www.pullmanschools.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c9:66:13:47:06:6f:cd:ea:f6:68:85:2a:1b:58:cf:7c:6b was issued on by Let's Encrypt.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.pullmanschools.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c9:66:13:47:06:6f:cd:ea:f6:68:85:2a:1b:58:cf:7c:6b
Serial Number (int): 329869294896160797286587688934265936903275
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b7:5e:b3:cb:e7:77:73:ac:c4:ce:9a:84:bd:82:b2:1c:c1:af:0b:cc
Fingerprint (sha256): 08:d9:55:e4:48:69:88:17:b3:53:12:55:a3:0c:91:a2:8d:4c:8e:50:a7:ca:3d:56:a2:39:7a:ef:cb:e2:18:c0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.pullmanschools.org

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pullmanschools.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

activities.madrid.k12.ia.us
admin.activities.madrid.k12.ia.us
admin.ar.cypsd.org
admin.be.ysd.k12.sd.us
admin.cypsd.org
admin.es.cornellsd.org
admin.estrellitahigh.com
admin.fayettevilleisd.net
admin.galileogalilei.edu.mx
admin.galtadultschool.com
admin.gatewayk12.org
admin.hpiam.marquezhs.net
admin.hs.cornellsd.org
admin.ideapcs.org
admin.jrsr.madrid.k12.ia.us
admin.ki.cypsd.org
admin.li.ysd.k12.sd.us
admin.libra.marquezhs.net
admin.lphs.lincolnparkpublicschools.com
admin.lpms.lincolnparkpublicschools.com
admin.lu.cypsd.org
admin.mo.cypsd.org
admin.palihigh.org
admin.pickettk12.net
admin.ranchitoavees.org
admin.rcschools.net
admin.st.ysd.k12.sd.us
admin.union.kyschools.us
admin.ve.cypsd.org
admin.we.ysd.k12.sd.us
admin.wearelibertyranch.com
admin.yhs.ysd.k12.sd.us
admin.yms.ysd.k12.sd.us
admin.youngsvilleacademy.org
ar.cypsd.org
be.ysd.k12.sd.us
el.madrid.k12.ia.us
es.cornell.k12.pa.us
es.cornellsd.org
galileogalilei.edu.mx
holytrinityavon.org
hs.cornell.k12.pa.us
hs.cornellsd.org
jes.pullmanschools.org
jrsr.madrid.k12.ia.us
ki.cypsd.org
la.cypsd.org
li.ysd.k12.sd.us
libra.marquezhs.net
lphs.lincolnparkpublicschools.com
lpms.lincolnparkpublicschools.com
lu.cypsd.org
mo.cypsd.org
parish.stmarysspokane.com
parish.stmarysspokane.org
phs.pullmanschools.org
ranchitoavees.org
school.stmarysspokane.com
school.stmarysspokane.org
ses.pullmanschools.org
spectrum.canoncityschools.org
ssjmhs.marquezhs.net
st.ysd.k12.sd.us
ve.cypsd.org
we.ysd.k12.sd.us
www.admin.colegiocipres.edu.mx
www.admin.grupograven.com.mx
www.athlosreno.org
www.colegiocipres.edu.mx
www.cypsd.org
www.fayettevilleisd.net
www.galileogalilei.edu.mx
www.galtadultschool.com
www.galthigh.com
www.gatewayk12.org
www.grupograven.com.mx
www.hancockhs.org
www.holytrinityavon.org
www.ideapcs.org
www.olsorrows.com
www.palihigh.org
www.pickettk12.net
www.pullmanschools.org
www.ranchitoavees.org
www.rcschools.net
www.union.kyschools.us
www.wearelibertyranch.com
www.youngsvilleacademy.org
yhs.ysd.k12.sd.us
yms.ysd.k12.sd.us
youngsvilleacademy.org

Other certificates including the domain name pullmanschools.org

(limited to 100 certificates)
activities.madrid.k12.ia.us
activities.madrid.k12.ia.us
10.bellevilleschools.org
admin.aes.fentressboe.com
www.leavittms.net
admin.bbcms.bbrook.org
lpms.lincolnparkpublicschools.com
www.pullmanschools.org
activities.madrid.k12.ia.us
activities.madrid.k12.ia.us
jes.pullmanschools.org
fes.pullmanschools.org
admin.eagleridgeacademy.net
activities.madrid.k12.ia.us
admin.hs.wvsd208.org
ses.pullmanschools.org
admin.mtsd-vt.org
admin.aes.uinta1.com
10.bellevilleschools.org
admin.saspasadena.com
admin.aes.uinta1.com
admin.cornellsd.org
admin.aes.uinta1.com
anacondaschools.org
www.btaallday.org
admin.aes.uinta1.com
kes.pullmanschools.org
admin.union.kyschools.us
ps.bsd29j.com
activities.madrid.k12.ia.us
lms.pullmanschools.org
admin.aes.uinta1.com
activities.madrid.k12.ia.us
admin.kpe.mpsdnow.org
kes.pullmanschools.org
gulfelementary.org
admin.eue.mpsdnow.org
owensintermediate.bcsd.com
www.holynamesf.com
www.olsorrows.com
admin.aes.uinta1.com
www.cornell.k12.pa.us
10.bellevilleschools.org
activities.madrid.k12.ia.us
admin.kes.pullmanschools.org
phs.pullmanschools.org
admin.adultlearning.sunrisesd.ca
admin.adultlearning.sunrisesd.ca
admin.el.madrid.k12.ia.us
activities.madrid.k12.ia.us
10.bellevilleschools.org
admin.adultlearning.sunrisesd.ca
jh.iasd.cc
www.mpsdnow.org
admin.ar.cypsd.org
www.campacharter.org
bellevilleschools.org
gledhillelementary.org
admin.adultlearning.sunrisesd.ca
www.hancockhs.org
jtwilliamssecondarymontessori.wearecms.com
admin.aes.uinta1.com
activities.madrid.k12.ia.us
admin.btaallday.org
activities.madrid.k12.ia.us
admin.fdes.mobridge-pollock.k12.sd.us
www.ms-ap.org
preschool.shelbycs.org
leusd.k12.ca.us
www.grandville.k12.mi.us
lincolnparkpublicschools.com
admin.mphs.mpsdnow.org
sachs.org
admin.aes.lammersvilleschooldistrict.net
mms.mpsdnow.org
activities.madrid.k12.ia.us
cte.mpsdnow.org
admin.mms.mpsdnow.org
admin.ike.iasd.cc
kes.pullmanschools.org
admin.aes.uinta1.com
cses.comalisd.org
3.bellevilleschools.org
www.lemondenorman.org
bayheadschool.org
activities.madrid.k12.ia.us
admin.butlerhighschool.wearecms.com
cranburyschool.org
admin.hillcity.k12.sd.us
activities.madrid.k12.ia.us
ms.mobridge-pollock.k12.sd.us
admin.kauffmanschool.org
activities.madrid.k12.ia.us
hles.comalisd.org
admin.cypsd.org
lms.pullmanschools.org
admin.leavittms.net
admin.ces.shelbycs.org
www.sainte-school.org
colonies.sunrisesd.ca

Certificate

The complete raw certificate details for www.pullmanschools.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329869294896160797286587688934265936903275
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-06 20:48:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-06 20:48:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pullmanschools.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activities.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.activities.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ar.cypsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.be.ysd.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cypsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.es.cornellsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.estrellitahigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fayettevilleisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.galileogalilei.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.galtadultschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hpiam.marquezhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hs.cornellsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ideapcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jrsr.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ki.cypsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.li.ysd.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.libra.marquezhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lphs.lincolnparkpublicschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lpms.lincolnparkpublicschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lu.cypsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mo.cypsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.palihigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pickettk12.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ranchitoavees.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rcschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.st.ysd.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.union.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ve.cypsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.we.ysd.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wearelibertyranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.yhs.ysd.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.yms.ysd.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.youngsvilleacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.cypsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be.ysd.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'el.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.cornell.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.cornellsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galileogalilei.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holytrinityavon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.cornell.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.cornellsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jes.pullmanschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jrsr.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ki.cypsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'la.cypsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'li.ysd.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libra.marquezhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lphs.lincolnparkpublicschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpms.lincolnparkpublicschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lu.cypsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mo.cypsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parish.stmarysspokane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parish.stmarysspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phs.pullmanschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranchitoavees.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.stmarysspokane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.stmarysspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ses.pullmanschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spectrum.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssjmhs.marquezhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st.ysd.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 've.cypsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'we.ysd.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.admin.colegiocipres.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.admin.grupograven.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athlosreno.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegiocipres.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cypsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fayettevilleisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.galileogalilei.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.galtadultschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.galthigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grupograven.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hancockhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holytrinityavon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ideapcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olsorrows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.palihigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pickettk12.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pullmanschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ranchitoavees.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rcschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.union.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wearelibertyranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youngsvilleacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yhs.ysd.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yms.ysd.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youngsvilleacademy.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000167857e367c0000040300473045022100fc00ed3ddaecd6803674d514d1ef957f2f0971522e22b95d1ca37ec2ae22b6e20220251aa711f020146d7acb671ebb930357e18153c568cd409236fe1271f0755bd2007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000167857e3887000004030046304402207f49c6fe24a5e3826a2cca7daa48b6ec7e8f2a6ff54c0b2894379bfb45df53ab02207540285c13cb29531641300dfbce4391d6e24bd4bcec8fc04cd6bb9395fafd76
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00989d0f405405b6a65ca41a3186a8b3a1d0db316c202fd62df7e3be3b3bc55afb04c6200d0bdabd3e6341c9fe8435e502cfc1fcd658526092b128b2ef42d782933651e5504e950ded4fec3931acb2522a76da04a1f6ff0ea3dc571b0bf421deec127c0f121477acb3fb916c7071ccb52fb720714b9c034ea9c3dbd12938e062a0718513fd1639f5577a661b5b5d2efe8bfc7c7c0b57860f401b0b5001191f95afa2d5e7e910fbc22fdebbbfecd1f77bcb61e57fb83a9c9104904d9b110fa35a71ce21a4d5616bf7256150b1938456889566e1a403deb0defb0181bbbad2c2d191a33e0471d9cf1f3d6c5d2467d33ee6aab36d61dac95332fd688f5ac4cc2b921d