www.windham.k12.ct.us

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1d:bd:0e:3e:2f:58:98:9f:24:93:36:f7:77:13:0f:14:98 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.windham.k12.ct.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1d:bd:0e:3e:2f:58:98:9f:24:93:36:f7:77:13:0f:14:98
Serial Number (int): 271456344480607862221568992526759583749272
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9c:23:46:14:9d:a0:99:3a:52:f2:b2:74:9b:b3:73:8b:3e:a8:8b:47
Fingerprint (sha256): 16:09:9d:f4:46:b7:33:32:97:32:14:61:38:a7:94:d1:57:ff:69:2c:95:31:25:16:7c:39:5a:b1:63:b9:98:bd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.windham.k12.ct.us

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.windham.k12.ct.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.acsc.net
admin.bhs.burkburnettisd.org
admin.bitely.garvey.k12.ca.us
admin.bms.burkburnettisd.org
admin.brhs.bordentown.k12.nj.us
admin.brms.bordentown.k12.nj.us
admin.carlton.unionsd.org
admin.cbs.bordentown.k12.nj.us
admin.cbs.windhamps.org
admin.chaforward.org
admin.chapmanelementary.org
admin.cheneysd.org
admin.cocisd.org
admin.darbyelementary.org
admin.dewey.garvey.k12.ca.us
admin.ecc.windhamps.org
admin.ees.burkburnettisd.org
admin.emerson.garvey.k12.ca.us
admin.es.boydisd.net
admin.es.fsd2.org
admin.garveyint.garvey.k12.ca.us
admin.hes.burkburnettisd.org
admin.hillcrest.garvey.k12.ca.us
admin.hs.boydisd.net
admin.is.boydisd.net
admin.mes.mcduffie.k12.ga.us
admin.mis.bordentown.k12.nj.us
admin.ms.boydisd.net
admin.mvista.garvey.k12.ca.us
admin.nat.windhamps.org
admin.newlhs.com
admin.nws.windhamps.org
admin.ola.school
admin.pms.bordentown.k12.nj.us
admin.pv.sd44.org
admin.rmckenna.org
admin.sphsgoldeneagles.org
admin.stmarysspokane.com
admin.swe.windhamps.org
admin.tes.burkburnettisd.org
admin.wcs.windhamps.org
admin.wh.sd44.org
admin.whs.windhamps.org
admin.wms.windhamps.org
arete.prsd.us
bitely.garvey.k12.ca.us
brhs.bordentown.k12.nj.us
brms.bordentown.k12.nj.us
cbs.bordentown.k12.nj.us
cbs.windham.k12.ct.us
cbs.windhamps.org
chaforward.org
darbyelementary.org
dewey.garvey.k12.ca.us
ecc.windham.k12.ct.us
ecc.windhamps.org
emerson.garvey.k12.ca.us
es.boydisd.net
es.fsd2.org
garveyint.garvey.k12.ca.us
hillcrest.garvey.k12.ca.us
hpems.flo2.k12.sc.us
hs.boydisd.net
is.boydisd.net
mis.bordentown.k12.nj.us
ms.boydisd.net
ms.fsd2.org
nat.windham.k12.ct.us
nat.windhamps.org
newlhs.com
north.legacyprep.org
nws.windham.k12.ct.us
nws.windhamps.org
ola.school
pms.bordentown.k12.nj.us
stmarysspokane.com
stmarysspokane.org
swe.windham.k12.ct.us
swe.windhamps.org
tes.mcduffie.k12.ga.us
wcs.windham.k12.ct.us
wcs.windhamps.org
wh.sd44.org
whs.windham.k12.ct.us
whs.windhamps.org
wms.windham.k12.ct.us
wms.windhamps.org
www.acsc.net
www.chaforward.org
www.chapmanelementary.org
www.cheneysd.org
www.cocisd.org
www.darbyelementary.org
www.hpems.flo2.k12.sc.us
www.newlhs.com
www.ola.school
www.sphsgoldeneagles.org
www.stmarysspokane.com
www.stmarysspokane.org
www.windham.k12.ct.us

Other certificates including the domain name windham.k12.ct.us

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.windham.k12.ct.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271456344480607862221568992526759583749272
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-06 11:14:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-06 11:14:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.windham.k12.ct.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2313 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.acsc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bhs.burkburnettisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bitely.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bms.burkburnettisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.brhs.bordentown.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.brms.bordentown.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.carlton.unionsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cbs.bordentown.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cbs.windhamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.chaforward.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.chapmanelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cheneysd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cocisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.darbyelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dewey.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ecc.windhamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ees.burkburnettisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.emerson.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.es.boydisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.es.fsd2.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.garveyint.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hes.burkburnettisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hillcrest.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hs.boydisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.is.boydisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mes.mcduffie.k12.ga.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mis.bordentown.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ms.boydisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mvista.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nat.windhamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.newlhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nws.windhamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ola.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pms.bordentown.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pv.sd44.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rmckenna.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sphsgoldeneagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stmarysspokane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.swe.windhamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tes.burkburnettisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wcs.windhamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wh.sd44.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.whs.windhamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wms.windhamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arete.prsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitely.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brhs.bordentown.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brms.bordentown.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbs.bordentown.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbs.windham.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbs.windhamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chaforward.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darbyelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dewey.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecc.windham.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecc.windhamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emerson.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.boydisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.fsd2.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garveyint.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillcrest.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpems.flo2.k12.sc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.boydisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is.boydisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mis.bordentown.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.boydisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.fsd2.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nat.windham.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nat.windhamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newlhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'north.legacyprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nws.windham.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nws.windhamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ola.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pms.bordentown.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysspokane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swe.windham.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swe.windhamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tes.mcduffie.k12.ga.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcs.windham.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcs.windhamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wh.sd44.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whs.windham.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whs.windhamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wms.windham.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wms.windhamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acsc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chaforward.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chapmanelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheneysd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cocisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.darbyelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hpems.flo2.k12.sc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newlhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ola.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sphsgoldeneagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysspokane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.windham.k12.ct.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001682315dfe60000040300473045022100b84b7679f8766588f1329dd94417ff84ab4e5c4fe995e4c2acc60d335676f86f02202a1f8ccab5bcc18b1356a39dcf77fe01bb78a893d75a52199a01682f011c3ece007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001682315de0800000403004730450220422dc037d6315ae08f417fa64feabcf7f809e83fb3c44ae128f200bb91435781022100e5d28a1196806fcfc50393e22af61e4477663f4e1dd42ec8e04793bf26ddf285
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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