web.cit.edu.mx

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:dc:b3:25:f5:04:4e:73:21:e7:94:81:c1:46:4e:cc:c1:ec was issued on by Let's Encrypt.

With 73 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=web.cit.edu.mx

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:dc:b3:25:f5:04:4e:73:21:e7:94:81:c1:46:4e:cc:c1:ec
Serial Number (int): 336437107413648012193747773912330242146796
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2a:f2:47:a9:d7:19:b4:b5:3b:f8:04:66:97:b7:4d:61:82:85:65:04
Fingerprint (sha256): 21:55:f3:f1:04:ef:c5:14:8d:17:03:6b:bc:45:d8:63:35:69:26:b8:0d:11:f6:87:70:14:94:14:a6:4f:7b:bd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate web.cit.edu.mx

73

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for web.cit.edu.mx

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin-web.cit.edu.mx
admin.brooklandbearcats.org
admin.carmelhs.org
admin.cca-denver.org
admin.glhs.camsch.org
admin.gmes.natchezadamsschooldistrict.org
admin.greendesigndr.org
admin.hbuhsd.edu
admin.hhs.camsch.org
admin.invictushighschool.org
admin.jbhs.camsch.org
admin.jfes.natchezadamsschooldistrict.org
admin.lchsyes.org
admin.maa.natchezadamsschooldistrict.org
admin.mcpla.natchezadamsschooldistrict.org
admin.natchezadamsschooldistrict.org
admin.nctc.natchezadamsschooldistrict.org
admin.neca.natchezadamsschooldistrict.org
admin.nfa.natchezadamsschooldistrict.org
admin.nhs.natchezadamsschooldistrict.org
admin.pearsallint.org
admin.pearsalljh.org
admin.pearsalltfe.org
admin.pomeloelementary.com
admin.rickovernaval.org
admin.rlms.natchezadamsschooldistrict.org
admin.sbwes.natchezadamsschooldistrict.org
admin.schs.camsch.org
admin.stanneparishdixon.org
admin.woccse.hbuhsd.edu
brooklandbearcats.org
carmelhs.org
glhs.camsch.org
gmes.natchezadamsschooldistrict.org
grantsvillehigh.tooeleschools.org
greendesigndr.org
hhs.camsch.org
invictushigh.org
invictushighschool.org
jbhs.camsch.org
jfes.natchezadamsschooldistrict.org
maa.natchezadamsschooldistrict.org
mcpla.natchezadamsschooldistrict.org
natchezadamsschooldistrict.org
nctc.natchezadamsschooldistrict.org
neca.natchezadamsschooldistrict.org
nfa.natchezadamsschooldistrict.org
nhs.natchezadamsschooldistrict.org
pearsallint.org
pearsalljh.org
pearsalltfe.org
pomeloelementary.com
rickovernaval.org
rlms.natchezadamsschooldistrict.org
sbwes.natchezadamsschooldistrict.org
schs.camsch.org
stanneparishdixon.org
stansburyhigh.tooeleschools.org
tooelehigh.tooeleschools.org
web.cit.edu.mx
wendoverhigh.tooeleschools.org
woccse.hbuhsd.edu
www.brooklandbearcats.org
www.carmelhs.org
www.greendesigndr.org
www.invictushigh.org
www.invictushighschool.org
www.lchsyes.org
www.natchezadamsschooldistrict.org
www.oxfordmexico.com
www.pomeloelementary.com
www.rickovernaval.org
www.stanneparishdixon.org

Other certificates including the domain name cit.edu.mx

(limited to 100 certificates)

Certificate

The complete raw certificate details for web.cit.edu.mx in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336437107413648012193747773912330242146796
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-10 01:05:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-08 01:05:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'web.cit.edu.mx'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2036 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-web.cit.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.brooklandbearcats.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.carmelhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cca-denver.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.glhs.camsch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gmes.natchezadamsschooldistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.greendesigndr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hbuhsd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hhs.camsch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.invictushighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jbhs.camsch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jfes.natchezadamsschooldistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lchsyes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.maa.natchezadamsschooldistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mcpla.natchezadamsschooldistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.natchezadamsschooldistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nctc.natchezadamsschooldistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.neca.natchezadamsschooldistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nfa.natchezadamsschooldistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nhs.natchezadamsschooldistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pearsallint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pearsalljh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pearsalltfe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pomeloelementary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rickovernaval.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rlms.natchezadamsschooldistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sbwes.natchezadamsschooldistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.schs.camsch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stanneparishdixon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.woccse.hbuhsd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brooklandbearcats.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carmelhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glhs.camsch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmes.natchezadamsschooldistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantsvillehigh.tooeleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greendesigndr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhs.camsch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invictushigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invictushighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jbhs.camsch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jfes.natchezadamsschooldistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maa.natchezadamsschooldistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcpla.natchezadamsschooldistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natchezadamsschooldistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nctc.natchezadamsschooldistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neca.natchezadamsschooldistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfa.natchezadamsschooldistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhs.natchezadamsschooldistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pearsallint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pearsalljh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pearsalltfe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pomeloelementary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rickovernaval.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rlms.natchezadamsschooldistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbwes.natchezadamsschooldistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schs.camsch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanneparishdixon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stansburyhigh.tooeleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tooelehigh.tooeleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.cit.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wendoverhigh.tooeleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woccse.hbuhsd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brooklandbearcats.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carmelhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greendesigndr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.invictushigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.invictushighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lchsyes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.natchezadamsschooldistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oxfordmexico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pomeloelementary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rickovernaval.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanneparishdixon.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016bd9a0e93d0000040300483046022100da6a4b7e48c73bf497d1b0b5405197784831205e2b2bda2968cd1de99d29ca16022100f357f2ec40a2bcff1e9842417b38eaeeade73732eebb66f013c925b245e6987000770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016bd9a0e7b000000403004830460221009e9c239441087769cb7b9c15b037589247e8d6e89a1798d3827656e090e8255c022100b6248bc80d26a5ef38de0c6ea596e073c89646b8f46ed816685baaddb521f9f1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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