ngc.lancasterisd.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e9:02:c3:ff:cb:06:c5:d6:06:82:5f:ad:b9:62:6b:5b:de was issued on by Let's Encrypt.

With 65 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ngc.lancasterisd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e9:02:c3:ff:cb:06:c5:d6:06:82:5f:ad:b9:62:6b:5b:de
Serial Number (int): 340626325429838248050694866107408786873310
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b4:df:d1:9f:05:07:61:36:5d:7b:16:f7:e1:44:21:af:2d:ff:b6:06
Fingerprint (sha256): 1f:c2:d8:c7:55:09:ea:f3:6e:44:cd:51:d4:fd:c4:63:89:ae:88:c0:a7:fe:09:56:7a:ea:f4:ce:43:54:bf:78

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ngc.lancasterisd.org

65

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ngc.lancasterisd.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.armstrong.pusd.org
admin.bchs.bradleyschools.org
admin.bcvs.bradleyschools.org
admin.bfes.bradleyschools.org
admin.bme.zcs.k12.in.us
admin.ces.bradleyschools.org
admin.cpcs.us
admin.decker.pusd.org
admin.east.kippneworleans.org
admin.fremont.pusd.org
admin.goal.bradleyschools.org
admin.harrsion.pusd.org
admin.hes.bradleyschools.org
admin.lexington.pusd.org
admin.lfms.bradleyschools.org
admin.madison.pusd.org
admin.maes.bradleyschools.org
admin.mckusd.org
admin.morial.kippneworleans.org
admin.nles.bradleyschools.org
admin.oges.bradleyschools.org
admin.oms.bradleyschools.org
admin.pes.bradleyschools.org
admin.pusd.org
admin.pves.bradleyschools.org
admin.tes.bradleyschools.org
admin.vves.bradleyschools.org
admin.wces.bradleyschools.org
admin.wvhs.bradleyschools.org
allison.pusd.org
bchs.bradleyschools.org
bcvs.bradleyschools.org
bfes.bradleyschools.org
ces.bradleyschools.org
cortez.pusd.org
east.kippneworleans.org
emerson.pusd.org
goal.bradleyschools.org
goldensprings.pusd.org
hes.bradleyschools.org
lfms.bradleyschools.org
lorbeer.pusd.org
lvstc.pusd.org
madisonchristianschool.com
maes.bradleyschools.org
morial.kippneworleans.org
ngc.lancasterisd.org
nles.bradleyschools.org
oges.bradleyschools.org
oms.bradleyschools.org
pes.bradleyschools.org
portlandvillageschool.org
pves.bradleyschools.org
tes.bradleyschools.org
vves.bradleyschools.org
wces.bradleyschools.org
willow.hsd153.org
wvhs.bradleyschools.org
www.bronxenvision.org
www.cpcs.us
www.fpcharter.org
www.hsd153.org
www.kippneworleans.org
www.mckusd.org
www.pueblonuevo.org

Other certificates including the domain name lancasterisd.org

(limited to 100 certificates)
aac.woccisd.net
admin.badenpowell.edu.mx
www.bradleyschools.org
cf.aceroschools.org
lancasterisd.org
lms.lancasterisd.org
admin.wjh.wintersisd.org
acc.ausdk12.org
mil.ldcsb.ca
admin.armstrong.pusd.org
exchange.lancasterisd.org
ble.lancasterisd.org
admin.wcms.mpusd.net
acc.ausdk12.org
acc.ausdk12.org
www.hwrsd.org
lancasterisd.org
admin.allison.pusd.org
admin.jsms.rsu14.org
www.brackettisd.net
www.stgregsschool.org
eduphoria.lancasterisd.org
occomets.org
eduphoria.lancasterisd.org
ngc.lancasterisd.org
morelandpreschool.moreland.org
aac.woccisd.net
exchange.lancasterisd.org
acc.ausdk12.org
www.hwrsd.org
eduphoria.lancasterisd.org
eduphoria.lancasterisd.org
admin.wjh.wintersisd.org
admin.cathedralchapelschool.org
exchange.lancasterisd.org
ngc.lancasterisd.org
admin.bmj.scott.k12.ms.us
acc.ausdk12.org
www.hwrsd.org
gwc.lancasterisd.org
hou.lancasterisd.org
exchange.lancasterisd.org
ckcs.lskysd.ca
admin.aes.cvsd.org
lancasterisd.org
admin.allison.pusd.org
rpm.lancasterisd.org
rowlandschools.org
admin.hs.gsd.wednet.edu
admin.aceroschools.org
admin.badenpowell.edu.mx
admin.rems.cherokee.k12.nc.us
rhe.lancasterisd.org
huntingtonisd.com
cf.aceroschools.org
www.lancasterisd.org
aac.woccisd.net
exchange.lancasterisd.org
lancasterisd.org
www.rsu14.org
eduphoria.lancasterisd.org
admin.bmj.scott.k12.ms.us
eduphoria.lancasterisd.org
castaichighschool.net
eduphoria.lancasterisd.org
acc.ausdk12.org
ohs.otsegops.org
admin.op.aceroschools.org
www.thrallisd.com
www.lancasterisd.org
ngc.lancasterisd.org
www.tcsk12.com
res.rlisd.org
eduphoria.lancasterisd.org
admin.athletics.rsu14.org
lancasterisd.org
eduphoria.lancasterisd.org
aac.woccisd.net
eduphoria.lancasterisd.org
www.cristoreysacramento.org
exchange.lancasterisd.org
acc.ausdk12.org
www.coahomak12.org
admin.ahs.cherokee.k12.nc.us
admin.huntingtonisd.com
admin.stjohn.k12.la.us
admin.badenpowell.edu.mx
www.lancasterisd.org
fallbrookhs.org
aac.woccisd.net
exchange.lancasterisd.org
*.lancasterisd.org
eduphoria.lancasterisd.org
admin.bes.cvsd.org
lancasterisd.org
ngc.lancasterisd.org
rhe.lancasterisd.org
admin.badenpowell.edu.mx
jsms.rsu14.org
www.badenpowell.edu.mx

Certificate

The complete raw certificate details for ngc.lancasterisd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINVjCCDD6gAwIBAgISA+kCw//LBsXWBoJfrblia1veMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA4MTcwMTA4MDVaFw0x
ODExMTUwMTA4MDVaMB8xHTAbBgNVBAMTFG5nYy5sYW5jYXN0ZXJpc2Qub3JnMIIC
IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQbTHb+2z7rfYV
Cl+ph5m8FJJOEgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5pV3R4RBgn18R
THnTD9fS27JxyeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGrmQF3Z/h2e6St
agubO+pVwFzG8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK7wAhJO8el2z3
75LDd2VIwrdWQP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlWZ1AdjOKfRiY0
ckFuu/DYkuvkNKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5Tu7zbek/MR/J
MR9nceWyZ2Mund+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzwWzBvTD8F7q6c
kUbIgpeo7stn7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuaivjW/P+Tm64Xj
XNjP9F1W8+5tlcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ4Iudx/o3Q4E2
w6Aud9PYyV05pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/h0omUmCIDiQV
G30eHhb3OIP3bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUnohkUi6ikD4me
6o58sq/IQVmyem1M/E0CAwEAAaOCCV8wgglbMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
FgQUL2vITWwsLjLyACD/LU1sWvxuurswHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3
pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2Nz
cC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2Vy
dC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzCCBmAGA1UdEQSCBlcwggZTghhhZG1p
bi5hcm1zdHJvbmcucHVzZC5vcmeCHWFkbWluLmJjaHMuYnJhZGxleXNjaG9vbHMu
b3Jngh1hZG1pbi5iY3ZzLmJyYWRsZXlzY2hvb2xzLm9yZ4IdYWRtaW4uYmZlcy5i
cmFkbGV5c2Nob29scy5vcmeCF2FkbWluLmJtZS56Y3MuazEyLmluLnVzghxhZG1p
bi5jZXMuYnJhZGxleXNjaG9vbHMub3Jngg1hZG1pbi5jcGNzLnVzghVhZG1pbi5k
ZWNrZXIucHVzZC5vcmeCHWFkbWluLmVhc3Qua2lwcG5ld29ybGVhbnMub3JnghZh
ZG1pbi5mcmVtb250LnB1c2Qub3Jngh1hZG1pbi5nb2FsLmJyYWRsZXlzY2hvb2xz
Lm9yZ4IXYWRtaW4uaGFycnNpb24ucHVzZC5vcmeCHGFkbWluLmhlcy5icmFkbGV5
c2Nob29scy5vcmeCGGFkbWluLmxleGluZ3Rvbi5wdXNkLm9yZ4IdYWRtaW4ubGZt
cy5icmFkbGV5c2Nob29scy5vcmeCFmFkbWluLm1hZGlzb24ucHVzZC5vcmeCHWFk
bWluLm1hZXMuYnJhZGxleXNjaG9vbHMub3JnghBhZG1pbi5tY2t1c2Qub3Jngh9h
ZG1pbi5tb3JpYWwua2lwcG5ld29ybGVhbnMub3Jngh1hZG1pbi5ubGVzLmJyYWRs
ZXlzY2hvb2xzLm9yZ4IdYWRtaW4ub2dlcy5icmFkbGV5c2Nob29scy5vcmeCHGFk
bWluLm9tcy5icmFkbGV5c2Nob29scy5vcmeCHGFkbWluLnBlcy5icmFkbGV5c2No
b29scy5vcmeCDmFkbWluLnB1c2Qub3Jngh1hZG1pbi5wdmVzLmJyYWRsZXlzY2hv
b2xzLm9yZ4IcYWRtaW4udGVzLmJyYWRsZXlzY2hvb2xzLm9yZ4IdYWRtaW4udnZl
cy5icmFkbGV5c2Nob29scy5vcmeCHWFkbWluLndjZXMuYnJhZGxleXNjaG9vbHMu
b3Jngh1hZG1pbi53dmhzLmJyYWRsZXlzY2hvb2xzLm9yZ4IQYWxsaXNvbi5wdXNk
Lm9yZ4IXYmNocy5icmFkbGV5c2Nob29scy5vcmeCF2JjdnMuYnJhZGxleXNjaG9v
bHMub3JnghdiZmVzLmJyYWRsZXlzY2hvb2xzLm9yZ4IWY2VzLmJyYWRsZXlzY2hv
b2xzLm9yZ4IPY29ydGV6LnB1c2Qub3JnghdlYXN0LmtpcHBuZXdvcmxlYW5zLm9y
Z4IQZW1lcnNvbi5wdXNkLm9yZ4IXZ29hbC5icmFkbGV5c2Nob29scy5vcmeCFmdv
bGRlbnNwcmluZ3MucHVzZC5vcmeCFmhlcy5icmFkbGV5c2Nob29scy5vcmeCF2xm
bXMuYnJhZGxleXNjaG9vbHMub3JnghBsb3JiZWVyLnB1c2Qub3Jngg5sdnN0Yy5w
dXNkLm9yZ4IabWFkaXNvbmNocmlzdGlhbnNjaG9vbC5jb22CF21hZXMuYnJhZGxl
eXNjaG9vbHMub3Jnghltb3JpYWwua2lwcG5ld29ybGVhbnMub3JnghRuZ2MubGFu
Y2FzdGVyaXNkLm9yZ4IXbmxlcy5icmFkbGV5c2Nob29scy5vcmeCF29nZXMuYnJh
ZGxleXNjaG9vbHMub3JnghZvbXMuYnJhZGxleXNjaG9vbHMub3JnghZwZXMuYnJh
ZGxleXNjaG9vbHMub3Jnghlwb3J0bGFuZHZpbGxhZ2VzY2hvb2wub3JnghdwdmVz
LmJyYWRsZXlzY2hvb2xzLm9yZ4IWdGVzLmJyYWRsZXlzY2hvb2xzLm9yZ4IXdnZl
cy5icmFkbGV5c2Nob29scy5vcmeCF3djZXMuYnJhZGxleXNjaG9vbHMub3JnghF3
aWxsb3cuaHNkMTUzLm9yZ4IXd3Zocy5icmFkbGV5c2Nob29scy5vcmeCFXd3dy5i
cm9ueGVudmlzaW9uLm9yZ4ILd3d3LmNwY3MudXOCEXd3dy5mcGNoYXJ0ZXIub3Jn
gg53d3cuaHNkMTUzLm9yZ4IWd3d3LmtpcHBuZXdvcmxlYW5zLm9yZ4IOd3d3Lm1j
a3VzZC5vcmeCE3d3dy5wdWVibG9udWV2by5vcmcwgf4GA1UdIASB9jCB8zAIBgZn
gQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz
LmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmlj
YXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBh
bmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGlj
eSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzCC
AQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AMEWSuCnctLUOS3ICsEHcNTwxJvemRpI
QMH6B1Fk9jNgAAABZUWjxP4AAAQDAEcwRQIhAPJrELp5yy7PQVbbQIby7plZTah6
jT8N+CLPdFH8MJxBAiAdlJm0EYXiCbwQjwJWfm8Xx9mLpXmK1LltVgkHPX/VhgB2
ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABZUWjxRAAAAQDAEcw
RQIhALfFFhXPSpRP1dICoa2YOUkfD57lhVoQ5fNPiSIE2e0UAiAaMEmn1vherb+N
t+irPWdAy+3/8uRkWwT8EcgNdUHnzDANBgkqhkiG9w0BAQsFAAOCAQEAkwujF7Ce
YKvmQBy5ar2w9Lb7QW5vg/yt3/suB4DkMuyU9gamsK06itVjlLHoMvyPa+FvLdDJ
soAf2fgikIoZ5OjDSBMb/GtAozU9eUof7ycoyklc0k3Nhnq+tt0UmSeSP9m+UNex
u0vMIpyl1BJy3XIn0oMLlY5o7zH8hYqpwBdblw1uf25dZojT0YtqYh5AdyRlKmqa
bTblmEwe85CohXByhLQTyzllNXEF71sHslG0PEh+xK3+6xEQR1svNSg52mZWIbif
R/WCKrO0WKY+pO6fCH4XC1SWnONP55IOvwiOIskHJnh3OlT6YRuZWITXrVWL4OT/
WLRp3WltoRn2fA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340626325429838248050694866107408786873310
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-17 01:08:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-15 01:08:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ngc.lancasterisd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1623 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.armstrong.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bchs.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bcvs.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bfes.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bme.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ces.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cpcs.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.decker.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.east.kippneworleans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fremont.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.goal.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.harrsion.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hes.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lexington.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lfms.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.madison.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.maes.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mckusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.morial.kippneworleans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nles.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.oges.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.oms.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pes.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pves.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tes.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.vves.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wces.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wvhs.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allison.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bchs.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcvs.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bfes.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ces.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cortez.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'east.kippneworleans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emerson.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goal.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldensprings.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hes.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lfms.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lorbeer.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lvstc.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madisonchristianschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maes.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morial.kippneworleans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngc.lancasterisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nles.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oges.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oms.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pes.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portlandvillageschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pves.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tes.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vves.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wces.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willow.hsd153.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wvhs.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bronxenvision.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpcs.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fpcharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsd153.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kippneworleans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mckusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pueblonuevo.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f633600000016545a3c4fe0000040300473045022100f26b10ba79cb2ecf4156db4086f2ee99594da87a8d3f0df822cf7451fc309c4102201d9499b41185e209bc108f02567e6f17c7d98ba5798ad4b96d5609073d7fd586007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016545a3c5100000040300473045022100b7c51615cf4a944fd5d202a1ad9839491f0f9ee5855a10e5f34f892204d9ed1402201a3049a7d6f85eadbf8db7e8ab3d6740cbedfff2e4645b04fc11c80d7541e7cc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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