www.holyfamilycatholicacademy.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:31:df:10:b2:68:de:21:46:8d:08:41:32:a9:98:cf:e6:ab was issued on by Let's Encrypt.

With 60 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.holyfamilycatholicacademy.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:31:df:10:b2:68:de:21:46:8d:08:41:32:a9:98:cf:e6:ab
Serial Number (int): 278307198312793881697857111722095375541931
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): de:56:da:03:ab:51:cc:c1:8e:a8:7d:51:79:3e:91:c9:04:4b:53:0f
Fingerprint (sha256): 14:1e:cd:d7:6c:85:da:4f:f0:51:eb:41:ef:3f:17:59:af:53:dc:67:57:41:48:c1:d8:a9:99:3f:40:31:78:6e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.holyfamilycatholicacademy.net

60

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.holyfamilycatholicacademy.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.benchmarkbobcats.org
admin.cra.freeholdtwp.k12.nj.us
admin.ctb.freeholdtwp.k12.nj.us
admin.dde.freeholdtwp.k12.nj.us
admin.dsdk12.net
admin.eclc.freeholdtwp.k12.nj.us
admin.es.lorenaisd.net
admin.holyfamilycatholicacademy.net
admin.hs.lorenaisd.net
admin.jjc.freeholdtwp.k12.nj.us
admin.lorenaisd.net
admin.ms.lorenaisd.net
admin.ps.lorenaisd.net
admin.stjosaphat.net
admin.valparaisohes.valpo.k12.in.us
admin.valparaisones.valpo.k12.in.us
admin.valparaisotjes.valpo.k12.in.us
admin.westpines.greenek12.org
baileyton.greenek12.org
cdhs.greenek12.org
cra.freeholdtwp.k12.nj.us
earlychildhood.northvilleschools.org
eclc.freeholdtwp.k12.nj.us
elem.ogisd.net
es.lorenaisd.net
friarspoint.coahomak12.org
fuhsdadultschool.org
glenwood.greenek12.org
greenek12.org
holyfamilycatholicacademy.net
hs.lorenaisd.net
jhcommunityschool.org
jjc.freeholdtwp.k12.nj.us
legacy.colegioedlio.org
lorenaisd.net
lyon.coahomak12.org
mosheim.greenek12.org
ms.lorenaisd.net
mstmaatroosevelt.org
nghs.greenek12.org
ps.lorenaisd.net
ps17queens.com
sghs.greenek12.org
south.mthcs.org
stjosaphat.net
valparaisocces.valpo.k12.in.us
valparaisoces.valpo.k12.in.us
valparaisohigh.valpo.k12.in.us
valparaisomes.valpo.k12.in.us
valparaisopes.valpo.k12.in.us
valparaisotjms.valpo.k12.in.us
westpines.greenek12.org
www.avrlacademy.org
www.benporatyosef.org
www.holyfamilycatholicacademy.net
www.lorenaisd.net
www.mstmaatroosevelt.org
www.southampton.k12.nj.us
www.stjosaphat.net
www.thhs.qc.edu

Other certificates including the domain name holyfamilycatholicacademy.net

(limited to 100 certificates)
sni151298.cloudflaressl.com
sni151298.cloudflaressl.com
sni151298.cloudflaressl.com
sni151298.cloudflaressl.com
sni151298.cloudflaressl.com
www.holyfamilycatholicacademy.net
holyfamilycatholicacademy.net
www.holyfamilycatholicacademy.net
sni151298.cloudflaressl.com
sni151298.cloudflaressl.com
sni151298.cloudflaressl.com
benchmarkbobcats.org
sni151298.cloudflaressl.com
sni151298.cloudflaressl.com
admin.bands.dekalbcentral.net
holyfamilycatholicacademy.net
sni151298.cloudflaressl.com
www.holyfamilycatholicacademy.net
www.holyfamilycatholicacademy.net
sni151298.cloudflaressl.com
admin.benchmarkbobcats.org
www.holyfamilycatholicacademy.net
www.holyfamilycatholicacademy.net
sni151298.cloudflaressl.com
sni151298.cloudflaressl.com
sni151298.cloudflaressl.com
sni151298.cloudflaressl.com
holyfamilycatholicacademy.net
admin.holyfamilycatholicacademy.net
www.southernwakeacademy.org
shs.lskysd.ca
sni151298.cloudflaressl.com
sni151298.cloudflaressl.com
www.holyfamilycatholicacademy.net
www.holyfamilycatholicacademy.net
www.holyfamilycatholicacademy.net
holyfamilycatholicacademy.net
admin.bands.dekalbcentral.net
holyfamilycatholicacademy.net
sni151298.cloudflaressl.com
holyfamilycatholicacademy.net
sni151298.cloudflaressl.com
sni151298.cloudflaressl.com
admin.ups.lskysd.ca
coahomak12.org
www.rosemont78.org
admin.holyfamilycatholicacademy.net
sni151298.cloudflaressl.com
www.ckchicago.org
holyfamilycatholicacademy.net
sni151298.cloudflaressl.com
sni151298.cloudflaressl.com
www.holyfamilycatholicacademy.net
sni151298.cloudflaressl.com
sni151298.cloudflaressl.com
oglesby.cps.edu
ckcs.lskysd.ca
holyfamilycatholicacademy.net
www.holyfamilycatholicacademy.net
admin.rosemont78.org
www.swake.org
ups.lskysd.ca
www.cardinalritterprep.net
www.holyfamilycatholicacademy.net
www.cardinalritterprep.org

Certificate

The complete raw certificate details for www.holyfamilycatholicacademy.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278307198312793881697857111722095375541931
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-01 01:46:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-30 01:46:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.holyfamilycatholicacademy.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1528 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.benchmarkbobcats.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cra.freeholdtwp.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ctb.freeholdtwp.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dde.freeholdtwp.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dsdk12.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eclc.freeholdtwp.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.es.lorenaisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.holyfamilycatholicacademy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hs.lorenaisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jjc.freeholdtwp.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lorenaisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ms.lorenaisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ps.lorenaisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stjosaphat.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.valparaisohes.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.valparaisones.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.valparaisotjes.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.westpines.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baileyton.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdhs.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cra.freeholdtwp.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earlychildhood.northvilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eclc.freeholdtwp.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elem.ogisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.lorenaisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friarspoint.coahomak12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuhsdadultschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenwood.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamilycatholicacademy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.lorenaisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhcommunityschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jjc.freeholdtwp.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.colegioedlio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lorenaisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyon.coahomak12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mosheim.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.lorenaisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mstmaatroosevelt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nghs.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps.lorenaisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps17queens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sghs.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'south.mthcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosaphat.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valparaisocces.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valparaisoces.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valparaisohigh.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valparaisomes.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valparaisopes.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valparaisotjms.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westpines.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avrlacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benporatyosef.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamilycatholicacademy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lorenaisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mstmaatroosevelt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southampton.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosaphat.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thhs.qc.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c4b1292460000040300473045022100bce88647b42640babdf1f0120f37a73c21a9cc4ba209646930215783759eb4b90220592417fc16453f6f04c860be1a92a7f7443cb49b09c10ea6478a4cb3883d71fe00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c4b12926b000004030048304602210087a75a353d4c2163426d091cfa99d969b4c8af849d74d3b4fbd1b8517b11a4b9022100ff9379e0b7b8537263e8d068c85ea537013f5f0640a8087ae6be789f6e26a10e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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