eastprimary.kiskiarea.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f3:01:2f:48:42:60:a9:9e:9d:a6:a0:1b:ab:55:41:d4:ff was issued on by Let's Encrypt.

With 80 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=eastprimary.kiskiarea.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f3:01:2f:48:42:60:a9:9e:9d:a6:a0:1b:ab:55:41:d4:ff
Serial Number (int): 344027047688609388421553303398215109956863
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b9:7d:a0:68:1a:4f:8d:3a:ac:d8:c3:07:3e:fc:7c:7a:6e:99:32:8e
Fingerprint (sha256): 2c:0b:c4:47:d0:00:fb:a3:ff:11:f6:c2:38:3a:a6:d8:be:20:19:be:c2:42:d6:2e:94:67:77:6b:7b:24:58:4c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate eastprimary.kiskiarea.org

80

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eastprimary.kiskiarea.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aac.woccisd.net
admin.aspermontisd.com
admin.athletics.rsu14.org
admin.carverschool.us
admin.cathedralchapelschool.org
admin.dse.otsegops.org
admin.hemethigh.com
admin.jsms.rsu14.org
admin.manchester.rsu14.org
admin.ohs.otsegops.org
admin.oms.otsegops.org
admin.pacek-8.com
admin.rsu14.org
admin.stfinnbarr.org
admin.stjulianacatholiccommunity.org
admin.stjulianaschool.org
admin.valentineschool.org
admin.wjh.wintersisd.org
admin.wps.rsu14.org
admin.wse.otsegops.org
aspermontisd.com
athletics.rsu14.org
carverschool.us
cathedralchapelschool.org
dse.otsegops.org
eastprimary.kiskiarea.org
exteraschools.org
highschool.kiskiarea.org
hs.ogisd.net
int.ogisd.net
intermediate.kiskiarea.org
jh.ogisd.net
jrsr.mthcs.org
jsms.rsu14.org
jsms.windhamraymondschools.org
kiskiarea.org
manchester.rsu14.org
manchester.windhamraymondschools.org
north.mthcs.org
ogisd.org
ohs.otsegops.org
oms.otsegops.org
pacek-8.com
pacek-8.org
pri.ogisd.net
res.rsu14.org
stfinnbarr.org
stjulianacatholiccommunity.org
stjulianaschool.org
upperelementary.kiskiarea.org
valentineschool.org
wes.wintersisd.org
whs.wintersisd.org
wjh.wintersisd.org
wps.rsu14.org
wse.otsegops.org
www.aspermontisd.com
www.birminghamcharter.com
www.carverschool.us
www.cathedralchapelschool.org
www.crhss.org
www.cristoreysac.org
www.cristoreysacramento.org
www.hemethigh.com
www.kiskiarea.org
www.laicharter.org
www.mthcs.org
www.ogisd.net
www.ogisd.org
www.otsegops.org
www.pacek-8.com
www.pacek-8.org
www.ppsb.org
www.rsu14.org
www.stfinnbarr.org
www.stjulianacatholiccommunity.org
www.stjulianachurch.org
www.stjulianaschool.org
www.tsd.state.tx.us
www.valentineschool.org

Other certificates including the domain name kiskiarea.org

(limited to 100 certificates)
hs.unitedsd.net
admin.wjh.wintersisd.org
admin.alamo.otsegops.org
admin.wcms.mpusd.net
admin.alamo.otsegops.org
admin.jsms.rsu14.org
res.rsu14.org
academy.ndasla.org
highschool.kiskiarea.org
admin.banninghs.org
aac.woccisd.net
admin.wjh.wintersisd.org
eastprimary.kiskiarea.org
admin.cathedralchapelschool.org
eastprimary.kiskiarea.org
6gc.owassops.org
admin.alvahscott.org
admin.banninghs.org
admin.banninghs.org
admin.e3civichigh.com
admin.banninghs.org
admin.stonecanyon.owassops.org
admin.e3civichigh.com
admin.alvahscott.org
admin.alamo.otsegops.org
admin.alvahscott.org
7gc.owassops.org
admin.lng.otsegops.org
admin.whs.rsu14.org
admin.e3civichigh.com
aac.woccisd.net
admin.alvahscott.org
www.rsu14.org
admin.banninghs.org
www.otsegops.org
admin.e3civichigh.com
admin.alamo.otsegops.org
www.lasallesancristobal.edu.mx
admin.alvahscott.org
admin.alvahscott.org
ohs.otsegops.org
www.ascisd.net
admin.7gc.owassops.org
admin.e3civichigh.com
admin.athletics.rsu14.org
aac.woccisd.net
admin.echs.woccisd.net
admin.alvahscott.org
etc.needlesusd.org
admin.alamo.otsegops.org
northprimary.kiskiarea.org
admin.alamo.otsegops.org
admin.athletics.rsu14.org
admin.banninghs.org
admin.e3civichigh.com
admin.banninghs.org
laicharter.org
bchs.ppsb.org
admin.banninghs.org
es.unitedsd.net
admin.stfinnbarr.org
jsms.rsu14.org
stonecanyon.owassops.org
revbrownschool.org
admin.alamo.otsegops.org
admin.rsu14.org
admin.res.rsu14.org
admin.mas.mpusd.net
exteraschools.org
aac.woccisd.net
admin.e3civichigh.com
admin.alamo.otsegops.org
jsms.rsu14.org
admin.elementary.ndasla.org
aac.woccisd.net
aac.woccisd.net
www.otsegops.org
intermediate.kiskiarea.org
admin.barnes.owassops.org
admin.alvahscott.org
aac.woccisd.net
kiskiarea.org
admin.alamo.otsegops.org
admin.e3civichigh.com
admin.whs.rsu14.org
lng.otsegops.org
aac.woccisd.net
admin.hs.unitedsd.net
admin.ohs.otsegops.org
highschool.kiskiarea.org
admin.alvahscott.org
es.ascisd.net
southprimary.kiskiarea.org

Certificate

The complete raw certificate details for eastprimary.kiskiarea.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQbTHb+2z7
rfYVCl+ph5m8FJJOEgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5pV3R4RBg
n18RTHnTD9fS27JxyeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGrmQF3Z/h2
e6StagubO+pVwFzG8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK7wAhJO8e
l2z375LDd2VIwrdWQP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlWZ1AdjOKf
RiY0ckFuu/DYkuvkNKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5Tu7zbek/
MR/JMR9nceWyZ2Mund+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzwWzBvTD8F
7q6ckUbIgpeo7stn7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuaivjW/P+Tm
64XjXNjP9F1W8+5tlcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ4Iudx/o3
Q4E2w6Aud9PYyV05pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/h0omUmCI
DiQVG30eHhb3OIP3bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUnohkUi6ik
D4me6o58sq/IQVmyem1M/E0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344027047688609388421553303398215109956863
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-28 09:50:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-26 09:50:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eastprimary.kiskiarea.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1712 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aac.woccisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.aspermontisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.athletics.rsu14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.carverschool.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cathedralchapelschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dse.otsegops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hemethigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jsms.rsu14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.manchester.rsu14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ohs.otsegops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.oms.otsegops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pacek-8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rsu14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stfinnbarr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stjulianacatholiccommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stjulianaschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.valentineschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wjh.wintersisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wps.rsu14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wse.otsegops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspermontisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athletics.rsu14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carverschool.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cathedralchapelschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dse.otsegops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastprimary.kiskiarea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exteraschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highschool.kiskiarea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.ogisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int.ogisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intermediate.kiskiarea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jh.ogisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jrsr.mthcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jsms.rsu14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jsms.windhamraymondschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiskiarea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manchester.rsu14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manchester.windhamraymondschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'north.mthcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ogisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohs.otsegops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oms.otsegops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacek-8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacek-8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pri.ogisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'res.rsu14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stfinnbarr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjulianacatholiccommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjulianaschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upperelementary.kiskiarea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valentineschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wes.wintersisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whs.wintersisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wjh.wintersisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wps.rsu14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wse.otsegops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aspermontisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.birminghamcharter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carverschool.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cathedralchapelschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crhss.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cristoreysac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cristoreysacramento.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hemethigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiskiarea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laicharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mthcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ogisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ogisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otsegops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pacek-8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pacek-8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ppsb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rsu14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stfinnbarr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjulianacatholiccommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjulianachurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjulianaschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tsd.state.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valentineschool.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169c3ec9b990000040300473045022100d0e83e9e8b694c09c5a92c85c9dd4c9343178d6dc14fb4338e6dd81223e20c01022063b7c61fe7bc74e6087f09512d806b77f207667f253ee1e4ce24834cae4b1fb100760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169c3ec9c100000040300473045022016eab2638a8fc68e2573da28f058b06c22f8d92cbc9a1fb0f14ab5a3a706d80f0221008caddb7641da8d8cb641b8c78a8edcb1976182c6d8428c29628514cbb8b7b8c9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000fde63502b0f8d7a86da5d13c4cfb7726a70c47f06f1281e4a4bb00a3ed19cfa504f41229fc0ec3273c00375ddc45106373fb741fc792a89da210e8920e355f14778c28c68117d8c3e1c9299bede2d723f189cac17415a641c3f28a7dcadbeecc81ea2da21f14d3b28881cefc0a763ebccf171ae49f05b2bdd680564a7135c22cb88e06eaf8a8b9088a65f5c5939edf55b71ff36a9dada81780e8d46d0c6bdab6d781f741855d1c5fa5928ac48bbf0b5cc34ea071ff592ad2d97912ba1a6ac66dcd4be7de637e72ec1c5f3b8bb3b1759928382c63beb93c159b86f4774d230a416771e8b509e00ddd74061b781c91b3ae4244578b78f699cc4094e0f4c6665f4