bhs.bcsdk12.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:00:c3:4c:96:2a:2a:4c:95:58:29:44:84:e7:4e:f4:e3:00 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bhs.bcsdk12.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:00:c3:4c:96:2a:2a:4c:95:58:29:44:84:e7:4e:f4:e3:00
Serial Number (int): 261596454914722161509371055251640477344512
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 92:53:29:64:d2:ab:e9:ad:59:bb:3c:72:79:e6:f8:da:3e:ad:2d:5e
Fingerprint (sha256): 26:a0:c2:3b:77:c6:5b:93:9a:be:08:6a:59:ad:13:96:27:7e:96:50:f0:a5:1a:7d:1f:25:69:f0:f1:5a:11:58

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bhs.bcsdk12.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bhs.bcsdk12.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adams.cleburne.k12.tx.us
admin.alawaielementary.org
admin.andersononline.org
admin.antonian.org
admin.bcsdk12.org
admin.bes.bcsdk12.org
admin.ches.bcsdk12.org
admin.gckats.net
admin.highschool.mbgsd.org
admin.kamiloikielementary.org
admin.osva.org
admin.radfordhs.org
admin.rosebudacademy.com
admin.sebastopolschools.org
admin.second.exteraschools.org
admin.stmonicaces.org
admin.stmonicachs.org
admin.wvhsmustangs.net
alawaielementary.org
andersononline.org
antonian.com
antonian.org
bes.bcsdk12.org
bhs.bcsdk12.org
bkr.lpisd.org
blc.arrowacademy.org
bse.lpisd.org
ches.bcsdk12.org
chs.cleburne.k12.tx.us
colegiofrancoingles.edu.mx
coleman.cleburne.k12.tx.us
cooke.cleburne.k12.tx.us
cpe.lpisd.org
dwa.lpisd.org
hpa.arrowacademy.org
hre.lpisd.org
irving.cleburne.k12.tx.us
jre.lpisd.org
kamiloikielementary.org
kindergartenacademy.mbgsd.org
la.arrowacademy.org
lalc.arrowacademy.org
lpe.lpisd.org
lph.lpisd.org
lpj.lpisd.org
lxe.lpisd.org
lxj.lpisd.org
marti.cleburne.k12.tx.us
mchs.mcisd.net
mha.arrowacademy.org
middleschool.mbgsd.org
newcastledistrict.org
options.mcisd.net
osva.org
radfordhs.org
ras.mcisd.net
rze.lpisd.org
school.stveronica.org
sebastopolschools.org
smith.cleburne.k12.tx.us
sos.arrowacademy.org
stmonicachs.org
team.cleburne.k12.tx.us
vmhs.mcisd.net
waikoloaschool.org
wheat.cleburne.k12.tx.us
wvhsmustangs.net
www.alawaielementary.org
www.andersononline.org
www.antonian.com
www.antonian.net
www.antonian.org
www.bcsdk12.org
www.berkwood.org
www.blessinggodscreatures.com
www.corpuschristischool.com
www.discoveryk8.org
www.faith-first.org
www.flchurch.org
www.gckats.net
www.ghcsd.org
www.kamiloikielementary.org
www.lgusd.org
www.newcastle.k12.ca.us
www.newcastledistrict.org
www.osva.org
www.radfordhs.org
www.rogersisd.org
www.rosebudacademy.com
www.sdgva.org
www.sebastopolschools.org
www.stasaints.net
www.stmonicaces.org
www.stmonicachs.org
www.stmonicahs.net
www.sttmschool.org
www.tuliaisd.net
www.waikoloaschool.com
www.waikoloaschool.org
www.wvhsmustangs.net

Other certificates including the domain name bcsdk12.org

(limited to 100 certificates)
easycare.ch.fcm.travel
admin.antonian.org
www.colingles.edu.mx
easycare.ch.fcm.travel
komarek94.org
colegiofrancoingles.edu.mx
easycare.ch.fcm.travel
admin.adultlearning.sunrisesd.ca
admin.hs.wvsd208.org
castle.sebastopolschools.org
easycare.ch.fcm.travel
admin.bhs.bcsdk12.org
admin.agu.ealas.org
easycare.ch.fcm.travel
bms.bcsdk12.org
ps.bsd29j.com
adams.cleburne.k12.tx.us
bhs.bcsdk12.org
www.sanjoseprep.org
easycare.ch.fcm.travel
bes.bcsdk12.org
admin.bhs.bcsdk12.org
easycare.ch.fcm.travel
bcsdk12.org
admin.agu.ealas.org
admin.agu.ealas.org
admin.keillerleaders.org
www.bcsdk12.org
easycare.ch.fcm.travel
*.bcsdk12.org
www.grandville.k12.mi.us
bcsdk12.org
www.holynamesf.com
admin.cole.eastsideusd.org
www.stnorbertschool.org
easycare.ch.fcm.travel
www.grandville.k12.mi.us
brookhaven.sebastopolschools.org
beek9.bcsdk12.org
admin.agu.ealas.org
admin.adultlearning.sunrisesd.ca
admin.adultlearning.sunrisesd.ca
easycare.ch.fcm.travel
admin.rsu14.org
www.watongapublicschools.com
adams.cleburne.k12.tx.us
academyofthecanyons.net
www.unionsquareacademy.org
easycare.ch.fcm.travel
itchome.lpisd.org
www.ciudaddelosninoscr.org
admin.adultlearning.sunrisesd.ca
jh.iasd.cc
sa.snowlineschools.com
admin.bme.snowlineschools.com
bcsdk12.org
bcsdk12.org
*.bcsdk12.org
adams.cleburne.k12.tx.us
adams.cleburne.k12.tx.us
bcsdk12.org
beek9.bcsdk12.org
preschool.shelbycs.org
bcsdk12.org
adams.cleburne.k12.tx.us
sachs.org
adams.cleburne.k12.tx.us
academyofthecanyons.net
admin.antonian.org
admin.antonian.org
samuelgompersms.net
easycare.ch.fcm.travel
lgusd.org
bhs.bcsdk12.org
admin.agu.ealas.org
bcsdk12.org
web.euroamericano.edu.mx
admin.agu.ealas.org
admin.aes.lammersvilleschooldistrict.net
northside.wisd.org
castle.sebastopolschools.org
admin.ike.iasd.cc
admin.antonian.org
easycare.ch.fcm.travel
ca.arrowacademy.org
academyofthecanyons.net
cranburyschool.org
adams.cleburne.k12.tx.us
adams.cleburne.k12.tx.us
easycare.ch.fcm.travel
doe.as
easycare.ch.fcm.travel
admin.kauffmanschool.org
newkcp.org
beek9.bcsdk12.org
admin.northside.wisd.org
ches.bcsdk12.org
adams.cleburne.k12.tx.us
easycare.ch.fcm.travel
www.sainte-school.org

Certificate

The complete raw certificate details for bhs.bcsdk12.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261596454914722161509371055251640477344512
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-28 02:09:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-28 02:09:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bhs.bcsdk12.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2099 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adams.cleburne.k12.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.alawaielementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.andersononline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.antonian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bcsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bes.bcsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ches.bcsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gckats.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.highschool.mbgsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kamiloikielementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.osva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.radfordhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rosebudacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sebastopolschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.second.exteraschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stmonicaces.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stmonicachs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wvhsmustangs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alawaielementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andersononline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antonian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antonian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bes.bcsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhs.bcsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bkr.lpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blc.arrowacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bse.lpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ches.bcsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chs.cleburne.k12.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colegiofrancoingles.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coleman.cleburne.k12.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cooke.cleburne.k12.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpe.lpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dwa.lpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpa.arrowacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hre.lpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irving.cleburne.k12.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jre.lpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamiloikielementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kindergartenacademy.mbgsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'la.arrowacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lalc.arrowacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpe.lpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lph.lpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpj.lpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lxe.lpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lxj.lpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marti.cleburne.k12.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mchs.mcisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mha.arrowacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'middleschool.mbgsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newcastledistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'options.mcisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radfordhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras.mcisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rze.lpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.stveronica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sebastopolschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smith.cleburne.k12.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sos.arrowacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmonicachs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team.cleburne.k12.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vmhs.mcisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikoloaschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wheat.cleburne.k12.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wvhsmustangs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alawaielementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersononline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antonian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antonian.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antonian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkwood.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blessinggodscreatures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corpuschristischool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discoveryk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faith-first.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gckats.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kamiloikielementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lgusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newcastle.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newcastledistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radfordhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rogersisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosebudacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sdgva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sebastopolschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stasaints.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmonicaces.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmonicachs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmonicahs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sttmschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuliaisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikoloaschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikoloaschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wvhsmustangs.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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