www.ranchitoelementary.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:76:8c:36:03:ee:a1:8c:9f:59:0b:4f:71:61:36:9a:bc:78 was issued on by Let's Encrypt.

With 65 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ranchitoelementary.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:76:8c:36:03:ee:a1:8c:9f:59:0b:4f:71:61:36:9a:bc:78
Serial Number (int): 301676549475145256309493128036595682425976
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a4:4d:36:52:5f:19:fa:14:10:ff:61:c9:bd:e9:4c:32:b1:12:0f:00
Fingerprint (sha256): 0f:62:ac:3b:6b:6b:fc:7b:e4:c7:c8:e9:bf:13:02:ae:50:40:c0:49:05:3d:25:41:70:a9:cf:6b:2e:ff:00:92

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ranchitoelementary.org

65

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ranchitoelementary.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.colegiogreenhills.com
admin.ecscrusaders.com
admin.jackierobinsonelementary.org
airport.comoxvalleyschools.ca
arden.comoxvalleyschools.ca
aspen.comoxvalleyschools.ca
barker.mvsd.ca
brooklyn.comoxvalleyschools.ca
colegiogreenhills.com
courtenay.comoxvalleyschools.ca
cps.sd53.bc.ca
cumberland.comoxvalleyschools.ca
denman.comoxvalleyschools.ca
drcss.mvsd.ca
ecscrusaders.com
ethelbert.mvsd.ca
fatimaschoolwilton.org
glh.mvsd.ca
gpci.mvsd.ca
gpes.mvsd.ca
gpvanier.comoxvalleyschools.ca
graduatenorth.ca
grandview.mvsd.ca
hes.mvsd.ca
highland.comoxvalleyschools.ca
hornbyisland.comoxvalleyschools.ca
huband.comoxvalleyschools.ca
indigenoused.comoxvalleyschools.ca
indigenouseducation.comoxvalleyschools.ca
ined.comoxvalleyschools.ca
isfeld.comoxvalleyschools.ca
isp.mvsd.ca
jackierobinsonelementary.org
laketrail.comoxvalleyschools.ca
macneill.mvsd.ca
miraclebeach.comoxvalleyschools.ca
mms.mvsd.ca
nelsondiocese.org
ochre.mvsd.ca
oes.sd53.bc.ca
ose.sd53.bc.ca
oss.sd53.bc.ca
puntledge.comoxvalleyschools.ca
queneesh.comoxvalleyschools.ca
ranchitoelementary.org
res.mvsd.ca
robbroad.comoxvalleyschools.ca
royston.comoxvalleyschools.ca
smithjackson.mvsd.ca
ten.sd53.bc.ca
theratnerschool.org
valleyview.comoxvalleyschools.ca
wci.mvsd.ca
wes.mvsd.ca
whitmore.mvsd.ca
www.colegiogreenhills.com
www.ecscrusaders.com
www.fatimaschoolwilton.com
www.graduatenorth.ca
www.jackierobinsonelementary.org
www.mvsd.ca
www.nelsondiocese.org
www.nlsd113.ca
www.ranchitoelementary.org
youlearn.sd53.bc.ca

Other certificates including the domain name ranchitoelementary.org

(limited to 100 certificates)
glacierview.comoxvalleyschools.ca
admin.bicschools.net
careerprograms.comoxvalleyschools.ca
admin.ranchitoelementary.org
admin.bicschools.net
admin.ajhs.dcs.edu
admin.colegiogreenhills.com
www.mvsd.ca
ranchitoelementary.org
www.ranchitoelementary.org
www.nlsd113.ca
okf.sd53.bc.ca
nelsondiocese.org
printshop.comoxvalleyschools.ca
comoxvalleyschools.ca
elem.bicschools.net
isp.mvsd.ca
stmary.htcsd.ca
admin.colegiogreenhills.com
sess.sd53.bc.ca
youlearn.sd53.bc.ca
www.wexford.edu.mx
admin.wearedace.org
oss.sd53.bc.ca
www.sd53.bc.ca
soss.sd53.bc.ca
indigenouseducation.comoxvalleyschools.ca
ose.sd53.bc.ca
admin.ajhs.dcs.edu
adss.sd70.bc.ca
htcsd.ca
www.wearedace.org
indigenoused.comoxvalleyschools.ca
www.ranchitoelementary.org
robinsonelementary.org
www.nelsondiocese.org
oes.sd53.bc.ca
phs.parlierunified.org
ssms.stanlycountyschools.org
ined.sd70.bc.ca
awnes.sd70.bc.ca
www.gpcsd.ca
fatimaschoolwilton.com
www.theratnerschool.org
ten.sd53.bc.ca
ined.comoxvalleyschools.ca
phs.parlierunified.org
admin.ranchitoelementary.org
www.fatimaschoolwilton.org
admin.colegiogreenhills.com
www.bicschools.net
www.comoxvalleyschools.ca
jcsk8.org
admin.jcsk8.org

Certificate

The complete raw certificate details for www.ranchitoelementary.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMbDCCC1SgAwIBAgISA3aMNgPuoYyfWQtPcWE2mrx4MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAyMDUxMjQyMDlaFw0x
OTA1MDYxMjQyMDlaMCUxIzAhBgNVBAMTGnd3dy5yYW5jaGl0b2VsZW1lbnRhcnku
b3JnMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQbTHb
+2z7rfYVCl+ph5m8FJJOEgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5pV3R
4RBgn18RTHnTD9fS27JxyeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGrmQF3
Z/h2e6StagubO+pVwFzG8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK7wAh
JO8el2z375LDd2VIwrdWQP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlWZ1Ad
jOKfRiY0ckFuu/DYkuvkNKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5Tu7z
bek/MR/JMR9nceWyZ2Mund+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzwWzBv
TD8F7q6ckUbIgpeo7stn7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuaivjW/
P+Tm64XjXNjP9F1W8+5tlcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ4Iud
x/o3Q4E2w6Aud9PYyV05pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/h0om
UmCIDiQVG30eHhb3OIP3bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUnohkU
i6ikD4me6o58sq/IQVmyem1M/E0CAwEAAaOCCG8wgghrMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd
BgNVHQ4EFgQUL2vITWwsLjLyACD/LU1sWvxuurswHwYDVR0jBBgwFoAUqEpqYwR9
3brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRw
Oi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRw
Oi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzCCBiIGA1UdEQSCBhkwggYV
ghthZG1pbi5jb2xlZ2lvZ3JlZW5oaWxscy5jb22CFmFkbWluLmVjc2NydXNhZGVy
cy5jb22CImFkbWluLmphY2tpZXJvYmluc29uZWxlbWVudGFyeS5vcmeCHWFpcnBv
cnQuY29tb3h2YWxsZXlzY2hvb2xzLmNhghthcmRlbi5jb21veHZhbGxleXNjaG9v
bHMuY2GCG2FzcGVuLmNvbW94dmFsbGV5c2Nob29scy5jYYIOYmFya2VyLm12c2Qu
Y2GCHmJyb29rbHluLmNvbW94dmFsbGV5c2Nob29scy5jYYIVY29sZWdpb2dyZWVu
aGlsbHMuY29tgh9jb3VydGVuYXkuY29tb3h2YWxsZXlzY2hvb2xzLmNhgg5jcHMu
c2Q1My5iYy5jYYIgY3VtYmVybGFuZC5jb21veHZhbGxleXNjaG9vbHMuY2GCHGRl
bm1hbi5jb21veHZhbGxleXNjaG9vbHMuY2GCDWRyY3NzLm12c2QuY2GCEGVjc2Ny
dXNhZGVycy5jb22CEWV0aGVsYmVydC5tdnNkLmNhghZmYXRpbWFzY2hvb2x3aWx0
b24ub3JnggtnbGgubXZzZC5jYYIMZ3BjaS5tdnNkLmNhggxncGVzLm12c2QuY2GC
HmdwdmFuaWVyLmNvbW94dmFsbGV5c2Nob29scy5jYYIQZ3JhZHVhdGVub3J0aC5j
YYIRZ3JhbmR2aWV3Lm12c2QuY2GCC2hlcy5tdnNkLmNhgh5oaWdobGFuZC5jb21v
eHZhbGxleXNjaG9vbHMuY2GCImhvcm5ieWlzbGFuZC5jb21veHZhbGxleXNjaG9v
bHMuY2GCHGh1YmFuZC5jb21veHZhbGxleXNjaG9vbHMuY2GCImluZGlnZW5vdXNl
ZC5jb21veHZhbGxleXNjaG9vbHMuY2GCKWluZGlnZW5vdXNlZHVjYXRpb24uY29t
b3h2YWxsZXlzY2hvb2xzLmNhghppbmVkLmNvbW94dmFsbGV5c2Nob29scy5jYYIc
aXNmZWxkLmNvbW94dmFsbGV5c2Nob29scy5jYYILaXNwLm12c2QuY2GCHGphY2tp
ZXJvYmluc29uZWxlbWVudGFyeS5vcmeCH2xha2V0cmFpbC5jb21veHZhbGxleXNj
aG9vbHMuY2GCEG1hY25laWxsLm12c2QuY2GCIm1pcmFjbGViZWFjaC5jb21veHZh
bGxleXNjaG9vbHMuY2GCC21tcy5tdnNkLmNhghFuZWxzb25kaW9jZXNlLm9yZ4IN
b2NocmUubXZzZC5jYYIOb2VzLnNkNTMuYmMuY2GCDm9zZS5zZDUzLmJjLmNhgg5v
c3Muc2Q1My5iYy5jYYIfcHVudGxlZGdlLmNvbW94dmFsbGV5c2Nob29scy5jYYIe
cXVlbmVlc2guY29tb3h2YWxsZXlzY2hvb2xzLmNhghZyYW5jaGl0b2VsZW1lbnRh
cnkub3JnggtyZXMubXZzZC5jYYIecm9iYnJvYWQuY29tb3h2YWxsZXlzY2hvb2xz
LmNhgh1yb3lzdG9uLmNvbW94dmFsbGV5c2Nob29scy5jYYIUc21pdGhqYWNrc29u
Lm12c2QuY2GCDnRlbi5zZDUzLmJjLmNhghN0aGVyYXRuZXJzY2hvb2wub3JngiB2
YWxsZXl2aWV3LmNvbW94dmFsbGV5c2Nob29scy5jYYILd2NpLm12c2QuY2GCC3dl
cy5tdnNkLmNhghB3aGl0bW9yZS5tdnNkLmNhghl3d3cuY29sZWdpb2dyZWVuaGls
bHMuY29tghR3d3cuZWNzY3J1c2FkZXJzLmNvbYIad3d3LmZhdGltYXNjaG9vbHdp
bHRvbi5jb22CFHd3dy5ncmFkdWF0ZW5vcnRoLmNhgiB3d3cuamFja2llcm9iaW5z
b25lbGVtZW50YXJ5Lm9yZ4ILd3d3Lm12c2QuY2GCFXd3dy5uZWxzb25kaW9jZXNl
Lm9yZ4IOd3d3Lm5sc2QxMTMuY2GCGnd3dy5yYW5jaGl0b2VsZW1lbnRhcnkub3Jn
ghN5b3VsZWFybi5zZDUzLmJjLmNhMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysG
AQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQu
b3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcAdH7agzGtMxCRIZzOJU9CcMK/
/V5CIAjGNzV55hB7zFYAAAFoveUEIQAABAMASDBGAiEAzTx8182W8D4kfrqHXxv0
b/u88T0QdAJzwlXWC2p29JQCIQDNMOP3lxeg+cPsNGMzuR72HgUNO8f1ookSsVsj
tYCYQwB2ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABaL3lBhwA
AAQDAEcwRQIge0g51FMJ7tjMVcR/KeEGuw0rFgvPFSjYkwsqNdBSZWcCIQDOaX8j
hkNNxgt/uPYeYBurdXqbCMUw5A2x4aorc6CyUTANBgkqhkiG9w0BAQsFAAOCAQEA
c4fG2WYx5VCYAAO2bzH0ARzqobMIJPlE6XdoVeQ26JsQSCBWNdaN2Zrw+Ew9CmDo
TlnpVYJsGIPQkdgxNN5/TxmATqvRSAD+MItcfUhLy6csS6eM5UMtEAgiXMIVpXSP
ndSpIEmSnCJ3Qn+Tb9rX4J5e+98389tUfoGF/+l/W1Ew+hnZZXP20LxT8dkJD7/p
WBUhKmR/FuNTKRD5QgZjmffCIEsU7juEG5QRRS0ucuhkkLXqygU+H47q0J2mlYc6
bxGp6YS3oSWLxQvdxOFW7Y/u/XgkSxB0UQsCvazr6A8oYS/2/e4kbgsG2iv1qC4i
FMT+P+jGd2AnYdZcdgDlCA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301676549475145256309493128036595682425976
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-05 12:42:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-06 12:42:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ranchitoelementary.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1561 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.colegiogreenhills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ecscrusaders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jackierobinsonelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airport.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arden.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspen.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barker.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brooklyn.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colegiogreenhills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courtenay.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cps.sd53.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cumberland.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denman.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drcss.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecscrusaders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethelbert.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatimaschoolwilton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glh.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpci.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpes.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpvanier.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graduatenorth.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandview.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hes.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highland.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hornbyisland.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huband.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indigenoused.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indigenouseducation.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ined.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isfeld.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isp.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jackierobinsonelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laketrail.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macneill.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miraclebeach.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsondiocese.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ochre.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oes.sd53.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ose.sd53.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oss.sd53.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puntledge.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queneesh.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranchitoelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'res.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robbroad.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royston.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smithjackson.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ten.sd53.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theratnerschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valleyview.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wci.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wes.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitmore.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegiogreenhills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecscrusaders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fatimaschoolwilton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.graduatenorth.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jackierobinsonelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsondiocese.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nlsd113.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ranchitoelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youlearn.sd53.bc.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000168bde504210000040300483046022100cd3c7cd7cd96f03e247eba875f1bf46ffbbcf13d10740273c255d60b6a76f494022100cd30e3f79717a0f9c3ec346333b91ef61e050d3bc7f5a28912b15b23b5809843007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168bde5061c000004030047304502207b4839d45309eed8cc55c47f29e106bb0d2b160bcf1528d8930b2a35d0526567022100ce697f2386434dc60b7fb8f61e601bab757a9b08c530e40db1e1aa2b73a0b251
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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