nes.jeffersonschools.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:88:0f:5c:7b:cb:35:03:b7:44:7c:92:a6:fc:97:8a:1f:98 was issued on by Let's Encrypt.

With 68 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nes.jeffersonschools.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:88:0f:5c:7b:cb:35:03:b7:44:7c:92:a6:fc:97:8a:1f:98
Serial Number (int): 307635678318612235350431561222184655003544
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 66:5f:c9:bb:86:e1:cf:78:bb:fa:3f:c4:b9:9c:99:b5:ba:c5:c4:e4
Fingerprint (sha256): 2b:b7:0e:e4:d6:fb:e7:ab:9f:ed:a1:09:fe:18:fe:59:82:b4:e1:62:f1:47:4e:f1:50:c1:06:ab:9b:ea:23:82

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nes.jeffersonschools.org

68

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nes.jeffersonschools.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.ballantyneelementaryschool.wearecms.com
admin.bohs.bousd.us
admin.bryantranchschool.com
admin.charlotteengineeringearlycollege.wearecms.com
admin.cliffordmathandtechmagnet.org
admin.cvhs.cvsd.org
admin.cvvl.cvsd.org
admin.davidsonelementaryschool.wearecms.com
admin.hornetsnestelementaryschool.wearecms.com
admin.lawrenceorrelementaryschool.wearecms.com
admin.lles.cvsd.org
admin.mallardcreekhighschool.wearecms.com
admin.montclaireelementaryschool.wearecms.com
admin.ms366.org
admin.myersparktraditionalelementaryschool.wearecms.com
admin.northeastmiddleschool.wearecms.com
admin.oakhurststeamacademy.wearecms.com
admin.our-lady-of-lourdes-school.org
admin.qasschool.org
admin.res.cvsd.org
admin.sharonelementaryschool.wearecms.com
admin.todd.kyschools.us
admin.ues.cvsd.org
arovista.bousd.k12.ca.us
berryhillschool.wearecms.com
bjhs.bousd.k12.ca.us
bohs.bousd.k12.ca.us
bousd.k12.ca.us
bousd.us
breacanyon.bousd.k12.ca.us
breacanyon.bousd.us
cds.bousd.k12.ca.us
cliffordmathandtechmagnet.org
coakley.hcisd.org
countryhills.bousd.k12.ca.us
davidcoxroadelementaryschool.wearecms.com
envirostudies.org
fanning.bousd.k12.ca.us
huntingtownefarmselementaryschool.wearecms.com
imacacademy.wearecms.com
jvwashamelementaryschool.wearecms.com
keys.hcisd.org
lakewylieelementaryschool.wearecms.com
laurel.bousd.k12.ca.us
mariposa.bousd.k12.ca.us
mariposa.bousd.us
matthewselementaryschool.wearecms.com
mckeeroadelementaryschool.wearecms.com
ms366.org
nes.jeffersonschools.org
netech.edu
northmecklenburghighschool.wearecms.com
oakdaleelementaryschool.wearecms.com
olinda.bousd.k12.ca.us
our-lady-of-lourdes-school.org
qasschool.org
selwynelementaryschool.wearecms.com
sierravistapta.com
smithfieldelementaryschool.wearecms.com
sphstigers.org
walshcps.org
www.bousd.k12.ca.us
www.cliffordmathandtechmagnet.org
www.fatimaschoolwilton.org
www.ms366.org
www.our-lady-of-lourdes-school.org
www.qasschool.org
www.walnuteagles.net

Other certificates including the domain name jeffersonschools.org

(limited to 100 certificates)
jeffersonschools.org
cvhs.cvsd.org
admin.hes.huntingtonisd.com
jeffersonschools.org
jeffersonschools.org
*.jeffersonschools.org
admin.aes.cvsd.org
admin.bohs.bousd.us
nes.jeffersonschools.org
jeffersonschools.org
plummerpanthers.org
admin.cfn.edu.mx
jeffersonschools.org
admin.mhs.cherokee.k12.nc.us
admin.statesvilleroadelementaryschool.wearecms.com
admin.aes.cvsd.org
dimeboxisd.net
ace.pusd.org
ms.gsd.wednet.edu
admin.ahs.cherokee.k12.nc.us
starmountacademyofexcellence.wearecms.com
*.jeffersonschools.org
admin.nbfacademy.org
*.jeffersonschools.org
www.jeffersonschools.org
admin.bms.cvsd.org
admin.aes.cvsd.org
admin.ms.moodyisd.org
*.jeffersonschools.org
admin.myersparkhighschool.wearecms.com
stmmsa.org
www.gmcs.org
jeffersonschools.org
ace.pusd.org
jeffersonschools.org
admin.resedahs.net
ses.jeffersonschools.org
admin.bohs.bousd.us
our-lady-of-lourdes-school.org
pes.cherokee.k12.nc.us
admin.bradfield.hpisd.org
nhuman.edu.mx
admin.hs.hpisd.org
*.jeffersonschools.org
admin.bohs.bousd.us
admin.aes.cvsd.org
admin.mcems.cherokee.k12.nc.us
jhs.jeffersonschools.org
ace.pusd.org
admin.kit.mynhusd.org
jms.jeffersonschools.org
ace.pusd.org
jeffersonschools.org
admin.reedycreekelementaryschool.wearecms.com
jeffersonschools.org
jms.jeffersonschools.org
sanjose.pusd.org

Certificate

The complete raw certificate details for nes.jeffersonschools.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307635678318612235350431561222184655003544
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-25 19:48:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-23 19:48:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nes.jeffersonschools.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1993 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ballantyneelementaryschool.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bohs.bousd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bryantranchschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.charlotteengineeringearlycollege.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cliffordmathandtechmagnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cvhs.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cvvl.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.davidsonelementaryschool.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hornetsnestelementaryschool.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lawrenceorrelementaryschool.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lles.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mallardcreekhighschool.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.montclaireelementaryschool.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ms366.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.myersparktraditionalelementaryschool.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.northeastmiddleschool.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.oakhurststeamacademy.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.our-lady-of-lourdes-school.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.qasschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.res.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sharonelementaryschool.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.todd.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ues.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arovista.bousd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berryhillschool.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bjhs.bousd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bohs.bousd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bousd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bousd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breacanyon.bousd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breacanyon.bousd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cds.bousd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliffordmathandtechmagnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coakley.hcisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countryhills.bousd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davidcoxroadelementaryschool.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envirostudies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanning.bousd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huntingtownefarmselementaryschool.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imacacademy.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jvwashamelementaryschool.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keys.hcisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakewylieelementaryschool.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laurel.bousd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mariposa.bousd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mariposa.bousd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matthewselementaryschool.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mckeeroadelementaryschool.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms366.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nes.jeffersonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netech.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northmecklenburghighschool.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oakdaleelementaryschool.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olinda.bousd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'our-lady-of-lourdes-school.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qasschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selwynelementaryschool.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sierravistapta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smithfieldelementaryschool.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sphstigers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walshcps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bousd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cliffordmathandtechmagnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fatimaschoolwilton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ms366.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.our-lady-of-lourdes-school.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qasschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walnuteagles.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169b69cf3330000040300483046022100c1b2409a39f1265c6930927257bb24d28384e59d33dfe157913af898211fa16e022100d873d63848a192177b8d74fd1a8b7590588ce4d789390b714dd673a4cc552d5f00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169b69cf1420000040300483046022100bf99247f39a590d3cbe4bdd071ac7ddfb1aa91b365251aca7ee71955e54dc34a022100994bc69d33f26a7338462b40fc4082ffd7aa753d9cb2cb64540c1490494c1e74
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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