ashlandcityccs.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:52:28:96:27:df:bf:bd:71:f0:f2:d1:d8:1a:82:13:7f:c7 was issued on by Let's Encrypt.

With 73 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ashlandcityccs.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:52:28:96:27:df:bf:bd:71:f0:f2:d1:d8:1a:82:13:7f:c7
Serial Number (int): 376406246587659312894576753712335668084679
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fd:5c:02:a5:5c:71:37:03:23:38:80:0d:99:0b:d9:91:7d:54:01:4d
Fingerprint (sha256): 1f:e0:3b:f1:b9:28:57:ad:d8:8b:24:06:5d:91:8b:5c:58:68:02:bb:67:88:85:3c:d9:cf:af:78:14:67:3b:03

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ashlandcityccs.net

73

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ashlandcityccs.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.bereanchristian.com
admin.bes.lammersvilleschooldistrict.net
admin.bonnerprendie.com
admin.bpusd.net
admin.cheathamcountyschools.net
admin.cheathamhighccs.net
admin.colegioangloamericanohgo.edu.mx
admin.cranburyschool.org
admin.eastcheathamccs.net
admin.gageparkhs.org
admin.glenknoll.org
admin.harpethmiddleccs.net
admin.kraemerms.org
admin.pegramccs.net
admin.qes.lammersvilleschooldistrict.net
admin.sainte-school.org
admin.sttheresaschoolpalmsprings.org
admin.thames.hattiesburgpsd.com
admin.westcheathamccs.net
aes.lammersvilleschooldistrict.net
afsenyc.org
ashlandcityccs.net
bbhs.bbrook.org
bereanchristian.org
bronxdalehs.org
central.bpusd.net
deanza.bpusd.net
debusk.greenek12.org
elwin.bpusd.net
foster.bpusd.net
geddes.bpusd.net
glenknoll.org
grandcenterartsacademy.org
healthystartacademy.com
heath.bpusd.net
hes.lammersvilleschooldistrict.net
holland.bpusd.net
jones.bpusd.net
kenmore.bpusd.net
lacountycharterselpa.org
lammersvilleschooldistrict.net
lisanorthhigh.org
mhhs.lammersvilleschooldistrict.net
mhs.molineschools.org
msdurham.org
nphs.bpusd.net
pleasantview.bpusd.net
santafe.bpusd.net
sierravistajr.bpusd.net
sttheresaschoolpalmsprings.org
thames.hattiesburgpsd.com
tracy.bpusd.net
twenty-eight-st.org
vineland.bpusd.net
www.annaleeelementaryandsteammagnet.org
www.ashlandcityccs.net
www.bpusd.net
www.ccprep-academy.org
www.cheathammiddleccs.net
www.colegioangloamericanohgo.edu.mx
www.cranburyschool.org
www.estrellitahigh.com
www.gageparkhs.org
www.healthystartacademy.com
www.kingstonspringsccs.net
www.kraemerms.org
www.lisanorthhigh.org
www.mbapchs.org
www.msdurham.org
www.pleasantviewccs.net
www.saltlakespa.org
www.sttheresaschoolpalmsprings.org
www.sycamoremiddleccs.net

Other certificates including the domain name ashlandcityccs.net

(limited to 100 certificates)
ms.bsd29j.com
www.cranburyschool.org
admin.bonnerprendie.com
www.ashlandcityccs.net
admin.estrellitahigh.com
admin.aes.lammersvilleschooldistrict.net
ashlandcityccs.net
www.bronxdalehs.org
www.healthystartacademy.com
admin.cheathamhighccs.net
admin.aes.lammersvilleschooldistrict.net
debusk.greenek12.org
ashlandcityccs.net
hhs.hattiesburgpsd.com
woodsboro.pylusd.org
admin.ashlandcityccs.net
summer.materdeicatholic.org
gageparkhs.org
www.grandcenterartsacademy.org
www.sttheresaschoolpalmsprings.org
balloustay.com
nphs.bpusd.net
lacountycharterselpa.org
www.colegioangloamericanohgo.edu.mx
admin.aes.lammersvilleschooldistrict.net
admin.glenknoll.org
admin.jh.iasd.cc
www.tjs.org
2.southampton.k12.nj.us
msdurham.org
admin.arcataschooldistrict.org
healthystartacademy.com
admin.ps17queens.com
admin.arcataschooldistrict.org
harpethhighccs.net
www.ourladyofgrace.co
sainte-school.org
admin.arcataschooldistrict.org
colegioangloamericanohgo.edu.mx
admin.arcataschooldistrict.org
admin.denver.lincolncharter.org
ashlandcityccs.net
bronxdalehs.org
flacsms.flacsnyc.com
www.afsenyc.org
2.southampton.k12.nj.us
westcheathamccs.net
sh.iasd.cc
www.lacountycharterselpa.org
grandcenterartsacademy.org
admin.mhs.molineschools.org
www.lincolncharter.org
admin.bbel.bbrook.org
2.southampton.k12.nj.us
admin.lincolnton.lincolncharter.org
southbayadult.org
www.annaleeelementaryandsteammagnet.org
lincolnton.lincolncharter.org
mhs.molineschools.org
admin.sainte-school.org
admin.aes.lammersvilleschooldistrict.net
admin.afsenyc.org
bbcms.bbrook.org
cm.dekalbcentral.net
admin.bpusd.net
ashlandcityccs.net
admin.houstonelem.net
admin.afsenyc.org
admin.annaleeelementaryandsteammagnet.org
admin.bereanchristian.com
admin.afsenyc.org
admin.aes.lammersvilleschooldistrict.net

Certificate

The complete raw certificate details for ashlandcityccs.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 376406246587659312894576753712335668084679
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-16 10:49:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-16 10:49:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ashlandcityccs.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1788 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bereanchristian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bes.lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bonnerprendie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cheathamcountyschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cheathamhighccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.colegioangloamericanohgo.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cranburyschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eastcheathamccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gageparkhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.glenknoll.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.harpethmiddleccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kraemerms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pegramccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.qes.lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sainte-school.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sttheresaschoolpalmsprings.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.thames.hattiesburgpsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.westcheathamccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aes.lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afsenyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashlandcityccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbhs.bbrook.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bereanchristian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bronxdalehs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'central.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deanza.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'debusk.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elwin.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foster.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geddes.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenknoll.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandcenterartsacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthystartacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heath.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hes.lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holland.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jones.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kenmore.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacountycharterselpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lisanorthhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhhs.lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhs.molineschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msdurham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nphs.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pleasantview.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santafe.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sierravistajr.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sttheresaschoolpalmsprings.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thames.hattiesburgpsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracy.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twenty-eight-st.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vineland.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.annaleeelementaryandsteammagnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashlandcityccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccprep-academy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheathammiddleccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegioangloamericanohgo.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cranburyschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.estrellitahigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gageparkhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthystartacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingstonspringsccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kraemerms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lisanorthhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbapchs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdurham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pleasantviewccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saltlakespa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sttheresaschoolpalmsprings.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sycamoremiddleccs.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000168567e4f96000004030046304402207b5eb7d60bda4deb53579b81b25a25090ae2c95765b82d402790d8ddef531bf3022051c3e7dd26a9d1b168443b3a596bbbb916373fa4a40926988a6049551ea97e4c007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168567e4f9c00000403004730450220064650fecd621f2fc1787d8e287a84911718498e8f185c5ebd4afdf94a822dd1022100ca0c119539257c2e62d3a441232ec821a3e25256e4de1409e47584062d147c63
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0071f119bb27624a082aa1e14a9feadfdf30498d9d368e1025721a6fee8706b531f1e7f7906cd5e9ecaab59feeb052bf0ed77af67ced6d9100e2890227c6d7a701d8a413a7821f166ef1e7aba8654fa9b6befc4db12973276fc07e672494f98d303dcaba343ef5ef9ec5568d5ff87ba2874a1c271dd5f142fe27d7dfbcbe05b45aaadd689209b81a9d09e482da5468f045aa0ddb5d74f2f8dfa117ebaf1f922434ff3c8a4f4984fe19640605987b16b5ea6bbe80fed9c4295975625a2c4ba3b6b8ea798024ea4d50acb744f025c6f3f5514c3ac7fae36305d2b132e383e91eb027ed68aae84bd5999027d230f1f0137170fc6d3df8148916074d2aa64e1e3d2d12