windsorms.coloradoearlycolleges.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:88:a3:74:39:72:8f:e3:ab:c7:10:18:a6:ff:e8:07:ec:f0 was issued on by Let's Encrypt.

With 60 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=windsorms.coloradoearlycolleges.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:88:a3:74:39:72:8f:e3:ab:c7:10:18:a6:ff:e8:07:ec:f0
Serial Number (int): 307832527331450791826712459224925604408560
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 67:55:51:cc:8c:ee:22:17:65:25:44:93:2f:9a:42:92:8a:35:72:6a
Fingerprint (sha256): 14:84:5c:21:55:80:5c:be:cb:0a:28:d8:ed:69:6c:81:d8:0e:7e:cb:e2:9b:24:f8:53:e4:c2:a3:e4:fc:60:9f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate windsorms.coloradoearlycolleges.org

60

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for windsorms.coloradoearlycolleges.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.alms.hermiston.k12.or.us
admin.coloradoearlycolleges.org
admin.crammiddleschool.org
admin.dves.hermiston.k12.or.us
admin.fcwestms.coloradoearlycolleges.org
admin.gsdacademy.com
admin.hermiston.k12.or.us
admin.hhes.hermiston.k12.or.us
admin.hhs.hermiston.k12.or.us
admin.highschoolforartsandbusiness.org
admin.notredameparish.org
admin.rhes.hermiston.k12.or.us
admin.saltfork.org
admin.ses.hermiston.k12.or.us
admin.sjboces.org
admin.sms.hermiston.k12.or.us
admin.steinerschool.org
admin.wpes.hermiston.k12.or.us
alms.hermiston.k12.or.us
aurora.coloradoearlycolleges.org
coloradoearlycolleges.org
coloradosprings.coloradoearlycolleges.org
crammiddleschool.org
dves.hermiston.k12.or.us
fcwestms.coloradoearlycolleges.org
fortcollins.coloradoearlycolleges.org
fortcollinsms.coloradoearlycolleges.org
gsdacademy.com
hermiston.k12.or.us
hhes.hermiston.k12.or.us
hhs.hermiston.k12.or.us
high.saltfork.org
highschoolforartsandbusiness.org
juniorhigh.saltfork.org
north.saltfork.org
notredameparish.org
parker.coloradoearlycolleges.org
plummerpanthers.org
rhes.hermiston.k12.or.us
saltfork.org
ses.hermiston.k12.or.us
sjboces.org
sms.hermiston.k12.or.us
south.saltfork.org
steinerschool.org
windsorms.coloradoearlycolleges.org
wpes.hermiston.k12.or.us
www.aurora.coloradoearlycolleges.org
www.coloradoearlycolleges.org
www.crammiddleschool.org
www.fortcollins.coloradoearlycolleges.org
www.fortcollinsms.coloradoearlycolleges.org
www.gsdacademy.com
www.hermiston.k12.or.us
www.highschoolforartsandbusiness.org
www.notredameparish.org
www.plummerpanthers.org
www.saltfork.org
www.sjboces.org
www.steinerschool.org

Other certificates including the domain name coloradoearlycolleges.org

(limited to 100 certificates)
acsaregion13.org
coloradosprings.coloradoearlycolleges.org
coloradoearlycolleges.org
www.plummerpanthers.org
admin.sd925.org
admin.ambassadorhigh.org
admin.mtsd-vt.org
admin.clackamasmiddlecollege.org
windsorms.coloradoearlycolleges.org
admin.aes.uinta1.com
aurora.coloradoearlycolleges.org
admin.cecdc914.org
admin.acsc.net
admin.aes.uinta1.com
admin.ambassadorhigh.org
www.hopewell.k12.va.us
cfes.tomballisd.net
admin.aes.uinta1.com
admin.ambassadorhigh.org
admin.ambassadorhigh.org
admin.aes.uinta1.com
admin.ambassadorhigh.org
acsaregion13.org
admin.clackamasmiddlecollege.org
castlerock.coloradoearlycolleges.org
windsor.coloradoearlycolleges.org
admin.aes.uinta1.com
athletics.ambassadorhigh.org
coloradoearlycolleges.org
admin.ambassadorhigh.org
admin.acsc.net
coloradoearlycolleges.org
admin.aes.uinta1.com
www.missourimilitaryacademy.org
acsaregion13.org
acsaregion13.org
admin.alms.hermiston.k12.or.us
admin.ambassadorhigh.org
aurora.coloradoearlycolleges.org
admin.alms.hermiston.k12.or.us
plummerpanthers.org
windsor.coloradoearlycolleges.org
admin.acsc.net
admin.edlio.mx
acsaregion13.org
coloradosprings.coloradoearlycolleges.org
admin.clackamasmiddlecollege.org
admin.coloradoearlycolleges.org
bishopmacdonell.wellingtoncdsb.ca
gledhillelementary.org
admin.alms.hermiston.k12.or.us
inverness.coloradoearlycolleges.org
admin.aes.uinta1.com
ces.tomballisd.net
admin.primary.cusd1.com
acsaregion13.org
acsaregion13.org
admin.clackamasmiddlecollege.org
acsaregion13.org
abchandler.henderson.k12.ky.us
www.panolacharterschool.net
tca.tomballisd.net
acsaregion13.org
admin.alms.hermiston.k12.or.us
coloradoearlycolleges.org
admin.alms.hermiston.k12.or.us
coloradoearlycolleges.org
fortcollinsms.coloradoearlycolleges.org
acsaregion13.org
admin.cecdc914.org
admin.clackamasmiddlecollege.org
admin.aes.uinta1.com
admin.ambassadorhigh.org
weic.jeffersondavis.org
inverness.coloradoearlycolleges.org
wb.frenship.us
admin.ambassadorhigh.org
fcwestms.coloradoearlycolleges.org
www.bclaboston.org
admin.clackamasmiddlecollege.org
admin.acsc.net
acsaregion13.org
fortcollins.coloradoearlycolleges.org
highschool.otsegoknights.org
abchandler.henderson.k12.ky.us
inverness.coloradoearlycolleges.org
admin.sd925.org
coloradoearlycolleges.org
admin.clackamasmiddlecollege.org
admin.acsc.net
www.zionmarengo.net
admin.ivinter.apluscharterschools.org
admin.ambassadorhigh.org
admin.cusd1.com
admin.clackamasmiddlecollege.org
admin.es.victoriaschool.edu.mx
admin.athletics.ambassadorhigh.org
admin.ambassadorhigh.org
admin.clackamasmiddlecollege.org
pma.portervilleschools.org

Certificate

The complete raw certificate details for windsorms.coloradoearlycolleges.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307832527331450791826712459224925604408560
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-24 09:40:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-22 09:40:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'windsorms.coloradoearlycolleges.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1675 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.alms.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.coloradoearlycolleges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.crammiddleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dves.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fcwestms.coloradoearlycolleges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gsdacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hhes.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hhs.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.highschoolforartsandbusiness.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.notredameparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rhes.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.saltfork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ses.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sjboces.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sms.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.steinerschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wpes.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alms.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurora.coloradoearlycolleges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradoearlycolleges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradosprings.coloradoearlycolleges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crammiddleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dves.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcwestms.coloradoearlycolleges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortcollins.coloradoearlycolleges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortcollinsms.coloradoearlycolleges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsdacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhes.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhs.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'high.saltfork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highschoolforartsandbusiness.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juniorhigh.saltfork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'north.saltfork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notredameparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parker.coloradoearlycolleges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plummerpanthers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhes.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saltfork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ses.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjboces.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'south.saltfork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steinerschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windsorms.coloradoearlycolleges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpes.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aurora.coloradoearlycolleges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coloradoearlycolleges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crammiddleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fortcollins.coloradoearlycolleges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fortcollinsms.coloradoearlycolleges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gsdacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highschoolforartsandbusiness.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notredameparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plummerpanthers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saltfork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjboces.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steinerschool.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016cc3369e5b0000040300473045022100a0019e04d6bacbc1b0d4c0167a04de490cbd9d8992f542905a9c0e4db129609a0220701b50ed00c76312b820b61bde01a4dacb88a6b18d86d63d746e8dece85b8e75007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016cc3369c8b000004030046304402207ca184bd1af65726538fbbbd718264a3a7eb8b37ccff2e402fdf6e38a1ddc42802202f34dd974da6f4b2274659d4923325a9519b0031a67e75231bf13063ffbf0696
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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