cespk2.cliftonisd.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3b:de:d3:ec:8c:5d:fc:ba:4b:bc:2f:e8:84:a7:ba:6f:67 was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cespk2.cliftonisd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3b:de:d3:ec:8c:5d:fc:ba:4b:bc:2f:e8:84:a7:ba:6f:67
Serial Number (int): 281709706431087208305393452672712609263463
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0b:f3:d4:27:5f:24:11:95:09:fe:af:82:eb:fa:d9:2e:e5:ca:40:fa
Fingerprint (sha256): 0d:3d:42:f1:5c:15:71:a7:61:c3:ae:90:51:99:2d:f9:52:d2:a2:f3:0f:c5:4c:a6:1d:16:7a:56:75:47:f1:c7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cespk2.cliftonisd.org

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cespk2.cliftonisd.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.apr298.com
admin.charterschoolofeducationalexcellence.org
admin.courreges.fvsd.us
admin.cox.fvsd.us
admin.ctkschool.com
admin.executiveprep.org
admin.fulton.fvsd.us
admin.gisler.fvsd.us
admin.hnhsoakland.org
admin.iwcs.k12.va.us
admin.kipapaelementary.org
admin.learningatlovejoy.com
admin.lockwoodavenue.org
admin.masuda.fvsd.us
admin.mhs.molineschools.org
admin.molineschools.org
admin.newland.fvsd.us
admin.oka.fvsd.us
admin.plavan.fvsd.us
admin.saintemydiuscatholicschool.org
admin.saturnelementary.org
admin.talbert.fvsd.us
admin.tamura.fvsd.us
admin.vicksburgcatholic.org
apr298.com
ces.cliftonisd.org
cespk2.cliftonisd.org
charterschoolofeducationalexcellence.org
courreges.fvsd.us
cox.fvsd.us
ctkschool.com
elementary.otsegoknights.org
executiveprep.org
fulton.fvsd.us
gisler.fvsd.us
greenfieldschool.org
highschool.otsegoknights.org
hnhsoakland.org
juniorhigh.otsegoknights.org
kipapaelementary.org
learningatlovejoy.com
learningatlovejoy.net
learningatlovejoy.org
lockwoodavenue.org
masuda.fvsd.us
newland.fvsd.us
oka.fvsd.us
plavan.fvsd.us
saintemydiuscatholicschool.org
saturnelementary.org
talbert.fvsd.us
www.apr298.com
www.charterschoolofeducationalexcellence.org
www.courreges.fvsd.us
www.cox.fvsd.us
www.cristoreybatonrouge.org
www.ctkschool.com
www.executiveprep.org
www.fulton.fvsd.us
www.ghsa-k12-ca.us
www.gisler.fvsd.us
www.goethecharterschool.org
www.greenfieldschool.org
www.hnhsoakland.org
www.iwcs.k12.va.us
www.kipapaelementary.org
www.knovalearning.org
www.learningatlovejoy.com
www.learningatlovejoy.net
www.learningatlovejoy.org
www.lockwoodavenue.org
www.masuda.fvsd.us
www.mmbethune.org
www.molineschools.org
www.newland.fvsd.us
www.oka.fvsd.us
www.otsegoknights.org
www.plavan.fvsd.us
www.saintemydiuscatholicschool.org
www.saturnelementary.org
www.sgusd.k12.ca.us
www.sgusd.net
www.spsangelway.org
www.talbert.fvsd.us
www.tamura.fvsd.us
www.uinta1.k12.wy.us
www.vicksburgcatholic.org

Other certificates including the domain name cliftonisd.org

(limited to 100 certificates)
admin.apr298.com
admin.mms.mtps.org
cliftonisd.org
lp.parkerusd.org
cespk2.cliftonisd.org
cliftonisd.org
admin.va.davidson.k12.nc.us
www.ellwood.k12.pa.us
dz.aceroschools.org
admin.ah.wvsd208.org
www.rebsamen.mx
admin.breed.exteraschools.org
admin.bbe.parlierunified.org
admin.afantis.org
cliftonisd.org
admin.afantis.org
www.grandville.k12.mi.us
admin.ahes.mtps.org
ces.cliftonisd.org
admin.altavista.rbusd.org
ces35.cliftonisd.org
admin.es.elkhartisd.org
admin.es.elkhartisd.org
www.jcoms.org
admin.breed.exteraschools.org
admin.apr298.com
admin.breed.exteraschools.org
admin.apr298.com
admin.apr298.com
triviumcharter.org
admin.mlc.wvsd208.org
admin.breed.exteraschools.org
*.cliftonisd.org
admin.ahes.mtps.org
admin.breed.exteraschools.org
admin.tamura.fvsd.us
admin.apr298.com
www.monroe.k12.tn.us
admin.ahes.mtps.org
cliftonisd.org
admin.ces.cliftonisd.org
admin.harlanfalcons.org
admin.apr298.com
admin.ces.cliftonisd.org
admin.apr298.com
www.mlc.wvsd208.org
admin.holyfamilyhs.com
admin.cvilleschools.com
cliftonisd.org
admin.apr298.com
cliftonisd.org
admin.ahes.mtps.org
admin.ces.cliftonisd.org
admin.breed.exteraschools.org
adamsmiddle.org
cis.gobearsgo.net
admin.breed.exteraschools.org
bes.bayfield.k12.co.us
admin.ebcs.ebps.net
hirschhs.org
admin.breed.exteraschools.org
admin.cliftonisd.org
ah.wvsd208.org
admin.ahes.mtps.org
admin.apr298.com
admin.sme.davidson.k12.nc.us
fless.sd91.bc.ca
www.hs.wvsd208.org
admin.apr298.com
admin.ahes.mtps.org
admin.mhs.molineschools.org
admin.caes.iwcs.k12.va.us
highschool.otsegoknights.org
admin.es.elkhartisd.org
admin.mes150.org
cespk2.cliftonisd.org
admin.apr298.com

Certificate

The complete raw certificate details for cespk2.cliftonisd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOLDCCDRSgAwIBAgISAzve0+yMXfy6S7wv6ISnum9nMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MjQwNjAzMjVaFw0x
OTA3MjMwNjAzMjVaMCAxHjAcBgNVBAMTFWNlc3BrMi5jbGlmdG9uaXNkLm9yZzCC
AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK2shenuZt6MUG0x2/ts+632
FQpfqYeZvBSSThIBLbBZ4fODBV4SJe7hDrakpTCrEdtnc3DQLStRuaVd0eEQYJ9f
EUx50w/X0tuyccnsn5V33VF+1cOGhq8jH/DBPmRoaGkD9F2Ad1wxq5kBd2f4dnuk
rWoLmzvqVcBcxvFQwHZ2obFK2x66Unn4ms4soYXj5C980IPzpmkJCu8AISTvHpds
9++Sw3dlSMK3VkD9iY1fPdmHfrSGTpwJNo8g5b9zGFylxopQcq0JVmdQHYzin0Ym
NHJBbrvw2JLr5DSptn981Gr8N7JQro2Vh5CB2TaWjbcX7K6SLVCKuU7u823pPzEf
yTEfZ3HlsmdjLp3fkm4Hy3/esD4VQWq67KdRzUfiJKMra+TzDUQc8Fswb0w/Be6u
nJFGyIKXqO7LZ+29CDVz2IDU+8xV/1DQnFo/mmifirvDCleBBBLmor41vz/k5uuF
41zYz/RdVvPubZXCYCYRlMhMpQlLQEaoT6I1M0J64dYlEjETSNpYieCLncf6N0OB
NsOgLnfT2MldOaRYDHUi2DURkE8kEUmkm0Nx5n2Yv6UIxclKIYgO/4dKJlJgiA4k
FRt9Hh4W9ziD92yYrF2SuKhK5+WQ5inVIDQtxkvssK0wAWI9DfhFJ6IZFIuopA+J
nuqOfLKvyEFZsnptTPxNAgMBAAGjggo0MIIKMDAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O
BBYEFC9ryE1sLC4y8gAg/y1NbFr8brq7MB8GA1UdIwQYMBaAFKhKamMEfd265tE5
t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29j
c3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2Nl
cnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wggfoBgNVHREEggffMIIH24IQYWRt
aW4uYXByMjk4LmNvbYIuYWRtaW4uY2hhcnRlcnNjaG9vbG9mZWR1Y2F0aW9uYWxl
eGNlbGxlbmNlLm9yZ4IXYWRtaW4uY291cnJlZ2VzLmZ2c2QudXOCEWFkbWluLmNv
eC5mdnNkLnVzghNhZG1pbi5jdGtzY2hvb2wuY29tghdhZG1pbi5leGVjdXRpdmVw
cmVwLm9yZ4IUYWRtaW4uZnVsdG9uLmZ2c2QudXOCFGFkbWluLmdpc2xlci5mdnNk
LnVzghVhZG1pbi5obmhzb2FrbGFuZC5vcmeCFGFkbWluLml3Y3MuazEyLnZhLnVz
ghphZG1pbi5raXBhcGFlbGVtZW50YXJ5Lm9yZ4IbYWRtaW4ubGVhcm5pbmdhdGxv
dmVqb3kuY29tghhhZG1pbi5sb2Nrd29vZGF2ZW51ZS5vcmeCFGFkbWluLm1hc3Vk
YS5mdnNkLnVzghthZG1pbi5taHMubW9saW5lc2Nob29scy5vcmeCF2FkbWluLm1v
bGluZXNjaG9vbHMub3JnghVhZG1pbi5uZXdsYW5kLmZ2c2QudXOCEWFkbWluLm9r
YS5mdnNkLnVzghRhZG1pbi5wbGF2YW4uZnZzZC51c4IkYWRtaW4uc2FpbnRlbXlk
aXVzY2F0aG9saWNzY2hvb2wub3JnghphZG1pbi5zYXR1cm5lbGVtZW50YXJ5Lm9y
Z4IVYWRtaW4udGFsYmVydC5mdnNkLnVzghRhZG1pbi50YW11cmEuZnZzZC51c4Ib
YWRtaW4udmlja3NidXJnY2F0aG9saWMub3JnggphcHIyOTguY29tghJjZXMuY2xp
ZnRvbmlzZC5vcmeCFWNlc3BrMi5jbGlmdG9uaXNkLm9yZ4IoY2hhcnRlcnNjaG9v
bG9mZWR1Y2F0aW9uYWxleGNlbGxlbmNlLm9yZ4IRY291cnJlZ2VzLmZ2c2QudXOC
C2NveC5mdnNkLnVzgg1jdGtzY2hvb2wuY29tghxlbGVtZW50YXJ5Lm90c2Vnb2tu
aWdodHMub3JnghFleGVjdXRpdmVwcmVwLm9yZ4IOZnVsdG9uLmZ2c2QudXOCDmdp
c2xlci5mdnNkLnVzghRncmVlbmZpZWxkc2Nob29sLm9yZ4IcaGlnaHNjaG9vbC5v
dHNlZ29rbmlnaHRzLm9yZ4IPaG5oc29ha2xhbmQub3JnghxqdW5pb3JoaWdoLm90
c2Vnb2tuaWdodHMub3JnghRraXBhcGFlbGVtZW50YXJ5Lm9yZ4IVbGVhcm5pbmdh
dGxvdmVqb3kuY29tghVsZWFybmluZ2F0bG92ZWpveS5uZXSCFWxlYXJuaW5nYXRs
b3Zlam95Lm9yZ4ISbG9ja3dvb2RhdmVudWUub3Jngg5tYXN1ZGEuZnZzZC51c4IP
bmV3bGFuZC5mdnNkLnVzggtva2EuZnZzZC51c4IOcGxhdmFuLmZ2c2QudXOCHnNh
aW50ZW15ZGl1c2NhdGhvbGljc2Nob29sLm9yZ4IUc2F0dXJuZWxlbWVudGFyeS5v
cmeCD3RhbGJlcnQuZnZzZC51c4IOd3d3LmFwcjI5OC5jb22CLHd3dy5jaGFydGVy
c2Nob29sb2ZlZHVjYXRpb25hbGV4Y2VsbGVuY2Uub3JnghV3d3cuY291cnJlZ2Vz
LmZ2c2QudXOCD3d3dy5jb3guZnZzZC51c4Ibd3d3LmNyaXN0b3JleWJhdG9ucm91
Z2Uub3JnghF3d3cuY3Rrc2Nob29sLmNvbYIVd3d3LmV4ZWN1dGl2ZXByZXAub3Jn
ghJ3d3cuZnVsdG9uLmZ2c2QudXOCEnd3dy5naHNhLWsxMi1jYS51c4ISd3d3Lmdp
c2xlci5mdnNkLnVzght3d3cuZ29ldGhlY2hhcnRlcnNjaG9vbC5vcmeCGHd3dy5n
cmVlbmZpZWxkc2Nob29sLm9yZ4ITd3d3LmhuaHNvYWtsYW5kLm9yZ4ISd3d3Lml3
Y3MuazEyLnZhLnVzghh3d3cua2lwYXBhZWxlbWVudGFyeS5vcmeCFXd3dy5rbm92
YWxlYXJuaW5nLm9yZ4IZd3d3LmxlYXJuaW5nYXRsb3Zlam95LmNvbYIZd3d3Lmxl
YXJuaW5nYXRsb3Zlam95Lm5ldIIZd3d3LmxlYXJuaW5nYXRsb3Zlam95Lm9yZ4IW
d3d3LmxvY2t3b29kYXZlbnVlLm9yZ4ISd3d3Lm1hc3VkYS5mdnNkLnVzghF3d3cu
bW1iZXRodW5lLm9yZ4IVd3d3Lm1vbGluZXNjaG9vbHMub3JnghN3d3cubmV3bGFu
ZC5mdnNkLnVzgg93d3cub2thLmZ2c2QudXOCFXd3dy5vdHNlZ29rbmlnaHRzLm9y
Z4ISd3d3LnBsYXZhbi5mdnNkLnVzgiJ3d3cuc2FpbnRlbXlkaXVzY2F0aG9saWNz
Y2hvb2wub3Jnghh3d3cuc2F0dXJuZWxlbWVudGFyeS5vcmeCE3d3dy5zZ3VzZC5r
MTIuY2EudXOCDXd3dy5zZ3VzZC5uZXSCE3d3dy5zcHNhbmdlbHdheS5vcmeCE3d3
dy50YWxiZXJ0LmZ2c2QudXOCEnd3dy50YW11cmEuZnZzZC51c4IUd3d3LnVpbnRh
MS5rMTIud3kudXOCGXd3dy52aWNrc2J1cmdjYXRob2xpYy5vcmcwTAYDVR0gBEUw
QzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDov
L2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdwB0
ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWpOJ/7hAAAEAwBIMEYC
IQDWcGwt5FeraGbC9z6GiNXO5TwQjzNdhB1FSC05LlePVQIhAKKW5qAoZdZko5hE
xoeQohti1SlyBJWkYW8LgOkz3WdZAHUAKTxRllTIOWW6qlD8WAfUt2+/WHopctyk
wwz05UVH9HgAAAFqTif/AwAABAMARjBEAiAHla+EFqMm6jJQPvAogOO4NAQkvabL
9XhyIX7cZ3wAfQIgfkqBCPQKu5Op8lIyDhCVGwWqEwgvRxmcSHXEZXBfScwwDQYJ
KoZIhvcNAQELBQADggEBAGkqy8nKh7ixeou6EuxZmPmy6RxjMP6sY+tSteCGiEZM
RfccDgmM0/ak82NSMgosRcv+65SWKZPI19kY77XR9nDRw8PD5mVkqhdCiPtdCTWi
jCXgCte8aZJzAHHzgU784+EDCf2p1nkCCWdNJmu/Pfgx2PuGLcAF5o7bPNv8akly
fWkNXPV8Cr86INlozmld7j/bduBpSZzw545Gw78vLKCqvbZnXvwKbp/OMBBalU0F
DGivOMqdBlDDB9dtKEmTM92WC4uQGUbX1EVBYGKd3AOiAlEx8dCQcPUmvn7xbX1F
jUSGQuNQ37wEyV6mnGfucoBc0e6/Osjyuxzi7ViBW40=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQbTHb+2z7
rfYVCl+ph5m8FJJOEgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5pV3R4RBg
n18RTHnTD9fS27JxyeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGrmQF3Z/h2
e6StagubO+pVwFzG8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK7wAhJO8e
l2z375LDd2VIwrdWQP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlWZ1AdjOKf
RiY0ckFuu/DYkuvkNKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5Tu7zbek/
MR/JMR9nceWyZ2Mund+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzwWzBvTD8F
7q6ckUbIgpeo7stn7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuaivjW/P+Tm
64XjXNjP9F1W8+5tlcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ4Iudx/o3
Q4E2w6Aud9PYyV05pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/h0omUmCI
DiQVG30eHhb3OIP3bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUnohkUi6ik
D4me6o58sq/IQVmyem1M/E0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 281709706431087208305393452672712609263463
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-24 06:03:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-23 06:03:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cespk2.cliftonisd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2015 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.apr298.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.charterschoolofeducationalexcellence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.courreges.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cox.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ctkschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.executiveprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fulton.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gisler.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hnhsoakland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.iwcs.k12.va.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kipapaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.learningatlovejoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lockwoodavenue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.masuda.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mhs.molineschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.molineschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.newland.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.oka.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.plavan.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.saintemydiuscatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.saturnelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.talbert.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tamura.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.vicksburgcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apr298.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ces.cliftonisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cespk2.cliftonisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charterschoolofeducationalexcellence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courreges.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cox.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctkschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elementary.otsegoknights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'executiveprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fulton.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gisler.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenfieldschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highschool.otsegoknights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hnhsoakland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juniorhigh.otsegoknights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kipapaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learningatlovejoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learningatlovejoy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learningatlovejoy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lockwoodavenue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masuda.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newland.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oka.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plavan.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintemydiuscatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saturnelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talbert.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apr298.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charterschoolofeducationalexcellence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.courreges.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cox.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cristoreybatonrouge.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctkschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.executiveprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fulton.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghsa-k12-ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gisler.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goethecharterschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenfieldschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hnhsoakland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iwcs.k12.va.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kipapaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.knovalearning.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learningatlovejoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learningatlovejoy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learningatlovejoy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lockwoodavenue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masuda.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmbethune.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.molineschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newland.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oka.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otsegoknights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plavan.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintemydiuscatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saturnelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sgusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sgusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spsangelway.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.talbert.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tamura.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uinta1.k12.wy.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vicksburgcatholic.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a4e27fee10000040300483046022100d6706c2de457ab6866c2f73e8688d5cee53c108f335d841d45482d392e578f55022100a296e6a02865d664a39844c68790a21b62d529720495a4616f0b80e933dd6759007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a4e27ff03000004030046304402200795af8416a326ea32503ef02880e3b8340424bda6cbf57872217edc677c007d02207e4a8108f40abb93a9f252320e10951b05aa13082f47199c4875c465705f49cc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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