custom3-rst7.rschooltoday.com

Issued by R3

About this certificate

This digital certificate with serial number 04:76:56:25:7c:c0:54:4f:2f:06:96:48:6a:7e:3f:8f:83:7d was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=custom3-rst7.rschooltoday.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:76:56:25:7c:c0:54:4f:2f:06:96:48:6a:7e:3f:8f:83:7d
Serial Number (int): 388716971276589684352449146833234929091453
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 65:71:39:96:47:0a:08:2d:9e:4e:1d:d5:77:7e:42:91:71:0d:ab:85
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ea:b1:7c:72:09:2a:a0:a2:3b:64:dc:e8:19:97:f4:32:0c:61:a5:9a
Fingerprint (sha256): 07:2a:49:17:ef:b4:5a:bd:74:ca:d7:d9:18:a7:0e:3d:4f:ae:07:3f:85:b3:8e:75:6b:8c:ed:be:31:22:61:34

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate custom3-rst7.rschooltoday.com

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for custom3-rst7.rschooltoday.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adnapirates.com
ahsbobcats.com
ahsflyeaglesfly.com
bcgrizzlysports.org
big8conference.org
caakodiaks.com
cal1970.com
cascadebruins.com
cedarcrestredwolves.com
chesmontleague.com
coastal1bleague.org
couleeconference.com
cps.k12.mn.us
cruiserathletics.com
custom3-rst7.rschooltoday.com
everettseagulls.com
ewhsathletics.com
fillmorecentral.k12.mn.us
gadaonline.net
gboa.org
getlearning.org
giacsports.com
gobantamsgsl.org
gobearsgsl.org
gocheneyblackhawksgsl.org
goevknightsgsl.org
goferrissaxonsgsl.org
greenvillecountyathleticzone.com
guilfordcountyathleticzone.com
highlandhikersports.com
isd110comed.org
jp2sports.com
klaaconferencesports.org
laporte.k12.mn.us
leschiathletics.com
metroleague-bainbridge.org
mywiaa.wiaa.com
northeasternconference.com
rst7live.com
sac-mi.org
sec7.org
section7.org
ulenhitterdal.k12.mn.us
vermilionathleticboosters.org
wiaa.com
www.adnapirates.com
www.ahsbobcats.com
www.ahsflyeaglesfly.com
www.bcgrizzlysports.org
www.big8conference.org
www.caakodiaks.com
www.cal1970.com
www.cascadebruins.com
www.cedarcrestredwolves.com
www.chesmontleague.com
www.coastal1bleague.org
www.couleeconference.com
www.cps.k12.mn.us
www.cruiserathletics.com
www.everettseagulls.com
www.ewhsathletics.com
www.fillmorecentral.k12.mn.us
www.gadaonline.net
www.gboa.org
www.getlearning.org
www.giacsports.com
www.gobantamsgsl.org
www.gobearsgsl.org
www.gocheneyblackhawksgsl.org
www.goevknightsgsl.org
www.goferrissaxonsgsl.org
www.greenvillecountyathleticzone.com
www.guilfordcountyathleticzone.com
www.highlandhikersports.com
www.isd110comed.org
www.jp2sports.com
www.klaaconferencesports.org
www.laporte.k12.mn.us
www.leschiathletics.com
www.metroleague-bainbridge.org
www.mywiaa.wiaa.com
www.northeasternconference.com
www.rst7live.com
www.sac-mi.org
www.sec7.org
www.section7.org
www.ulenhitterdal.k12.mn.us
www.vermilionathleticboosters.org
www.wiaa.com

Other certificates including the domain name rschooltoday.com

(limited to 100 certificates)
sslttsgroup5.rschooltoday.com
sslttsgroup2.rschooltoday.com
custom4-rst7.rschooltoday.com
ppm.portal.rschooltoday.com
ssldo1group1.rschooltoday.com
sslttsgroup2.rschooltoday.com
vavschool1.drupal-stg2.rschooltoday.com
ssldo1group7.rschooltoday.com
www.fsview.rschooltoday.com
egf.portal.rschooltoday.com
1.as1sslgroup7.rschooltoday.com
custom1-rst7.rschooltoday.com
1.as1sslgroup3.rschooltoday.com
as1sslgroup2.rschooltoday.com
as2sslgroup1.rschooltoday.com
ssldo2group1.rschooltoday.com
as3sslgroup2.rschooltoday.com
sslttsgroup4.rschooltoday.com
custom1-rst7.rschooltoday.com
1.ssldo1group9.rschooltoday.com
as3sslgroup3.rschooltoday.com
as2sslgroup4.rschooltoday.com
beta.api.rschooltoday.com
ssldo1group1.rschooltoday.com
as1sslgroup4.rschooltoday.com
ssldo2group1.rschooltoday.com
ssldo1group6.rschooltoday.com
custom3-rst7.rschooltoday.com
*.fee.rschooltoday.com
ssldo1group1.rschooltoday.com
egf.portal.rschooltoday.com
ssldo1group1.rschooltoday.com
officials.rschooltoday.com
vavschool1.drupal-stg2.rschooltoday.com
as2test.rschooltoday.com
as2sslgroup4.rschooltoday.com
stpatrickelementaryschool.new.rschooltoday.com
as2sslgroup6.rschooltoday.com
sslttsgroup5.rschooltoday.com
tryssl.rschooltoday.com
ppm.portal.rschooltoday.com
ssldo1group1.rschooltoday.com
greececsd.portal.rschooltoday.com
as2sslgroup1.rschooltoday.com
as1sslgroup4.rschooltoday.com
ssldo2group3.rschooltoday.com
stpatrickelementaryschool.new.rschooltoday.com
as1sslgroup2.rschooltoday.com
abbotsford.new.rschooltoday.com
as3sslgroup4.rschooltoday.com
as2sslgroup3.rschooltoday.com
as3sslgroup1.rschooltoday.com
as1sslgroup5.rschooltoday.com
www.intranet.rschooltoday.com
as2sslgroup5.rschooltoday.com
as1sslgroup1.rschooltoday.com
sslttsgroup3.rschooltoday.com
custom3-rst7.rschooltoday.com
academyresourcemanagement.portal.rschooltoday.com
greececsd.portal.rschooltoday.com
1aevergreen.com
egf.portal.rschooltoday.com
learnssl.rschooltoday.com
custom3-rst7.rschooltoday.com
greececsd.portal.rschooltoday.com
sslttsgroup3.rschooltoday.com
stpatrickelementaryschool.new.rschooltoday.com
mndotlsc.mnscu.portal.rschooltoday.com
as2sslgroup2.rschooltoday.com
abbotsford.new.rschooltoday.com
as1sslgroup4.rschooltoday.com
ssldo1group8.rschooltoday.com
ssldo2group1.rschooltoday.com
as3sslgroup4.rschooltoday.com
mndotlsc.mnscu.portal.rschooltoday.com
as1sslgroup4.rschooltoday.com
egf.portal.rschooltoday.com
as2sslgroup3.rschooltoday.com
sslttsgroup5.rschooltoday.com
sslttsgroup3.rschooltoday.com
ssldo1group7.rschooltoday.com
*.cr3.rschooltoday.com
beta.api.rschooltoday.com
sslttsgroup5.rschooltoday.com
*.rschooltoday.com
as2sslgroup1.rschooltoday.com
as1sslgroup1.rschooltoday.com
www.info.rschooltoday.com
custom3-rst7.rschooltoday.com
as3sslgroup3.rschooltoday.com
ssldo1group7.rschooltoday.com
ssldo2group4.rschooltoday.com
as1sslgroup2.rschooltoday.com
1aevergreen.com
beta.api.rschooltoday.com
1.as1sslgroup9.rschooltoday.com
sslttsgroup3.rschooltoday.com
sslttsgroup6.rschooltoday.com
sslttsgroup4.rschooltoday.com
ssldo2group5.rschooltoday.com

Certificate

The complete raw certificate details for custom3-rst7.rschooltoday.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILyjCCCrKgAwIBAgISBHZWJXzAVE8vBpZIan4/j4N9MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMDEwMTA0MzhaFw0yNDAxMzAwMTA0MzdaMCgxJjAkBgNVBAMT
HWN1c3RvbTMtcnN0Ny5yc2Nob29sdG9kYXkuY29tMFkwEwYHKoZIzj0CAQYIKoZI
zj0DAQcDQgAEyMGQpOs68ZOm2B/MUwdVrXPEOPhN4dXGuVbRcEJrO+byhbLou7VH
7ChU1gkuW3RTjsxd/sAbgEobUglzog/GVqOCCa0wggmpMA4GA1UdDwEB/wQEAwIH
gDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd
BgNVHQ4EFgQUZXE5lkcKCC2eTh3Vd35CkXENq4UwHwYDVR0jBBgwFoAUFC6zF7dY
VsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRw
Oi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNy
Lm9yZy8wgge0BgNVHREEggerMIIHp4IPYWRuYXBpcmF0ZXMuY29tgg5haHNib2Jj
YXRzLmNvbYITYWhzZmx5ZWFnbGVzZmx5LmNvbYITYmNncml6emx5c3BvcnRzLm9y
Z4ISYmlnOGNvbmZlcmVuY2Uub3Jngg5jYWFrb2RpYWtzLmNvbYILY2FsMTk3MC5j
b22CEWNhc2NhZGVicnVpbnMuY29tghdjZWRhcmNyZXN0cmVkd29sdmVzLmNvbYIS
Y2hlc21vbnRsZWFndWUuY29tghNjb2FzdGFsMWJsZWFndWUub3JnghRjb3VsZWVj
b25mZXJlbmNlLmNvbYINY3BzLmsxMi5tbi51c4IUY3J1aXNlcmF0aGxldGljcy5j
b22CHWN1c3RvbTMtcnN0Ny5yc2Nob29sdG9kYXkuY29tghNldmVyZXR0c2VhZ3Vs
bHMuY29tghFld2hzYXRobGV0aWNzLmNvbYIZZmlsbG1vcmVjZW50cmFsLmsxMi5t
bi51c4IOZ2FkYW9ubGluZS5uZXSCCGdib2Eub3Jngg9nZXRsZWFybmluZy5vcmeC
DmdpYWNzcG9ydHMuY29tghBnb2JhbnRhbXNnc2wub3Jngg5nb2JlYXJzZ3NsLm9y
Z4IZZ29jaGVuZXlibGFja2hhd2tzZ3NsLm9yZ4ISZ29ldmtuaWdodHNnc2wub3Jn
ghVnb2ZlcnJpc3NheG9uc2dzbC5vcmeCIGdyZWVudmlsbGVjb3VudHlhdGhsZXRp
Y3pvbmUuY29tgh5ndWlsZm9yZGNvdW50eWF0aGxldGljem9uZS5jb22CF2hpZ2hs
YW5kaGlrZXJzcG9ydHMuY29tgg9pc2QxMTBjb21lZC5vcmeCDWpwMnNwb3J0cy5j
b22CGGtsYWFjb25mZXJlbmNlc3BvcnRzLm9yZ4IRbGFwb3J0ZS5rMTIubW4udXOC
E2xlc2NoaWF0aGxldGljcy5jb22CGm1ldHJvbGVhZ3VlLWJhaW5icmlkZ2Uub3Jn
gg9teXdpYWEud2lhYS5jb22CGm5vcnRoZWFzdGVybmNvbmZlcmVuY2UuY29tggxy
c3Q3bGl2ZS5jb22CCnNhYy1taS5vcmeCCHNlYzcub3JnggxzZWN0aW9uNy5vcmeC
F3VsZW5oaXR0ZXJkYWwuazEyLm1uLnVzgh12ZXJtaWxpb25hdGhsZXRpY2Jvb3N0
ZXJzLm9yZ4IId2lhYS5jb22CE3d3dy5hZG5hcGlyYXRlcy5jb22CEnd3dy5haHNi
b2JjYXRzLmNvbYIXd3d3LmFoc2ZseWVhZ2xlc2ZseS5jb22CF3d3dy5iY2dyaXp6
bHlzcG9ydHMub3JnghZ3d3cuYmlnOGNvbmZlcmVuY2Uub3JnghJ3d3cuY2Fha29k
aWFrcy5jb22CD3d3dy5jYWwxOTcwLmNvbYIVd3d3LmNhc2NhZGVicnVpbnMuY29t
ght3d3cuY2VkYXJjcmVzdHJlZHdvbHZlcy5jb22CFnd3dy5jaGVzbW9udGxlYWd1
ZS5jb22CF3d3dy5jb2FzdGFsMWJsZWFndWUub3Jnghh3d3cuY291bGVlY29uZmVy
ZW5jZS5jb22CEXd3dy5jcHMuazEyLm1uLnVzghh3d3cuY3J1aXNlcmF0aGxldGlj
cy5jb22CF3d3dy5ldmVyZXR0c2VhZ3VsbHMuY29tghV3d3cuZXdoc2F0aGxldGlj
cy5jb22CHXd3dy5maWxsbW9yZWNlbnRyYWwuazEyLm1uLnVzghJ3d3cuZ2FkYW9u
bGluZS5uZXSCDHd3dy5nYm9hLm9yZ4ITd3d3LmdldGxlYXJuaW5nLm9yZ4ISd3d3
LmdpYWNzcG9ydHMuY29tghR3d3cuZ29iYW50YW1zZ3NsLm9yZ4ISd3d3LmdvYmVh
cnNnc2wub3Jngh13d3cuZ29jaGVuZXlibGFja2hhd2tzZ3NsLm9yZ4IWd3d3Lmdv
ZXZrbmlnaHRzZ3NsLm9yZ4IZd3d3LmdvZmVycmlzc2F4b25zZ3NsLm9yZ4Ikd3d3
LmdyZWVudmlsbGVjb3VudHlhdGhsZXRpY3pvbmUuY29tgiJ3d3cuZ3VpbGZvcmRj
b3VudHlhdGhsZXRpY3pvbmUuY29tght3d3cuaGlnaGxhbmRoaWtlcnNwb3J0cy5j
b22CE3d3dy5pc2QxMTBjb21lZC5vcmeCEXd3dy5qcDJzcG9ydHMuY29tghx3d3cu
a2xhYWNvbmZlcmVuY2VzcG9ydHMub3JnghV3d3cubGFwb3J0ZS5rMTIubW4udXOC
F3d3dy5sZXNjaGlhdGhsZXRpY3MuY29tgh53d3cubWV0cm9sZWFndWUtYmFpbmJy
aWRnZS5vcmeCE3d3dy5teXdpYWEud2lhYS5jb22CHnd3dy5ub3J0aGVhc3Rlcm5j
b25mZXJlbmNlLmNvbYIQd3d3LnJzdDdsaXZlLmNvbYIOd3d3LnNhYy1taS5vcmeC
DHd3dy5zZWM3Lm9yZ4IQd3d3LnNlY3Rpb243Lm9yZ4Ibd3d3LnVsZW5oaXR0ZXJk
YWwuazEyLm1uLnVzgiF3d3cudmVybWlsaW9uYXRobGV0aWNib29zdGVycy5vcmeC
DHd3dy53aWFhLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkC
BAIEgfUEgfIA8AB2ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAAB
i4igJMsAAAQDAEcwRQIhAIMVi66sixu4enHlq2SDJPVMUPpVQCYPOfMglfweHm5f
AiBTqptrgFUmYbeevIy3oyRRULZw40SJXGOssHr00WZB3QB2AO7N0GTV2xrOxVy3
nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABi4igJMMAAAQDAEcwRQIhAP+FFPdfVpRl
7nGwWR4IuuhROPB3uiD9lf2YeEXgMOUIAiBsyiV1OQ4lDA1oM+tgbc6zTXxtU3ad
OH+Hyah5Dm0AaTANBgkqhkiG9w0BAQsFAAOCAQEAoR+7Oem8gdTqnsyzDOg4tm40
ZJBptwX5S2MBs1bE7KG9Hf3F8CCPw/3W3ELHvob/9AXMxpuAMRzZcJsxLDmESkFx
L8nNCvMrWe0zYyyz0rIE36o1TkplbkC3uyjPaUlvRAeIwVAeGNZYhFDJ7lhDGrBN
fEVl2gTER4IKd02A7qOtW+7q2KXwEJzeaJShIKccK3QR8ygbsapjmRmPLDliR635
IYTRnb4EfMubcxTp9FXxZ9/sCwWeRglFCcho6GdtdypQuXErN9yhQhi/WYyDyg+N
l6k5CfDcS4NabGjNKDip2yAA9YNhpybus8brNgMw+S9xmmYhTCUH/V1FEtxNFQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEyMGQpOs68ZOm2B/MUwdVrXPEOPhN
4dXGuVbRcEJrO+byhbLou7VH7ChU1gkuW3RTjsxd/sAbgEobUglzog/GVg==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 388716971276589684352449146833234929091453
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-01 01:04:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-30 01:04:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'custom3-rst7.rschooltoday.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004c8c190a4eb3af193a6d81fcc530755ad73c438f84de1d5c6b956d170426b3be6f285b2e8bbb547ec2854d6092e5b74538ecc5dfec01b804a1b520973a20fc656
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							65713996470a082d9e4e1dd5777e4291710dab85
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1963 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adnapirates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahsbobcats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahsflyeaglesfly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcgrizzlysports.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'big8conference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caakodiaks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cal1970.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cascadebruins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cedarcrestredwolves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chesmontleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coastal1bleague.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'couleeconference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cps.k12.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cruiserathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'custom3-rst7.rschooltoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everettseagulls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ewhsathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fillmorecentral.k12.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gadaonline.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gboa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getlearning.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giacsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gobantamsgsl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gobearsgsl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gocheneyblackhawksgsl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goevknightsgsl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goferrissaxonsgsl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenvillecountyathleticzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guilfordcountyathleticzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highlandhikersports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isd110comed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jp2sports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klaaconferencesports.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laporte.k12.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leschiathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metroleague-bainbridge.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywiaa.wiaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northeasternconference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rst7live.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac-mi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec7.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'section7.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulenhitterdal.k12.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vermilionathleticboosters.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adnapirates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahsbobcats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahsflyeaglesfly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcgrizzlysports.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.big8conference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caakodiaks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cal1970.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cascadebruins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cedarcrestredwolves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chesmontleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coastal1bleague.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.couleeconference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cps.k12.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cruiserathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.everettseagulls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ewhsathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fillmorecentral.k12.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gadaonline.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gboa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getlearning.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giacsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gobantamsgsl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gobearsgsl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gocheneyblackhawksgsl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goevknightsgsl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goferrissaxonsgsl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenvillecountyathleticzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guilfordcountyathleticzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highlandhikersports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isd110comed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jp2sports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klaaconferencesports.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laporte.k12.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leschiathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metroleague-bainbridge.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mywiaa.wiaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northeasternconference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rst7live.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sac-mi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sec7.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.section7.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ulenhitterdal.k12.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vermilionathleticboosters.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wiaa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b88a024cb000004030047304502210083158baeac8b1bb87a71e5ab648324f54c50fa5540260f39f32095fc1e1e6e5f022053aa9b6b80552661b79ebc8cb7a3245150b670e344895c63acb07af4d16641dd007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b88a024c30000040300473045022100ff8514f75f569465ee71b0591e08bae85138f077ba20fd95fd987845e030e50802206cca2575390e250c0d6833eb606dceb34d7c6d53769d387f87c9a8790e6d0069
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a11fbb39e9bc81d4ea9eccb30ce838b66e34649069b705f94b6301b356c4eca1bd1dfdc5f0208fc3fdd6dc42c7be86fff405ccc69b80311cd9709b312c39844a41712fc9cd0af32b59ed33632cb3d2b204dfaa354e4a656e40b7bb28cf69496f440788c1501e18d6588450c9ee58431ab04d7c4565da04c447820a774d80eea3ad5beeead8a5f0109cde6894a120a71c2b7411f3281bb1aa6399198f2c396247adf92184d19dbe047ccb9b7314e9f455f167dfec0b059e46094509c868e8676d772a50b9712b37dca14218bf598c83ca0f8d97a93909f0dc4b835a6c68cd2838a9db2000f58361a726eeb3c6eb360330f92f719a66214c2507fd5d4512dc4d15