elkhartisd.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e5:27:51:fc:ba:2c:79:87:72:d9:14:85:38:e7:87:34:aa was issued on by Let's Encrypt.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=elkhartisd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e5:27:51:fc:ba:2c:79:87:72:d9:14:85:38:e7:87:34:aa
Serial Number (int): 339313785413974223721034115520977242109098
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1f:ef:ee:78:6d:d8:be:92:40:7c:a3:71:98:a5:ec:13:e9:de:0c:c3
Fingerprint (sha256): 1f:a5:5e:c5:61:50:11:37:fa:85:5b:56:ca:f5:51:82:7a:5c:e4:63:fe:1c:50:9f:b8:46:f3:9e:75:9d:bd:9a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate elkhartisd.org

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for elkhartisd.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.elkhartisd.org
admin.es.elkhartisd.org
admin.holyfamilyhs.com
admin.hs.elkhartisd.org
admin.is.elkhartisd.org
admin.kahukuhigh.org
admin.ms.elkhartisd.org
admin.orcaeagles.org
admin.phillips.k12.wi.us
admin.sbdiocesecef.org
admin.tahquitzhs.org
admin.triviumcharter.org
admin.vciseagles.org
bradley.usd207.org
cfh.chesterfieldschools.org
chesterfieldschools.org
chs.chesterfieldschools.org
cis.chesterfieldschools.org
cnh.chesterfieldschools.org
colehs.fshisd.net
colems.fshisd.net
coop.fshisd.net
cps.chesterfieldschools.org
crms.chesterfieldschools.org
cte.chesterfieldschools.org
edwards.tisd.org
ees.chesterfieldschools.org
eisenhower.usd207.org
elkhartisd.org
es.elkhartisd.org
es.roosevelt.k12.tx.us
fa.arrowacademy.org
fshelem.fshisd.net
garcia.tisd.org
holyfamilyhs.com
hs.elkhartisd.org
hs.roosevelt.k12.tx.us
is.elkhartisd.org
jefferson.tisd.org
jes.chesterfieldschools.org
jh.roosevelt.k12.tx.us
kahukuhigh.org
kennedy-powell.tisd.org
lamar.tisd.org
lms.chesterfieldschools.org
macarthur.usd207.org
meridith-dunbar.tisd.org
mes.chesterfieldschools.org
mhs.chesterfieldschools.org
ms.elkhartisd.org
nhms.chesterfieldschools.org
orcaeagles.org
patton.usd207.org
pes.chesterfieldschools.org
phillips.k12.wi.us
pps.chesterfieldschools.org
pve.chesterfieldschools.org
raye-allen.tisd.org
res.chesterfieldschools.org
sbdiocesecef.org
scott.tisd.org
south.fisd.us
tahquitzhs.org
thornton.tisd.org
ths.tisd.org
tisd.org
travis.tisd.org
triviumcharter.org
vciseagles.org
webster.usd465.com
www.arrowacademy.org
www.chesterfieldschools.org
www.elkhartisd.org
www.fshisd.net
www.fuchsmizrachi.org
www.hbuhsd.edu
www.hemetusd.k12.ca.us
www.holyfamilyhs.com
www.jecc.org
www.kahukuhigh.org
www.orcaeagles.org
www.phillips.k12.wi.us
www.reaganacademy.org
www.roosevelt.k12.tx.us
www.sbdiocesecef.org
www.smcjuhsd.org
www.tahquitzhs.org
www.tisd.org
www.triviumcharter.org
www.usd207.org
www.vciseagles.org
www2.smcjuhsd.org

Other certificates including the domain name elkhartisd.org

(limited to 100 certificates)
admin.adultlearning.sunrisesd.ca
lp.parkerusd.org
admin.elkhartisd.org
admin.phillips.k12.wi.us
sgmission.org
admin.va.davidson.k12.nc.us
admin.triviumcharter.org
dz.aceroschools.org
elkhartisd.org
www.rebsamen.mx
admin.breed.exteraschools.org
es.elkhartisd.org
lifeschools.net
www.grandville.k12.mi.us
admin.fges.davidson.k12.nc.us
www.tisd.org
rvs.monroe.k12.tn.us
mas.mpusd.net
admin.wayside.bcsd.com
admin.es.elkhartisd.org
admin.es.elkhartisd.org
admin.breed.exteraschools.org
elkhartisd.org
blc.arrowacademy.org
admin.breed.exteraschools.org
admin.adultlearning.sunrisesd.ca
admin.aristoiclassical.org
admin.tahquitzhs.org
triviumcharter.org
wheatley.tisd.org
admin.stanthonyeagles.org
admin.elkhartisd.org
admin.breed.exteraschools.org
admin.breed.exteraschools.org
meridith-dunbar.tisd.org
hy.hpisd.org
admin.elkhartisd.org
hs.elkhartisd.org
www.monroe.k12.tn.us
admin.elkhartisd.org
westernhills.tisd.org
admin.adulted.kcusd.com
hartorah.org
admin.ms.elkhartisd.org
admin.holyfamilyhs.com
admin.oghs.davidson.k12.nc.us
es.glendaleacademy.org
admin.nes.davidson.k12.nc.us
lalc.arrowacademy.org
admin.cvilleschools.com
ms.elkhartisd.org
admin.breed.exteraschools.org
cis.gobearsgo.net
admin.breed.exteraschools.org
admin.adulted.kcusd.com
admin.nes.davidson.k12.nc.us
bonham.tisd.org
admin.ves.monroe.k12.tn.us
admin.breed.exteraschools.org
is.elkhartisd.org
hs.elkhartisd.org
admin.wal.davidson.k12.nc.us
admin.es.elkhartisd.org
admin.sme.davidson.k12.nc.us
admin.elkhartisd.org
ae.chesterfieldschools.org
cherokeeisd.net
admin.bces.davidson.k12.nc.us
admin.hs.hpisd.org
admin.adulted.kcusd.com
admin.elkhartisd.org
www.elkhartisd.org
es.glendaleacademy.org
admin.es.elkhartisd.org
admin.colonies.sunrisesd.ca
admin.adulted.kcusd.com
ths.tisd.org

Certificate

The complete raw certificate details for elkhartisd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339313785413974223721034115520977242109098
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-18 09:53:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-16 09:53:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'elkhartisd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2023 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.es.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.holyfamilyhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hs.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.is.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kahukuhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ms.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.orcaeagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.phillips.k12.wi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sbdiocesecef.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tahquitzhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.triviumcharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.vciseagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bradley.usd207.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfh.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chs.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cis.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnh.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colehs.fshisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colems.fshisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coop.fshisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cps.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crms.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cte.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edwards.tisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ees.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eisenhower.usd207.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.roosevelt.k12.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fa.arrowacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fshelem.fshisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garcia.tisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamilyhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.roosevelt.k12.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jefferson.tisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jes.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jh.roosevelt.k12.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kahukuhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kennedy-powell.tisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lamar.tisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lms.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macarthur.usd207.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meridith-dunbar.tisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mes.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhs.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhms.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orcaeagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patton.usd207.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pes.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phillips.k12.wi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pps.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pve.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raye-allen.tisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'res.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbdiocesecef.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scott.tisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'south.fisd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tahquitzhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thornton.tisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ths.tisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travis.tisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triviumcharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vciseagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webster.usd465.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arrowacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fshisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fuchsmizrachi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbuhsd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hemetusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamilyhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jecc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kahukuhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orcaeagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phillips.k12.wi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reaganacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roosevelt.k12.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sbdiocesecef.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smcjuhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tahquitzhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.triviumcharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usd207.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vciseagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.smcjuhsd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169906f52bc000004030046304402205bb3fa2ecbf75fbf4978c14fe3e9bc75a3e32ff5e6bbbda383d091e7c1b0f39302202dc34f17f56cff60b2075afd3d33b1404f6573cb87831256474f8bdddbf89d29007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169906f52bd0000040300473045022100f6c380bfe9daba89e7223bf433aaf47826ff877f301743e08d4598370088b7d5022051251151c9fbfb8f9444298c3a4ada10a2d82aa272b3c3e71a905ec2cf71f543
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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