www.san-saba.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ac:f7:d9:e8:a8:07:85:85:89:94:da:37:14:70:31:a3:ef was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.san-saba.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ac:f7:d9:e8:a8:07:85:85:89:94:da:37:14:70:31:a3:ef
Serial Number (int): 320194875667891019096174139785878275466223
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d6:58:36:89:62:d3:34:81:30:2a:fb:3b:44:d0:fb:0b:99:44:94:b0
Fingerprint (sha256): 0f:c5:df:ef:e4:7c:fa:2d:6a:7d:7b:b5:73:22:b1:5e:1a:c7:55:6b:65:ac:eb:ad:0d:00:eb:d8:0a:88:ab:86

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.san-saba.net

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.san-saba.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.aerostem.org
admin.bentonms.org
admin.corvallisms.org
admin.elcaminocarousel.org
admin.fosterstars.org
admin.hutchinsonhawks.org
admin.jghs.org
admin.lamiradahs.org
admin.lcoosk12.org
admin.losalisosmiddle.org
admin.loscoyotesms.org
admin.mes.mtsd-vt.org
admin.mhs.mtsd-vt.org
admin.mms.mtsd-vt.org
admin.nlmusdpreschool.org
admin.norwalklancers.org
admin.stmaryroyaloak.org
admin.waitemiddle.org
aen.alvaradoisd.net
aerostem.org
aes.alvaradoisd.net
ahs.alvaradoisd.net
ais.alvaradoisd.net
ajhs.alvaradoisd.net
bbecc.huffmanisd.net
bentonms.org
ces.huffmanisd.net
corvallisms.org
cusd1.com
dms.delhi.k12.ca.us
ees.bsd100.org
elcaminocarousel.org
emerson.bsd100.org
fms.bsd100.org
fosterstars.org
freedom.bsd100.org
fres.huffmanisd.net
heritage.bsd100.org
hes.bsd100.org
hhs.huffmanisd.net
hiawatha.bsd100.org
hms.huffmanisd.net
hs.bsd100.org
hutchinsonhawks.org
ies.bsd100.org
irving.bsd100.org
jghs.org
kes.bsd100.org
komensky.bsd100.org
lamiradahs.org
latimer.moreland.org
lcoosk12.org
les.alvaradoisd.net
losalisosmiddle.org
loscoyotesms.org
mes.mammothusd.org
mes.mtsd-vt.org
mhs.mammothusd.org
mms.mammothusd.org
msms.nuview.k12.ca.us
msms.nuviewusd.org
mtsd-vt.org
nbechs.nuview.k12.ca.us
nbechs.nuviewusd.org
nlmusdpreschool.org
norwalklancers.org
pershing.bsd100.org
pes.bsd100.org
piper.bsd100.org
stmaryroyaloak.org
vves.nuview.k12.ca.us
vves.nuviewusd.org
waitemiddle.org
www.aerostem.org
www.bentonms.org
www.corvallisms.org
www.elcaminocarousel.org
www.fosterstars.org
www.hutchinsonhawks.org
www.hvrsd.org
www.jghs.org
www.lamiradahs.org
www.lcoosk12.org
www.losalisosmiddle.org
www.loscoyotesms.org
www.nlmas.org
www.nlmusdpreschool.org
www.norwalklancers.org
www.pathwaysk8.com
www.rbuhsd.k12.ca.us
www.richlandsd.com
www.san-saba.net
www.southeastacademy.org
www.southeastrop.org
www.stischoolcypress.org
www.stmaryroyaloak.org
www.tfhe.org
www.venturacharterschool.org
www.waitemiddle.org

Other certificates including the domain name san-saba.net

(limited to 100 certificates)
san-saba.net
acsaregion13.org
san-saba.net
timeclock.san-saba.net
www.san-saba.net
admin.sd925.org
admin.mtsd-vt.org
timeclock.san-saba.net
acsaregion13.org
admin.lcisd.net
san-saba.net
acsaregion13.org
admin.aerostem.org
san-saba.net
www.bsd100.org
www.nuview.k12.ca.us
bis.bayfield.k12.co.us
san-saba.net
www.missourimilitaryacademy.org
acsaregion13.org
admin.aerostem.org
acsaregion13.org
aurora.coloradoearlycolleges.org
admin.san-saba.net
san-saba.net
admin.aerostem.org
acsaregion13.org
san-saba.net
admin.aerostem.org
admin.primary.cusd1.com
www.mammothusd.org
acsaregion13.org
acsaregion13.org
admin.aerostem.org
timeclock.san-saba.net
acsaregion13.org
san-saba.net
nes.nuview.k12.ca.us
nha.lcisd.net
san-saba.net
acsaregion13.org
buckhornhigh.mcssk12.org
nuviewusd.org
ssisd13.san-saba.net
acsaregion13.org
admin.aerostem.org
admin.stischoolcypress.org
san-saba.net
acsaregion13.org
admin.sd925.org
admin.lahainalunahs.org
www.sd925.org
www.zionmarengo.net
admin.cusd1.com
admin.aerostem.org
nlmas.org
admin.aerostem.org

Certificate

The complete raw certificate details for www.san-saba.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320194875667891019096174139785878275466223
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-07 01:02:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-05 01:02:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.san-saba.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2016 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.aerostem.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bentonms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.corvallisms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.elcaminocarousel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fosterstars.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hutchinsonhawks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jghs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lamiradahs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lcoosk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.losalisosmiddle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.loscoyotesms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mes.mtsd-vt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mhs.mtsd-vt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mms.mtsd-vt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nlmusdpreschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.norwalklancers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stmaryroyaloak.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.waitemiddle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aen.alvaradoisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerostem.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aes.alvaradoisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahs.alvaradoisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ais.alvaradoisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajhs.alvaradoisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbecc.huffmanisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bentonms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ces.huffmanisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corvallisms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cusd1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dms.delhi.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ees.bsd100.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elcaminocarousel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emerson.bsd100.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fms.bsd100.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fosterstars.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedom.bsd100.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fres.huffmanisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heritage.bsd100.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hes.bsd100.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhs.huffmanisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiawatha.bsd100.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hms.huffmanisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.bsd100.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hutchinsonhawks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ies.bsd100.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irving.bsd100.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jghs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kes.bsd100.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'komensky.bsd100.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lamiradahs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latimer.moreland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lcoosk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'les.alvaradoisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losalisosmiddle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loscoyotesms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mes.mammothusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mes.mtsd-vt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhs.mammothusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.mammothusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msms.nuview.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msms.nuviewusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtsd-vt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbechs.nuview.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbechs.nuviewusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nlmusdpreschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norwalklancers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pershing.bsd100.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pes.bsd100.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piper.bsd100.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryroyaloak.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vves.nuview.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vves.nuviewusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitemiddle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aerostem.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bentonms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corvallisms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elcaminocarousel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fosterstars.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hutchinsonhawks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hvrsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jghs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lamiradahs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lcoosk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.losalisosmiddle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loscoyotesms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nlmas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nlmusdpreschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norwalklancers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pathwaysk8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rbuhsd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richlandsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.san-saba.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southeastacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southeastrop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stischoolcypress.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryroyaloak.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tfhe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.venturacharterschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitemiddle.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000163d7facd800000040300473045022100de35503881cda5b544c253e9d279c4b8b150095922dece21ac1be60878b85271022030f57d4cbf939a780b08c7b384b23c1da120633ee100df7e2bc2f9317496959a007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000163d7facd8200000403004730450221009f18fcfb7de3d99a9d28d596fa112b83a0e93253a369d5adf7e84cdafb8b7ea1022045ab844eab2172a05f367376c9eefdd7e79875ddb8ba5c34485df0b7cb1a67d1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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