as1sslgroup4.rschooltoday.com

Issued by R3

About this certificate

This digital certificate with serial number 04:9c:7d:17:3c:54:2f:c4:89:82:0d:d9:85:b9:14:86:9f:01 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=as1sslgroup4.rschooltoday.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9c:7d:17:3c:54:2f:c4:89:82:0d:d9:85:b9:14:86:9f:01
Serial Number (int): 401699467112622772936514429192224215834369
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1b:fd:96:a1:8e:40:11:72:6f:05:0d:71:7e:6a:8f:53:b7:ea:89:fa
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b5:64:77:e2:a0:8f:8b:1c:3f:9c:07:c3:6c:d1:a1:e9:07:fc:bd:74
Fingerprint (sha256): 10:bf:b6:e9:e8:00:02:e7:4a:da:1d:e2:8e:42:bc:09:00:a8:a9:e4:16:fb:dd:4f:31:d1:30:64:9c:85:20:5a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate as1sslgroup4.rschooltoday.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for as1sslgroup4.rschooltoday.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

as1sslgroup4.rschooltoday.com
as1test.rschooltoday.com
class4aregion2sc.org
foothillsmsathleticconf.org
miamivalleyconference.org
mountainvalleyconference.org
northcoastleague.org
northeasternma.org
northernconferenceco.org
northernneckdistrictva.org
northernregionva.org
northjerseyic.org
northwesterndistrictva.org
norwinwpial.org
npsscreening.org
nvjac.org
nwestconference.org
nwjerseyac.com
nwmtaconference.org
oahuia.org
olympicconference.org
orangecountyinterscholasticathleticsassoc.org
pacwestconference.org
patriotleagueco.org
patriotleaguema.org
peninsuladistrictva.org
phacathleticsconference.org
piedmontdistrictva.org
pikespeakathleticconference.org
pinerichlandwpial.org
pioneerdistrictva.org
potomacdistrictva.org
pusdcalendars.org
rcmsl.org
rhodeislandinterscholasticleague.org
ridgwaysports.org
riverridgedistrictva.org
roaringforksd.org
s3tvl.org
sagebrushleague.org
sbaac.org
schuylkillleague.org
secconference.org
section1conference4.org
section6ny.org
section7athletics.org
section8ny.org
sectiononeny.org
sectionxboces.com
seminoledistrictva.org
www.as1test.rschooltoday.com
www.class4aregion2sc.org
www.foothillsmsathleticconf.org
www.miamivalleyconference.org
www.mountainvalleyconference.org
www.northcoastleague.org
www.northeasternma.org
www.northernconferenceco.org
www.northernneckdistrictva.org
www.northernregionva.org
www.northjerseyic.org
www.northwesterndistrictva.org
www.norwinwpial.org
www.npsscreening.org
www.nvjac.org
www.nwestconference.org
www.nwjerseyac.com
www.nwmtaconference.org
www.oahuia.org
www.olympicconference.org
www.orangecountyinterscholasticathleticsassoc.org
www.pacwestconference.org
www.patriotleagueco.org
www.patriotleaguema.org
www.peninsuladistrictva.org
www.phacathleticsconference.org
www.piedmontdistrictva.org
www.pikespeakathleticconference.org
www.pinerichlandwpial.org
www.pioneerdistrictva.org
www.potomacdistrictva.org
www.pusdcalendars.org
www.rcmsl.org
www.rhodeislandinterscholasticleague.org
www.ridgwaysports.org
www.riverridgedistrictva.org
www.roaringforksd.org
www.s3tvl.org
www.sagebrushleague.org
www.sbaac.org
www.schuylkillleague.org
www.secconference.org
www.section1conference4.org
www.section6ny.org
www.section7athletics.org
www.section8ny.org
www.sectiononeny.org
www.sectionxboces.com
www.seminoledistrictva.org

Other certificates including the domain name rschooltoday.com

(limited to 100 certificates)
sslttsgroup5.rschooltoday.com
sslttsgroup2.rschooltoday.com
custom4-rst7.rschooltoday.com
ppm.portal.rschooltoday.com
ssldo1group1.rschooltoday.com
sslttsgroup2.rschooltoday.com
vavschool1.drupal-stg2.rschooltoday.com
ssldo1group7.rschooltoday.com
www.fsview.rschooltoday.com
egf.portal.rschooltoday.com
1.as1sslgroup7.rschooltoday.com
custom1-rst7.rschooltoday.com
1.as1sslgroup3.rschooltoday.com
as1sslgroup2.rschooltoday.com
as2sslgroup1.rschooltoday.com
ssldo2group1.rschooltoday.com
as3sslgroup2.rschooltoday.com
sslttsgroup4.rschooltoday.com
custom1-rst7.rschooltoday.com
1.ssldo1group9.rschooltoday.com
as3sslgroup3.rschooltoday.com
as2sslgroup4.rschooltoday.com
beta.api.rschooltoday.com
ssldo1group1.rschooltoday.com
as1sslgroup4.rschooltoday.com
ssldo2group1.rschooltoday.com
ssldo1group6.rschooltoday.com
custom3-rst7.rschooltoday.com
*.fee.rschooltoday.com
ssldo1group1.rschooltoday.com
egf.portal.rschooltoday.com
ssldo1group1.rschooltoday.com
officials.rschooltoday.com
vavschool1.drupal-stg2.rschooltoday.com
as2test.rschooltoday.com
as2sslgroup4.rschooltoday.com
stpatrickelementaryschool.new.rschooltoday.com
as2sslgroup6.rschooltoday.com
sslttsgroup5.rschooltoday.com
tryssl.rschooltoday.com
ppm.portal.rschooltoday.com
ssldo1group1.rschooltoday.com
greececsd.portal.rschooltoday.com
as2sslgroup1.rschooltoday.com
as1sslgroup4.rschooltoday.com
ssldo2group3.rschooltoday.com
stpatrickelementaryschool.new.rschooltoday.com
as1sslgroup2.rschooltoday.com
abbotsford.new.rschooltoday.com
as3sslgroup4.rschooltoday.com
as2sslgroup3.rschooltoday.com
as3sslgroup1.rschooltoday.com
as1sslgroup5.rschooltoday.com
www.intranet.rschooltoday.com
as2sslgroup5.rschooltoday.com
as1sslgroup1.rschooltoday.com
sslttsgroup3.rschooltoday.com
custom3-rst7.rschooltoday.com
academyresourcemanagement.portal.rschooltoday.com
greececsd.portal.rschooltoday.com
1aevergreen.com
egf.portal.rschooltoday.com
learnssl.rschooltoday.com
custom3-rst7.rschooltoday.com
greececsd.portal.rschooltoday.com
sslttsgroup3.rschooltoday.com
stpatrickelementaryschool.new.rschooltoday.com
mndotlsc.mnscu.portal.rschooltoday.com
as2sslgroup2.rschooltoday.com
abbotsford.new.rschooltoday.com
as1sslgroup4.rschooltoday.com
ssldo1group8.rschooltoday.com
ssldo2group1.rschooltoday.com
as3sslgroup4.rschooltoday.com
mndotlsc.mnscu.portal.rschooltoday.com
as1sslgroup4.rschooltoday.com
egf.portal.rschooltoday.com
as2sslgroup3.rschooltoday.com
sslttsgroup5.rschooltoday.com
sslttsgroup3.rschooltoday.com
ssldo1group7.rschooltoday.com
*.cr3.rschooltoday.com
beta.api.rschooltoday.com
sslttsgroup5.rschooltoday.com
*.rschooltoday.com
as2sslgroup1.rschooltoday.com
as1sslgroup1.rschooltoday.com
www.info.rschooltoday.com
custom3-rst7.rschooltoday.com
as3sslgroup3.rschooltoday.com
ssldo1group7.rschooltoday.com
ssldo2group4.rschooltoday.com
as1sslgroup2.rschooltoday.com
1aevergreen.com
beta.api.rschooltoday.com
1.as1sslgroup9.rschooltoday.com
sslttsgroup3.rschooltoday.com
sslttsgroup6.rschooltoday.com
sslttsgroup4.rschooltoday.com
ssldo2group5.rschooltoday.com

Certificate

The complete raw certificate details for as1sslgroup4.rschooltoday.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lI8Is7yyjdxkAXaAxQu
DsER6JghoWOzaf39i/nuBR+WJi1K9ud1BV+g2Jjjlo/rRwRdWYyDs29KGdmqmI3A
95mPJc6/GNmdgeGP8fPYnPXuxQ6tLHlESH0wBr/MjAJrPkNvap8eha8LYtrrtoN5
tkuxuQKVBuEa4MgwcdcIMjjqnMaOYas+xegJ07uFHj2w+X8ccC7wSbnP1wHFmpV7
ZGiqWmPOYSmF+iza/0joOuJ+iw8gE/h7i9ErwOYUm9hFqxnutTiaNbpNWr8GtWA/
P4eF39tRQDRWC0G8UYjzuSq73TywLBP0mWHHvc6aTJGTM9vvVo9nXfg8vbleo9no
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 401699467112622772936514429192224215834369
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-06 07:37:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-05 07:37:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'as1sslgroup4.rschooltoday.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28065455246056374398040173561789739225681692589882038813175305308422775301999648236695098672670434518446853103904398447777099356710261783163237518013633213452695572003627524858824405123483799364829634379622835240661283528112391413831119247239175813720736174057710256308641631061241995131390140853863386926583964209814059585978153203518504564911181568280497710286800789786345430695504093663029800022558985305843048877612019675771789005787770638246160522523924387732245643460552979881203914660687385700177872695000615131820008641412112605942485581765453079163773007437190812518564200915691491120769202863083082504333449
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1bfd96a18e4011726f050d717e6a8f53b7ea89fa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2405 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'as1sslgroup4.rschooltoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'as1test.rschooltoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'class4aregion2sc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foothillsmsathleticconf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miamivalleyconference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountainvalleyconference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcoastleague.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northeasternma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernconferenceco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernneckdistrictva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernregionva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northjerseyic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northwesterndistrictva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norwinwpial.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'npsscreening.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nvjac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwestconference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwjerseyac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwmtaconference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oahuia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olympicconference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orangecountyinterscholasticathleticsassoc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacwestconference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patriotleagueco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patriotleaguema.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peninsuladistrictva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phacathleticsconference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piedmontdistrictva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pikespeakathleticconference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinerichlandwpial.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pioneerdistrictva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'potomacdistrictva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pusdcalendars.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcmsl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhodeislandinterscholasticleague.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ridgwaysports.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riverridgedistrictva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roaringforksd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3tvl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sagebrushleague.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbaac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schuylkillleague.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secconference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'section1conference4.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'section6ny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'section7athletics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'section8ny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sectiononeny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sectionxboces.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seminoledistrictva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.as1test.rschooltoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.class4aregion2sc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foothillsmsathleticconf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miamivalleyconference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountainvalleyconference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northcoastleague.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northeasternma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northernconferenceco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northernneckdistrictva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northernregionva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northjerseyic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northwesterndistrictva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norwinwpial.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.npsscreening.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nvjac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nwestconference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nwjerseyac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nwmtaconference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oahuia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olympicconference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orangecountyinterscholasticathleticsassoc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pacwestconference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patriotleagueco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patriotleaguema.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peninsuladistrictva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phacathleticsconference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piedmontdistrictva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pikespeakathleticconference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pinerichlandwpial.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pioneerdistrictva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.potomacdistrictva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pusdcalendars.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rcmsl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rhodeislandinterscholasticleague.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ridgwaysports.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverridgedistrictva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roaringforksd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.s3tvl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sagebrushleague.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sbaac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schuylkillleague.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secconference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.section1conference4.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.section6ny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.section7athletics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.section8ny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sectiononeny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sectionxboces.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seminoledistrictva.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018755b67c820000040300473045022100eb6f27451b46f6bac47a7f74058cbc0225ec31fc4a25050e8bc48a81b352181702203bfab3483637add8bcb21c0a29ab0d6a3b4bc9ca2ee06c731a829deeb9b39af20075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018755b67c8b0000040300463044022067e9476f2e0515a293941c6d9ac3fbcb8b8a4e27d5da5611d476b15c27776b32022035b2dd79ea139650b6191f0570b142ec2bdbe761b29b292aebea948723f49de4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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