powell.cps.edu

- Chicago Public Schools -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number ab:11:59:b8:52:bc:e8:a3:af:0f:d0:6e:8e:cb:04:be was issued on by Sectigo Limited.

With 80 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Chicago Public Schools

Organization: Chicago Public Schools
Organization unit: Hosted by Chicago Public Schools
Organization unit: Multi-Domain SSL
Address: 2nd Floor
Address: 42 W. Madison Street
Postal code: 60603
State / Province: Illinois
Locality: Chicago
Country: US

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): ab:11:59:b8:52:bc:e8:a3:af:0f:d0:6e:8e:cb:04:be
Serial Number (int): 227388076063858481427437560210158978238
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 4f:b6:ff:71:aa:70:71:96:f9:dc:04:97:05:04:e1:01:47:5b:f1:ed
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 29:6d:20:ac:ac:ff:1c:e0:1d:bf:f6:a9:26:c8:22:da:29:5e:9d:8e
Fingerprint (sha256): 14:bb:51:ce:f4:a6:57:76:9f:02:4a:83:83:30:11:d5:95:4f:dc:3f:d4:d8:f9:c0:e3:f3:29:e4:ae:a2:84:e0

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate powell.cps.edu

80

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for powell.cps.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

powell.cps.edu
*.bond.cps.edu
*.bouchet-brynmawr.cps.edu
*.cardenas.cps.edu
*.carson.cps.edu
*.cather.cps.edu
*.chase.cps.edu
*.crown.cps.edu
*.deneen.cps.edu
*.dever.cps.edu
*.dubois.cps.edu
*.edwards.cps.edu
*.esmond.cps.edu
*.fosterpark.cps.edu
*.funston.cps.edu
*.goudy.cps.edu
*.hanson.cps.edu
*.jensen.cps.edu
*.keller.cps.edu
*.kingacademy.cps.edu
*.lara.cps.edu
*.lavizzo.cps.edu
*.leland.cps.edu
*.libby.cps.edu
*.mccormick.cps.edu
*.mcpherson.cps.edu
*.mooselementary.cps.edu
*.morrill.cps.edu
*.mtvernon.cps.edu
*.penn.cps.edu
*.pilsen.cps.edu
*.powell.cps.edu
*.reinberg.cps.edu
*.sawyer.cps.edu
*.simpsonacademy.cps.edu
*.stowe.cps.edu
*.swift.cps.edu
*.tonti.cps.edu
*.webster.cps.edu
*.wellshs.cps.edu
*.westcott.cps.edu
bond.cps.edu
bouchet-brynmawr.cps.edu
cardenas.cps.edu
carson.cps.edu
cather.cps.edu
chase.cps.edu
crown.cps.edu
deneen.cps.edu
dever.cps.edu
dubois.cps.edu
edwards.cps.edu
esmond.cps.edu
fosterpark.cps.edu
funston.cps.edu
goudy.cps.edu
hanson.cps.edu
jensen.cps.edu
keller.cps.edu
kingacademy.cps.edu
lara.cps.edu
lavizzo.cps.edu
leland.cps.edu
libby.cps.edu
mccormick.cps.edu
mcpherson.cps.edu
mooselementary.cps.edu
morrill.cps.edu
mtvernon.cps.edu
penn.cps.edu
pilsen.cps.edu
reinberg.cps.edu
sawyer.cps.edu
simpsonacademy.cps.edu
stowe.cps.edu
swift.cps.edu
tonti.cps.edu
webster.cps.edu
wellshs.cps.edu
westcott.cps.edu

Other certificates including the domain name cps.edu

(limited to 100 certificates)
hearst.cps.edu
staging.fssboh.cps.edu
afs.cps.edu
*.connect.cps.edu
tcps1j.hcm.cps.edu
powell.cps.edu
dev.blog.cps.edu
corkery.cps.edu
*.id.cps.edu
pcps1j.hcm.cps.edu
gocpsresults.cps.edu
tls.automattic.com
kozminski.cps.edu
marine.cps.edu
chooseyourfuture.cps.edu
trainer03.aspen.cps.edu
dcps5j-ren.hcm.cps.edu
*.connect.cps.edu
elm.cps.edu
casestandards.cps.edu
peterson.cps.edu
tcpsepadm-ren.epm.cps.edu
haines.cps.edu
support.cps.edu
block.icf.cps.edu
ciwp.cps.edu
*.id.cps.edu
textbooks.cps.edu
randolph.cps.edu
hayt.cps.edu
edwards.cps.edu
lead.cps.edu
powell.cps.edu
orvillebright.org
tcps1qadm.elm.cps.edu
dcps6j-ren.hcm.cps.edu
tonti.cps.edu
www.sayre.cps.edu
mtgreenwood.cps.edu
edwards.cps.edu
boone.cps.edu
*.cps.edu
hayt.cps.edu
dev.wcc-content.cps.edu
tonti.cps.edu
www.reflectandlearn.cps.edu
vcps2j-ren.hcm.cps.edu
pcps1jadm.hcm.cps.edu
blair.cps.edu
dev.secure2.cps.edu
dcps6j.hcm.cps.edu
pcpsepadm-ren.epm.cps.edu
stowe.cps.edu
connect.cps.edu
chavez.cps.edu
pcpsepadm.epm.cps.edu
kingacademy.cps.edu
vcps1p-ren.epm.cps.edu
dcps4j.hcm.cps.edu
ssce.cps.edu
training.fssboh.cps.edu
murray.cps.edu
vcps1p.epm.cps.edu
admin.aes.cvsd.org
twain.cps.edu
dev.test.cps.edu
gsso.cps.edu
powell.cps.edu
www.keller.cps.edu
chase.cps.edu
elm.cps.edu
lavizzo.cps.edu
sherwood.cps.edu
powell.cps.edu
tcps1jadm.hcm.cps.edu
tonti.cps.edu
*.dev.connect.cps.edu
textbooks.cps.edu
gary.cps.edu
tcpsepadm-ren.epm.cps.edu
peck.cps.edu
tcpsep.epm.cps.edu
ssc.cps.edu
lara.cps.edu
teach.cps.edu
pcps1q.elm.cps.edu
fssboh.cps.edu
amundsenhs.cps.edu
powell.cps.edu
pcps1jadm-ren.hcm.cps.edu
cps.edu
hayt.cps.edu
www.nccs.k12.nc.us
trainingfss.cps.edu
carnegie.cps.edu
powell.cps.edu
www.reflectandlearn.cps.edu
sawyer.cps.edu
blog.cps.edu
lead.cps.edu

Certificate

The complete raw certificate details for powell.cps.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNkS43fKb55ojPKCP54x
+f85Z3p/dKD5aRToGr5xQzWhn0HP+JcgMdVf7k7lsxwFT78806vwjGGVogpRFq0l
8UQVsuMFDlIu0n4nQF3os4hkk+TRBpFABPXJv1aIYHH8CUhpy6AQAyU4PHMqLGxs
0J89/mss3mRjX+Lj7qfACcYlbcOgz6WvSY2B20jWNbxnI+T6xDnrD6D38tAYwxTK
EeSVhEswiWLsr3HPNKatTN5NlZGLlbvNOH/x9nz+0OcOsCfFQ20sTWBKZGXFKzfe
yOe4do0k8xbTMRi6HUFCfmj0uV9sJZwkzVHGQUT3VvomJtPzoG+/sRk6MPHej2la
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 227388076063858481427437560210158978238
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '60603'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2nd Floor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '42 W. Madison Street'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago Public Schools'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by Chicago Public Schools'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Multi-Domain SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'powell.cps.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21820031526299260505203190477898719570446815424720607384926510336227043452754206804749665160864361204167560921193957013765867428962277557735935531778758708304437145780283456199012956677053963217405416788884357118382415994567562655086501175255701441317294299304925834048239670792261280966504868206441978315743829407451021900539355939503721112330558697201040574651130833366896540915234789526874572820683250886237339524886357667994536613046791432295000249918883877440274713253763555562718692112833756652462028126671561051811100554738572063817973494010252355666556417899022138653637026562748428821881845260932232702941821
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4fb6ff71aa707196f9dc04970504e101475bf1ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1446 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powell.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bond.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bouchet-brynmawr.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cardenas.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carson.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cather.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chase.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crown.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deneen.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dever.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dubois.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edwards.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esmond.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fosterpark.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funston.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goudy.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hanson.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jensen.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keller.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kingacademy.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lara.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lavizzo.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leland.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.libby.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mccormick.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcpherson.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mooselementary.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.morrill.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtvernon.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.penn.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pilsen.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.powell.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reinberg.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sawyer.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simpsonacademy.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stowe.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swift.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tonti.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webster.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wellshs.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westcott.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bond.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bouchet-brynmawr.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardenas.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carson.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cather.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chase.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crown.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deneen.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dever.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dubois.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edwards.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esmond.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fosterpark.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funston.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goudy.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hanson.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jensen.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keller.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingacademy.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lara.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lavizzo.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leland.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libby.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mccormick.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcpherson.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mooselementary.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morrill.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtvernon.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penn.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilsen.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reinberg.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sawyer.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simpsonacademy.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stowe.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swift.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tonti.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webster.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellshs.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westcott.cps.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016c1f8f2efc0000040300473045022100e09204867e43f9e9cb1a4d20dd8da9eb5cd30f0c58d4f88bb3f356e9610a3fea02202643bcce2e3689e6d1e2ab5bae1f793bcfd809b73734140c6400e3e92c001fae0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016c1f8f2f220000040300463044022023481223084c3940a4cc14930025579985437e899c7e0bcb26c70a43d1c4319902204bd386790787b0eb3f2103a076bbc470b2d0ab2ca31c13aa0b0a5094bde397d4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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