.es.moodyisd.org
admin.fms.gonzalesusd.net
admin.ganesha.pusd.org
admin.his.huntingtonisd.com
admin.hms.huntingtonisd.com
admin.hsd153.org
admin.ies.tcsk12.com
admin.ims.tcsk12.com
admin.jameshart.hsd153.org
admin.kellogg.pusd.org
admin.leadership.kippneworleans.org
admin.lincoln.pusd.org
admin.marshall.pusd.org
admin.philadelphia.pusd.org
admin.roosevelt.pusd.org
admin.seeo.pusd.org
admin.shs.gonzalesusd.net
admin.spanish.pusd.org
admin.tchs.tcsk12.com
admin.tcsk12.com
admin.tms.tcsk12.com
admin.vejar.pusd.org
admin.washington.pusd.org
alcott.pusd.org
barfield.pusd.org
belmont.tcsk12.com
burnsville.tcsk12.com
careertech.tcsk12.com
centralcityprimary.kippneworleans.org
churchill.hsd153.org
dellagoacademy.org
demonfans.durangoschools.org
diamondranch.pusd.org
es.moodyisd.org
garey.pusd.org
hsd153.org
ies.tcsk12.com
ims.tcsk12.com
kingsley.pusd.org
kippneworleans.org
lopez.pusd.org
melrose.pylusd.org
montvue.pusd.org
nbfacademy.org
oce.lifeschools.net
pantera.pusd.org
pomona.pusd.org
renaissance.kippneworleans.org
sacredheartacademy.org
sanantonio.pusd.org
simons.pusd.org
spanish.pusd.org
student.komarek94.org
tchs.tcsk12.com
tms.tcsk12.com
villageacademy.pusd.org
westmont.pusd.org
www.hubbardisd.com
www.melrose.pylusd.org
www.mesacharter.org
www.moodyisd.org
www.popcs.org
www.portlandvillageschool.org

Other certificates including the domain name lifeschools.net

(limited to 100 certificates)
ghck12.com
lightspeed.lifeschools.net
oce.lifeschools.net
admin.adultlearning.sunrisesd.ca
admin.lms.davidson.k12.nc.us
admin.facs.fentoncharter.net
admin.aristoiclassical.org
admin.sunnyside.goldenruledallas.org
acecharterhigh.com
sphstigers.org
enroll.lifeschools.net
enroll.lifeschools.net
acecharterhigh.com
admin.aristoiclassical.org
nel.sau29.org
sgmission.org
admin.uachs.org
acecharterhigh.com
enroll.lifeschools.net
admin.illinois.goldenruledallas.org
hles.comalisd.org
enroll.lifeschools.net
enroll.lifeschools.net
ocs.lifeschools.net
admin.nms.davidson.k12.nc.us
enroll.lifeschools.net
www.wherelifehappens.org
admin.morelandpreschool.moreland.org
thecije.org
enroll.lifeschools.net
mlw.sau29.org
acecharterhigh.com
acecharterhigh.com
lifeschools.net
www.sau29.org
admin.3rcs.org
admin.fges.davidson.k12.nc.us
enroll.lifeschools.net
www.westfieldfriends.org
www.utmcs.org
flacsms.flacsnyc.com
pcoe.k12.ca.us
admin.schillingfarmses.colliervilleschools.org
mas.mpusd.net
msd120.org
admin.cvhs.cvsd.org
admin.ae.gonzalesusd.net
admin.3rcs.org
stvfschool.org
uachs.org
enroll.lifeschools.net
admin.3rcs.org
admin.westfieldfriends.org
*.lifeschools.net
www.ecrhs.pylusd.org
gpa.gonzalesisd.net
*.lifeschools.net
ls3cx.lifeschools.net
admin.adultlearning.sunrisesd.ca
teams.lifeschools.net
admin.aristoiclassical.org
acecharterhigh.com
newmillenniumacademy.org
admin.3rcs.org
admin.amsschools.org
oce.lifeschools.net
admin.ealas.org
admin.aristoiclassical.org
hy.hpisd.org
www.ebcacademy.com
acecharterhigh.com
enroll.lifeschools.net
admin.3rcs.org
ocs.lifeschools.net
enroll.lifeschools.net
admin.3rcs.org
admin.ctc.dover.k12.nh.us
admin.gsdacademy.com
lms.lifeschools.net
teams.lifeschools.net
admin.nichols.bcsd.com
admin.longfellow.bcsd.com
www.jacksoncoschools.com
admin.beatty.bpsd.k12.ca.us
admin.3rcs.org
sgmission.org
rosebudacademy.com
www.thecije.org
*.lifeschools.net
eceap.gsd.wednet.edu
acecharterhigh.com
che.lifeschools.net
enroll.lifeschools.net
hartorah.org
wq.mtpcsd.org
admin.oghs.davidson.k12.nc.us
*.lifeschools.net
acecharterhigh.com
es.glendaleacademy.org
admin.nes.davidson.k12.nc.us

Certificate

The complete raw certificate details for oce.lifeschools.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318806341927505172274235092731974023500018
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-20 00:58:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-18 00:58:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oce.lifeschools.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1584 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ace.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.arroyo.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.believe.kippneworleans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.belmont.tcsk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.burnsville.tcsk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.careertech.tcsk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.diamondpoint.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.es.moodyisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fms.gonzalesusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ganesha.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.his.huntingtonisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hms.huntingtonisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hsd153.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ies.tcsk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ims.tcsk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jameshart.hsd153.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kellogg.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.leadership.kippneworleans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lincoln.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.marshall.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.philadelphia.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.roosevelt.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.seeo.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.shs.gonzalesusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.spanish.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tchs.tcsk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tcsk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tms.tcsk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.vejar.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.washington.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alcott.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barfield.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belmont.tcsk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burnsville.tcsk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careertech.tcsk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralcityprimary.kippneworleans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchill.hsd153.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dellagoacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demonfans.durangoschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondranch.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.moodyisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garey.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsd153.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ies.tcsk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ims.tcsk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingsley.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kippneworleans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lopez.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melrose.pylusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montvue.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbfacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oce.lifeschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pantera.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pomona.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renaissance.kippneworleans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanantonio.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simons.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spanish.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'student.komarek94.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tchs.tcsk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.tcsk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'villageacademy.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westmont.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hubbardisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melrose.pylusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesacharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moodyisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.popcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portlandvillageschool.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f6336000000165550e6d410000040300463044022004c053b2d96ae522b92d720eb28c78e117fea85657023b87403b191b2df534fe02207188a40b070e5cad6bf3d3f793e7d0b30b5b8225b45f9f5364863dfba9e42d1c007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165550e6d7c0000040300473045022100e541c7e9957177617d66a3a146dbf1944ca139382ffd4d72f17bdeaced14ec110220242d7d7532eb73f1cc1c364d8d9f7d932f55128aa445ae623152b8bb926eb55b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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