admin.ivelem.apluscharterschools.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:55:74:bf:31:df:70:f0:46:73:18:e6:c0:02:45:07:3b:4c was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.ivelem.apluscharterschools.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:55:74:bf:31:df:70:f0:46:73:18:e6:c0:02:45:07:3b:4c
Serial Number (int): 290416042171312443343190751000533701966668
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a4:32:d0:72:17:58:ea:fb:a1:45:07:ce:62:6e:1c:2c:55:4c:8f:1e
Fingerprint (sha256): 24:00:cd:f4:20:53:f4:ef:a2:d4:02:ef:f3:9f:36:d7:bd:da:e8:10:73:ec:be:2c:a7:4f:b0:bc:45:10:fd:1b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate admin.ivelem.apluscharterschools.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.ivelem.apluscharterschools.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.aes.fentressboe.com
admin.cchs.canoncityschools.org
admin.ccms.canoncityschools.org
admin.ces.canoncityschools.org
admin.ces.gpusd.org
admin.chs.fentressboe.com
admin.clarendon.sboe.org
admin.coa.canoncityschools.org
admin.fairview.gfusd.net
admin.gaec.burkburnettisd.org
admin.gms.gfusd.net
admin.granitepointe.gfusd.net
admin.harrison.canoncityschools.org
admin.headstart.burkburnettisd.org
admin.hes.gpusd.org
admin.hes.jcsd.net
admin.horizon.gfusd.net
admin.huber.sboe.org
admin.ivelem.apluscharterschools.org
admin.ivsec.apluscharterschools.org
admin.jcap.jcsd.net
admin.kendrick.gfusd.net
admin.kernhigh.org
admin.lincoln.canoncityschools.org
admin.mckinley.canoncityschools.org
admin.mhafyos.org
admin.mms.gfusd.net
admin.mvcks.canoncityschools.org
admin.oms.gfusd.net
admin.phs.fentressboe.com
admin.plantation.gfusd.net
admin.planz.gfusd.net
admin.rdr.gpusd.org
admin.res.jcsd.net
admin.rhs.jcsd.net
admin.rice.garvey.k12.ca.us
admin.rms.jcsd.net
admin.sanchez.garvey.k12.ca.us
admin.sfes.fentressboe.com
admin.shs.sboe.org
admin.sjes.gpusd.org
admin.sms.sboe.org
admin.templeint.garvey.k12.ca.us
admin.tes.gpusd.org
admin.ths.gpusd.org
admin.valleverde.gfusd.net
admin.washington.canoncityschools.org
admin.willard.garvey.k12.ca.us
admin.yes.fentressboe.com
aes.fentressboe.com
cchs.canoncityschools.org
ccms.canoncityschools.org
ces.canoncityschools.org
ces.gpusd.org
chs.fentressboe.com
clarendon.sboe.org
coa.canoncityschools.org
fairview.gfusd.net
gaec.burkburnettisd.org
gms.gfusd.net
granitepointe.gfusd.net
harrison.canoncityschools.org
headstart.burkburnettisd.org
hes.gpusd.org
hes.jcsd.net
horizon.gfusd.net
huber.sboe.org
ivsec.apluscharterschools.org
jcap.jcsd.net
kendrick.gfusd.net
lincoln.canoncityschools.org
mckinley.canoncityschools.org
mhafyos.org
mms.gfusd.net
mvcks.canoncityschools.org
mvista.garvey.k12.ca.us
oms.gfusd.net
palla.gfusd.net
phs.fentressboe.com
plantation.gfusd.net
planz.gfusd.net
rdr.gpusd.org
res.jcsd.net
rhs.jcsd.net
rice.garvey.k12.ca.us
rms.jcsd.net
sanchez.garvey.k12.ca.us
sfes.fentressboe.com
shs.sboe.org
sjes.gpusd.org
sms.sboe.org
templeint.garvey.k12.ca.us
tes.gpusd.org
ths.gpusd.org
valleverde.gfusd.net
washington.canoncityschools.org
willard.garvey.k12.ca.us
www.kernhigh.org
www.mhafyos.org
yes.fentressboe.com

Other certificates including the domain name apluscharterschools.org

(limited to 100 certificates)
www.cerratosd.org
admin.aes.fentressboe.com
admin.beethoven-elementary.vanguardacademy.education
www.holynamesf.com
admin.ajhs.dcs.edu
admin.mtsd-vt.org
hs.somervilleisd.org
admin.aes.uinta1.com
admin.es.somervilleisd.org
admin.ajshs.asd.k12.pa.us
abs.lockhartisd.org
admin.aes.uinta1.com
delevandriveelementary.org
admin.aes.uinta1.com
admin.aes.fentressboe.com
admin.ambassadorhigh.org
admin.arvin.kernhigh.org
admin.aes.fentressboe.com
cerratosd.org
admin.ambassadorhigh.org
admin.aes.uinta1.com
admin.ajshs.asd.k12.pa.us
admin.ivelem.apluscharterschools.org
admin.uinta1.com
admin.ajshs.asd.k12.pa.us
admin.apluscharterschools.org
admin.aes.fentressboe.com
admin.arvin.kernhigh.org
admin.apluscharterschools.org
admin.ajshs.asd.k12.pa.us
admin.ajshs.asd.k12.pa.us
south.legacyprep.org
admin.aes.uinta1.com
athletics.ambassadorhigh.org
apluscharterschools.org
apluscharterschools.org
admin.apluscharterschools.org
admin.aes.uinta1.com
admin.ajshs.asd.k12.pa.us
apluscharterschools.org
admin.rembrandt-secondary.vanguardacademy.education
admin.gfusd.net
admin.aes.fentressboe.com
admin.ajshs.asd.k12.pa.us
admin.ajshs.asd.k12.pa.us
givetokids.csisd.org
admin.ajshs.asd.k12.pa.us
admin.fentressboe.com
admin.mozart-secondary.vanguardacademy.education
admin.ajhs.dcs.edu
beethoven-elementary.vanguardacademy.education
admin.mozart-secondary.vanguardacademy.education
ivinter.apluscharterschools.org
apluscharterschools.org
admin.ajshs.asd.k12.pa.us
admin.apluscharterschools.org
admin.aes.uinta1.com
gledhillelementary.org
admin.aes.uinta1.com
bfcsd.org
admin.ajshs.asd.k12.pa.us
morelandpreschool.moreland.org
admin.olaclaremont.org
admin.ajshs.asd.k12.pa.us
admin.ajshs.asd.k12.pa.us
www.ranchitoelementary.org
admin.ajshs.asd.k12.pa.us
admin.moreland.org
admin.aes.fentressboe.com
admin.canoncityschools.org
admin.ajshs.asd.k12.pa.us
apluscharterschools.org
es.otisr3.com
phs.parlierunified.org
admin.ajshs.asd.k12.pa.us
admin.arvin.kernhigh.org
admin.ajshs.asd.k12.pa.us
apluscharterschools.org
admin.ajshs.asd.k12.pa.us
admin.dimensions.org
admin.aes.uinta1.com
admin.ivinter.apluscharterschools.org
admin.aes.fentressboe.com
admin.ajshs.asd.k12.pa.us
calaps.org
admin.legacyprep.org
apluscharterschools.org
admin.bhs.burkburnettisd.org
edwards.tisd.org
admin.ajshs.asd.k12.pa.us
admin.aes.fentressboe.com
apluscharterschools.org
admin.bas.kernhigh.org
mentalhealth.lexnyc.org
admin.elementaryschool.bfcsd.org
admin.sboe.org
www.anderson.moreland.org
phs.parlierunified.org
admin.ivinter.apluscharterschools.org
admin.ambassadorhigh.org

Certificate

The complete raw certificate details for admin.ivelem.apluscharterschools.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290416042171312443343190751000533701966668
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-05 17:37:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-04 17:37:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.ivelem.apluscharterschools.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2387 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.aes.fentressboe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cchs.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ccms.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ces.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ces.gpusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.chs.fentressboe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.clarendon.sboe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.coa.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fairview.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gaec.burkburnettisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gms.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.granitepointe.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.harrison.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.headstart.burkburnettisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hes.gpusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hes.jcsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.horizon.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.huber.sboe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ivelem.apluscharterschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ivsec.apluscharterschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jcap.jcsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kendrick.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lincoln.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mckinley.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mhafyos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mms.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mvcks.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.oms.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.phs.fentressboe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.plantation.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.planz.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rdr.gpusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.res.jcsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rhs.jcsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rice.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rms.jcsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sanchez.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sfes.fentressboe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.shs.sboe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sjes.gpusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sms.sboe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.templeint.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tes.gpusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ths.gpusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.valleverde.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.washington.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.willard.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.yes.fentressboe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aes.fentressboe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cchs.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccms.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ces.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ces.gpusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chs.fentressboe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clarendon.sboe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coa.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fairview.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaec.burkburnettisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gms.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'granitepointe.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrison.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'headstart.burkburnettisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hes.gpusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hes.jcsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horizon.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huber.sboe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivsec.apluscharterschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcap.jcsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kendrick.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincoln.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mckinley.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhafyos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvcks.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvista.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oms.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palla.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phs.fentressboe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plantation.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planz.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdr.gpusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'res.jcsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhs.jcsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rice.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rms.jcsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanchez.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfes.fentressboe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shs.sboe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjes.gpusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms.sboe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'templeint.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tes.gpusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ths.gpusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valleverde.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washington.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willard.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mhafyos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yes.fentressboe.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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