www.bhef.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ba:1c:c8:0f:6c:99:5d:54:86:a0:80:44:9b:ed:60:0b:18 was issued on by Let's Encrypt.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.bhef.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ba:1c:c8:0f:6c:99:5d:54:86:a0:80:44:9b:ed:60:0b:18
Serial Number (int): 324667635198669228396108096548407080913688
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ec:98:7c:43:25:c0:c8:3e:d7:4b:dc:92:b1:ac:2a:d4:67:32:b4:18
Fingerprint (sha256): 06:cb:cc:bb:3f:fa:f2:5f:84:14:fd:7b:51:2d:9a:01:40:79:d3:2f:d9:5c:61:f2:00:80:a1:f3:e0:69:50:a9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.bhef.org

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bhef.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.amschool.edu.sv
admin.arete.prsd.us
admin.argentine.lindenschools.org
admin.benlippen.com
admin.bentworth.org
admin.bhswca.com
admin.boguechitto.lcsd.k12.ms.us
admin.cces.crispschools.org
admin.cchs.crispschools.org
admin.cclc.crispschools.org
admin.ccms.crispschools.org
admin.ccpk.crispschools.org
admin.ccps.crispschools.org
admin.central.lindenschools.org
admin.crispschools.org
admin.eagles.lucernevalleyunified.org
admin.ecalattc.org
admin.enterprise.lcsd.k12.ms.us
admin.equitylab.org
admin.es.notredameacademy.org
admin.goodwatermontessori.org
admin.highschool.lindenschools.org
admin.hs.notredameacademy.org
admin.hyatt.lindenschools.org
admin.lcsd.k12.ms.us
admin.linden.lindenschools.org
admin.loydstar.lcsd.k12.ms.us
admin.lucernevalleyunified.org
admin.lvmhs.lucernevalleyunified.org
admin.middleschool.lindenschools.org
admin.ndhsb.org
admin.notredameacademy.org
admin.royjohnson.cv.k12.ca.us
admin.sandymilleracademy.com
admin.sfxcatholicschool.org
admin.socialjusticemclc.org
admin.tomasmoro.edu.mx
admin.westlincoln.lcsd.k12.ms.us
argentine.lindenschools.org
bhef.org
bhswca.com
boguechitto.lcsd.k12.ms.us
cces.crispschools.org
cchs.crispschools.org
cclc.crispschools.org
ccms.crispschools.org
ccpk.crispschools.org
ccps.crispschools.org
central.lindenschools.org
cristoreystviator.com
cristoreystviator.net
ecalattc.org
enterprise.lcsd.k12.ms.us
equitylab.org
es.notredameacademy.org
goodwatermontessori.org
highschool.lindenschools.org
hs.notredameacademy.org
hyatt.lindenschools.org
lcsd.k12.ms.us
linden.lindenschools.org
loydstar.lcsd.k12.ms.us
lucernevalleyunified.org
lvmhs.lucernevalleyunified.org
middleschool.lindenschools.org
notredameacademy.org
ps16.jcboe.org
royjohnson.cv.k12.ca.us
sandymilleracademy.com
sfxcatholicschool.com
sfxcatholicschool.org
westlincoln.lcsd.k12.ms.us
www.amschool.edu.sv
www.bentworth.org
www.bhef.org
www.bhswca.com
www.crispschools.org
www.cristoreystviator.com
www.cristoreystviator.net
www.ecalattc.org
www.equitylab.org
www.gfusd.k12.ca.us
www.goodwatermontessori.org
www.lcsd.k12.ms.us
www.lucernevalleyunified.org
www.ndhsb.org
www.notredameacademy.org
www.sandymilleracademy.com
www.sfxcatholicschool.com
www.sfxcatholicschool.org
www.tomasmoro.edu.mx

Other certificates including the domain name bhef.org

(limited to 100 certificates)
admin.burroughsms.org
www.bhef.org
admin.amschool.edu.sv
admin.burroughsms.org
bvms.bhusd.org
admin.burroughsms.org
www.bhef.org
www.sylmarhs.org
admin.johnmarshallhs.org
admin.burroughsms.org
admin.burroughsms.org
admin.foothill.mpusd.net
admin.burroughsms.org
wpadmin.nhes.lowndes.k12.ms.us
bhef.org
admin.delreywoods.mpusd.net
admin.delreywoods.mpusd.net
admin.ahs.ausd.net
admin.burroughsms.org
admin.bvms.bhusd.org
admin.burroughsms.org
admin.burroughsms.org
admin.mhs.bhusd.org
beverlyvista.info
king.mpusd.net
sce.ealas.org
www.svdons.com
admin.ahs.ausd.net
admin.ho.ausd.net
admin.burroughsms.org
admin.burroughsms.org
lw.ausd.net
bhef.org
bv.bhusd.org
marshallmiddle.org
collegeachieve.org
admin.bes.bentworth.org
admin.ahs.ausd.net
bhef.org
bhef.org
admin.lindenschools.org
beverlyvistaschool.info
elrodeoeagles.info
eagles.lucernevalleyunified.org

Certificate

The complete raw certificate details for www.bhef.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324667635198669228396108096548407080913688
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-04 10:43:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-02 10:43:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bhef.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2318 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.amschool.edu.sv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.arete.prsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.argentine.lindenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.benlippen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bentworth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bhswca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.boguechitto.lcsd.k12.ms.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cces.crispschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cchs.crispschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cclc.crispschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ccms.crispschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ccpk.crispschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ccps.crispschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.central.lindenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.crispschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eagles.lucernevalleyunified.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ecalattc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.enterprise.lcsd.k12.ms.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.equitylab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.es.notredameacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.goodwatermontessori.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.highschool.lindenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hs.notredameacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hyatt.lindenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lcsd.k12.ms.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.linden.lindenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.loydstar.lcsd.k12.ms.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lucernevalleyunified.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lvmhs.lucernevalleyunified.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.middleschool.lindenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ndhsb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.notredameacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.royjohnson.cv.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sandymilleracademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sfxcatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.socialjusticemclc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tomasmoro.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.westlincoln.lcsd.k12.ms.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'argentine.lindenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhef.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhswca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boguechitto.lcsd.k12.ms.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cces.crispschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cchs.crispschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cclc.crispschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccms.crispschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccpk.crispschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccps.crispschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'central.lindenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cristoreystviator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cristoreystviator.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecalattc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterprise.lcsd.k12.ms.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equitylab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.notredameacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodwatermontessori.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highschool.lindenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.notredameacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyatt.lindenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lcsd.k12.ms.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linden.lindenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loydstar.lcsd.k12.ms.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucernevalleyunified.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lvmhs.lucernevalleyunified.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'middleschool.lindenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notredameacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps16.jcboe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royjohnson.cv.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandymilleracademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfxcatholicschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfxcatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westlincoln.lcsd.k12.ms.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amschool.edu.sv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bentworth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhef.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhswca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crispschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cristoreystviator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cristoreystviator.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecalattc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equitylab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodwatermontessori.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lcsd.k12.ms.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lucernevalleyunified.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ndhsb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notredameacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandymilleracademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfxcatholicschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfxcatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tomasmoro.edu.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e363a92e30000040300473045022100cc286bf2a8355c09bc9e328f0d746a33dce212aabf3f8b6395ea86c2e1c9bd3502201b7f615305fc1b0bcee8b79e1a4e8e5dc0428f0dce86646a3496f5c2b26d0e6b00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e363a930e000004030047304502205cdc2f6550b30826a11e1f5bdbc7a1c9eb72707d11f4cf732f47f6b51d610097022100f37b3022453895411fd4e0ead3aeffa42b141e06a97e6b5ea8836ce0f407d43d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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