www.cranburyschool.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c3:c9:44:a5:4c:83:67:b0:7a:11:54:5d:f3:0a:a5:2c:67 was issued on by Let's Encrypt.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.cranburyschool.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c3:c9:44:a5:4c:83:67:b0:7a:11:54:5d:f3:0a:a5:2c:67
Serial Number (int): 327959450600862481616606130857218515741799
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 57:e0:f8:5b:90:cf:47:98:4b:7b:94:6f:56:80:d9:fd:fa:24:75:8f
Fingerprint (sha256): 06:8a:dd:e7:9c:a1:b6:d5:74:40:c5:8e:74:c6:5c:34:2d:d3:ee:c5:ab:88:89:53:fd:1c:07:55:24:70:25:a6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.cranburyschool.org

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cranburyschool.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.arcataschooldistrict.org
admin.bbel.bbrook.org
admin.bbrook.org
admin.bereanchristian.com
admin.bes.lammersvilleschooldistrict.net
admin.bonnerprendie.com
admin.cheathamcountyschools.net
admin.cheathamhighccs.net
admin.colegioangloamericanohgo.edu.mx
admin.cranburyschool.org
admin.eastcheathamccs.net
admin.el.madrid.k12.ia.us
admin.fentressboe.com
admin.gageparkhs.org
admin.glenknoll.org
admin.harpethmiddleccs.net
admin.ike.iasd.cc
admin.kanoelani.org
admin.kraemerms.org
admin.nes.mcduffie.k12.ga.us
admin.pegramccs.net
admin.qes.lammersvilleschooldistrict.net
admin.sainte-school.org
admin.sh.iasd.cc
admin.sttheresaschoolpalmsprings.org
admin.thames.hattiesburgpsd.com
admin.westcheathamccs.net
admin.wjh.wintersisd.org
admin.wuhsd.org
aes.lammersvilleschooldistrict.net
afsenyc.org
bbhs.bbrook.org
bereanchristian.com
bereanchristian.org
bronxdalehs.org
central.bpusd.net
deanza.bpusd.net
debusk.greenek12.org
elwin.bpusd.net
forest.riverviewschools.com
foster.bpusd.net
geddes.bpusd.net
glenknoll.org
grandcenterartsacademy.org
healthystartacademy.com
heath.bpusd.net
hes.lammersvilleschooldistrict.net
holland.bpusd.net
ike.iasd.cc
incarnatewordhs.org
jones.bpusd.net
kenmore.bpusd.net
lacountycharterselpa.org
lammersvilleschooldistrict.net
leelcms.leeschooldistrictsc.org
lisanorthhigh.org
mhhs.lammersvilleschooldistrict.net
mhs.molineschools.org
msdurham.org
phs.parlierunified.org
pleasantview.bpusd.net
portbarrehigh.slp.k12.la.us
santafe.bpusd.net
sh.iasd.cc
sierravistajr.bpusd.net
silverspur.pvpusd.net
southbayadult.org
sre.dcs.edu
sttheresaschoolpalmsprings.org
thames.hattiesburgpsd.com
tracy.bpusd.net
twenty-eight-st.org
vineland.bpusd.net
wolcs.org
www.annaleeelementaryandsteammagnet.org
www.ashlandcityccs.net
www.bereanchristian.com
www.ccprep-academy.org
www.cheathammiddleccs.net
www.colegioangloamericanohgo.edu.mx
www.cranburyschool.org
www.estrellitahigh.com
www.friendshaverford.org
www.gageparkhs.org
www.healthystartacademy.com
www.kingstonspringsccs.net
www.kraemerms.org
www.lisanorthhigh.org
www.mbapchs.org
www.msdurham.org
www.pleasantviewccs.net
www.saltlakespa.org
www.sttheresaschoolpalmsprings.org
www.sycamoremiddleccs.net
www.woodsboro.pylusd.org

Other certificates including the domain name cranburyschool.org

(limited to 100 certificates)
cranburyschool.org
admin.adultlearning.sunrisesd.ca
admin.aes.fentressboe.com
www.cranburyschool.org
admin.bbcms.bbrook.org
admin.bonnerprendie.com
admin.adultlearning.sunrisesd.ca
glenknoll.org
admin.cranburyschool.org
admin.saspasadena.com
admin.estrellitahigh.com
admin.aes.lammersvilleschooldistrict.net
ashlandcityccs.net
cranburyschool.org
cranmail.cranburyschool.org
admin.aes.lammersvilleschooldistrict.net
cranburyschool.org
www.holynamesf.com
exp-edge.cranburyschool.org
gageparkhs.org
cranburyschool.org
www.cranburyschool.org
*.cranburyschool.org
www.cranburyschool.org
cranburyschool.org
nphs.bpusd.net
cranburyschool.org
admin.adultlearning.sunrisesd.ca
admin.aes.lammersvilleschooldistrict.net
*.cranburyschool.org
www.cranburyschool.org
admin.foundation.shelbycs.org
www.cranburyschool.org
admin.aes.lammersvilleschooldistrict.net
admin.adultlearning.sunrisesd.ca
admin.ike.iasd.cc
admin.denver.lincolncharter.org
cranburyschool.org
powerschool.cranburyschool.org
cranburyschool.org
admin.ces.shelbycs.org
colonies.sunrisesd.ca
cranburyschool.org
cranburyschool.org
cranburyschool.org
admin.anola.sunrisesd.ca
www.lincolncharter.org
admin.adultlearning.sunrisesd.ca
cranburyschool.org
www.cranburyschool.org
admin.lincolnton.lincolncharter.org
lincolnton.lincolncharter.org
www.cranburyschool.org
admin.afsenyc.org
admin.bpusd.net
powerschool.cranburyschool.org
cranburyschool.org
admin.bereanchristian.com
admin.afsenyc.org
ace.pusd.org
www.cranburyschool.org

Certificate

The complete raw certificate details for www.cranburyschool.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQbTHb+2z7
rfYVCl+ph5m8FJJOEgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5pV3R4RBg
n18RTHnTD9fS27JxyeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGrmQF3Z/h2
e6StagubO+pVwFzG8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK7wAhJO8e
l2z375LDd2VIwrdWQP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlWZ1AdjOKf
RiY0ckFuu/DYkuvkNKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5Tu7zbek/
MR/JMR9nceWyZ2Mund+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzwWzBvTD8F
7q6ckUbIgpeo7stn7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuaivjW/P+Tm
64XjXNjP9F1W8+5tlcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ4Iudx/o3
Q4E2w6Aud9PYyV05pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/h0omUmCI
DiQVG30eHhb3OIP3bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUnohkUi6ik
D4me6o58sq/IQVmyem1M/E0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327959450600862481616606130857218515741799
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-01 14:30:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-30 14:30:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cranburyschool.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2299 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.arcataschooldistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bbel.bbrook.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bbrook.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bereanchristian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bes.lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bonnerprendie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cheathamcountyschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cheathamhighccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.colegioangloamericanohgo.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cranburyschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eastcheathamccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.el.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fentressboe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gageparkhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.glenknoll.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.harpethmiddleccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ike.iasd.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kanoelani.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kraemerms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nes.mcduffie.k12.ga.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pegramccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.qes.lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sainte-school.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sh.iasd.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sttheresaschoolpalmsprings.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.thames.hattiesburgpsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.westcheathamccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wjh.wintersisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wuhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aes.lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afsenyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbhs.bbrook.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bereanchristian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bereanchristian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bronxdalehs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'central.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deanza.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'debusk.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elwin.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forest.riverviewschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foster.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geddes.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenknoll.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandcenterartsacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthystartacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heath.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hes.lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holland.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ike.iasd.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incarnatewordhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jones.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kenmore.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacountycharterselpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leelcms.leeschooldistrictsc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lisanorthhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhhs.lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhs.molineschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msdurham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phs.parlierunified.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pleasantview.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portbarrehigh.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santafe.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sh.iasd.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sierravistajr.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silverspur.pvpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southbayadult.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sre.dcs.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sttheresaschoolpalmsprings.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thames.hattiesburgpsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracy.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twenty-eight-st.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vineland.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wolcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.annaleeelementaryandsteammagnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashlandcityccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bereanchristian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccprep-academy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheathammiddleccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegioangloamericanohgo.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cranburyschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.estrellitahigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.friendshaverford.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gageparkhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthystartacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingstonspringsccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kraemerms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lisanorthhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbapchs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdurham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pleasantviewccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saltlakespa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sttheresaschoolpalmsprings.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sycamoremiddleccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woodsboro.pylusd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf640000016630401e63000004030047304502200579b05a20435b0177536b677e56058044b72adda3d07917c98756d6e2f68fc102210096ceba437bf9afcbe5d6aafe01b24b274b305ddc261aa068a5d766dcec2d6ff9007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166304020600000040300483046022100c775252f1e01e4ce192a302c077ddfb73e9b418559b6289d26bdad3d1c6bcc9e022100cb1fe5d4e672e1798232cafa7121fa4a7326c76b1730394827899601e5a709ce
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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