acatitlan.edu.mx

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7b:d8:d5:0d:53:22:95:11:6f:11:5a:71:97:d2:81:61:00 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=acatitlan.edu.mx

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7b:d8:d5:0d:53:22:95:11:6f:11:5a:71:97:d2:81:61:00
Serial Number (int): 303479808403134545731464647623815406379264
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 83:f4:35:a2:29:2c:74:b4:d1:5d:b0:56:2f:b4:3f:a8:68:9a:c9:f0
Fingerprint (sha256): 2c:15:e2:54:f9:ce:85:21:48:b3:c4:be:51:39:1c:c8:6e:0a:48:3b:8f:c9:52:ca:71:2c:77:a9:2b:2d:50:24

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate acatitlan.edu.mx

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acatitlan.edu.mx

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acatitlan.edu.mx
admin.acatitlan.edu.mx
admin.aikman.herefordisd.net
admin.athletics.rimsd41.org
admin.bluebonnet.herefordisd.net
admin.bradfordprep.org
admin.branch.luciamarschools.org
admin.carruselamericas.edu.mx
admin.cescalhanschool.org
admin.chscalhanschool.org
admin.cmscalhanschool.org
admin.dana.luciamarschools.org
admin.elementary.alexandercsd.org
admin.fairgrove.luciamarschools.org
admin.fcctc.franklincountyschoolsms.com
admin.fcle.franklincountyschoolsms.com
admin.fhs.franklincountyschoolsms.com
admin.fms.franklincountyschoolsms.com
admin.groverbeach.luciamarschools.org
admin.hcal.herefordisd.net
admin.hhs.herefordisd.net
admin.hjh.herefordisd.net
admin.hmelc.rimsd41.org
admin.hpa.herefordisd.net
admin.lopez.luciamarschools.org
admin.luciamarschools.org
admin.mesa.luciamarschools.org
admin.mhs.centerusd.org
admin.middlehigh.alexandercsd.org
admin.nw.herefordisd.net
admin.paulding.luciamarschools.org
admin.peninsulaheritage.org
admin.preparatoriagea.edu.mx
admin.riverside.k12.pa.us
admin.slc.herefordisd.net
admin.somersetprepdc.org
admin.sunrayisd.org
admin.tb.herefordisd.net
admin.thenewmvb.com
admin.tmlc.rimsd41.org
admin.todaysfreshstart.org
admin.wc.herefordisd.net
aikman.herefordisd.net
athletics.rimsd41.org
bluebonnet.herefordisd.net
bradfordprep.org
branch.luciamarschools.org
carruselamericas.edu.mx
cescalhanschool.org
chscalhanschool.org
cmscalhanschool.org
dana.luciamarschools.org
dlsnc.org
excel.dcs.edu
fairgrove.luciamarschools.org
fcctc.franklincountyschoolsms.com
fcle.franklincountyschoolsms.com
fcue.franklincountyschoolsms.com
fhs.franklincountyschoolsms.com
fms.franklincountyschoolsms.com
groverbeach.luciamarschools.org
hcal.herefordisd.net
hhs.herefordisd.net
hjh.herefordisd.net
hmelc.rimsd41.org
hpa.herefordisd.net
jhar.jubileeacademies.org
judkins.luciamarschools.org
lopez.luciamarschools.org
luciamarschools.org
mesa.luciamarschools.org
mhs.centerusd.org
nw.herefordisd.net
paulding.luciamarschools.org
peninsulaheritage.org
preparatoriagea.edu.mx
riverside.k12.pa.us
slc.herefordisd.net
somersetprepdc.org
sunrayisd.org
tb.herefordisd.net
thenewmvb.com
tiegerman.org
tmlc.rimsd41.org
todaysfreshstart.org
wc.herefordisd.net
www.bradfordprep.org
www.cescalhanschool.org
www.chscalhanschool.org
www.cmscalhanschool.org
www.dlsnc.org
www.herefordisd.net
www.luciamarschools.org
www.peninsulaheritage.org
www.riverside.k12.pa.us
www.somersetdc.com
www.somersetprepdc.org
www.sunrayisd.org
www.thenewmvb.com
www.todaysfreshstart.org

Other certificates including the domain name acatitlan.edu.mx

(limited to 100 certificates)

Certificate

The complete raw certificate details for acatitlan.edu.mx in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIQajCCD1KgAwIBAgISA3vY1Q1TIpURbxFacZfSgWEAMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODExMTgxMDQ2NDRaFw0x
OTAyMTYxMDQ2NDRaMBsxGTAXBgNVBAMTEGFjYXRpdGxhbi5lZHUubXgwggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCtrIXp7mbejFBtMdv7bPut9hUKX6mH
mbwUkk4SAS2wWeHzgwVeEiXu4Q62pKUwqxHbZ3Nw0C0rUbmlXdHhEGCfXxFMedMP
19LbsnHJ7J+Vd91RftXDhoavIx/wwT5kaGhpA/RdgHdcMauZAXdn+HZ7pK1qC5s7
6lXAXMbxUMB2dqGxStseulJ5+JrOLKGF4+QvfNCD86ZpCQrvACEk7x6XbPfvksN3
ZUjCt1ZA/YmNXz3Zh360hk6cCTaPIOW/cxhcpcaKUHKtCVZnUB2M4p9GJjRyQW67
8NiS6+Q0qbZ/fNRq/DeyUK6NlYeQgdk2lo23F+yuki1QirlO7vNt6T8xH8kxH2dx
5bJnYy6d35JuB8t/3rA+FUFquuynUc1H4iSjK2vk8w1EHPBbMG9MPwXurpyRRsiC
l6juy2ftvQg1c9iA1PvMVf9Q0JxaP5pon4q7wwpXgQQS5qK+Nb8/5ObrheNc2M/0
XVbz7m2VwmAmEZTITKUJS0BGqE+iNTNCeuHWJRIxE0jaWIngi53H+jdDgTbDoC53
09jJXTmkWAx1Itg1EZBPJBFJpJtDceZ9mL+lCMXJSiGIDv+HSiZSYIgOJBUbfR4e
Fvc4g/dsmKxdkrioSuflkOYp1SA0LcZL7LCtMAFiPQ34RSeiGRSLqKQPiZ7qjnyy
r8hBWbJ6bUz8TQIDAQABo4IMdzCCDHMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQv
a8hNbCwuMvIAIP8tTWxa/G66uzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv
86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu
dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu
dC14My5sZXRzZW5jcnlwdC5vcmcvMIIKKgYDVR0RBIIKITCCCh2CEGFjYXRpdGxh
bi5lZHUubXiCFmFkbWluLmFjYXRpdGxhbi5lZHUubXiCHGFkbWluLmFpa21hbi5o
ZXJlZm9yZGlzZC5uZXSCG2FkbWluLmF0aGxldGljcy5yaW1zZDQxLm9yZ4IgYWRt
aW4uYmx1ZWJvbm5ldC5oZXJlZm9yZGlzZC5uZXSCFmFkbWluLmJyYWRmb3JkcHJl
cC5vcmeCIGFkbWluLmJyYW5jaC5sdWNpYW1hcnNjaG9vbHMub3Jngh1hZG1pbi5j
YXJydXNlbGFtZXJpY2FzLmVkdS5teIIZYWRtaW4uY2VzY2FsaGFuc2Nob29sLm9y
Z4IZYWRtaW4uY2hzY2FsaGFuc2Nob29sLm9yZ4IZYWRtaW4uY21zY2FsaGFuc2No
b29sLm9yZ4IeYWRtaW4uZGFuYS5sdWNpYW1hcnNjaG9vbHMub3JngiFhZG1pbi5l
bGVtZW50YXJ5LmFsZXhhbmRlcmNzZC5vcmeCI2FkbWluLmZhaXJncm92ZS5sdWNp
YW1hcnNjaG9vbHMub3JngidhZG1pbi5mY2N0Yy5mcmFua2xpbmNvdW50eXNjaG9v
bHNtcy5jb22CJmFkbWluLmZjbGUuZnJhbmtsaW5jb3VudHlzY2hvb2xzbXMuY29t
giVhZG1pbi5maHMuZnJhbmtsaW5jb3VudHlzY2hvb2xzbXMuY29tgiVhZG1pbi5m
bXMuZnJhbmtsaW5jb3VudHlzY2hvb2xzbXMuY29tgiVhZG1pbi5ncm92ZXJiZWFj
aC5sdWNpYW1hcnNjaG9vbHMub3JnghphZG1pbi5oY2FsLmhlcmVmb3JkaXNkLm5l
dIIZYWRtaW4uaGhzLmhlcmVmb3JkaXNkLm5ldIIZYWRtaW4uaGpoLmhlcmVmb3Jk
aXNkLm5ldIIXYWRtaW4uaG1lbGMucmltc2Q0MS5vcmeCGWFkbWluLmhwYS5oZXJl
Zm9yZGlzZC5uZXSCH2FkbWluLmxvcGV6Lmx1Y2lhbWFyc2Nob29scy5vcmeCGWFk
bWluLmx1Y2lhbWFyc2Nob29scy5vcmeCHmFkbWluLm1lc2EubHVjaWFtYXJzY2hv
b2xzLm9yZ4IXYWRtaW4ubWhzLmNlbnRlcnVzZC5vcmeCIWFkbWluLm1pZGRsZWhp
Z2guYWxleGFuZGVyY3NkLm9yZ4IYYWRtaW4ubncuaGVyZWZvcmRpc2QubmV0giJh
ZG1pbi5wYXVsZGluZy5sdWNpYW1hcnNjaG9vbHMub3JnghthZG1pbi5wZW5pbnN1
bGFoZXJpdGFnZS5vcmeCHGFkbWluLnByZXBhcmF0b3JpYWdlYS5lZHUubXiCGWFk
bWluLnJpdmVyc2lkZS5rMTIucGEudXOCGWFkbWluLnNsYy5oZXJlZm9yZGlzZC5u
ZXSCGGFkbWluLnNvbWVyc2V0cHJlcGRjLm9yZ4ITYWRtaW4uc3VucmF5aXNkLm9y
Z4IYYWRtaW4udGIuaGVyZWZvcmRpc2QubmV0ghNhZG1pbi50aGVuZXdtdmIuY29t
ghZhZG1pbi50bWxjLnJpbXNkNDEub3JnghphZG1pbi50b2RheXNmcmVzaHN0YXJ0
Lm9yZ4IYYWRtaW4ud2MuaGVyZWZvcmRpc2QubmV0ghZhaWttYW4uaGVyZWZvcmRp
c2QubmV0ghVhdGhsZXRpY3Mucmltc2Q0MS5vcmeCGmJsdWVib25uZXQuaGVyZWZv
cmRpc2QubmV0ghBicmFkZm9yZHByZXAub3JnghpicmFuY2gubHVjaWFtYXJzY2hv
b2xzLm9yZ4IXY2FycnVzZWxhbWVyaWNhcy5lZHUubXiCE2Nlc2NhbGhhbnNjaG9v
bC5vcmeCE2Noc2NhbGhhbnNjaG9vbC5vcmeCE2Ntc2NhbGhhbnNjaG9vbC5vcmeC
GGRhbmEubHVjaWFtYXJzY2hvb2xzLm9yZ4IJZGxzbmMub3Jngg1leGNlbC5kY3Mu
ZWR1gh1mYWlyZ3JvdmUubHVjaWFtYXJzY2hvb2xzLm9yZ4IhZmNjdGMuZnJhbmts
aW5jb3VudHlzY2hvb2xzbXMuY29tgiBmY2xlLmZyYW5rbGluY291bnR5c2Nob29s
c21zLmNvbYIgZmN1ZS5mcmFua2xpbmNvdW50eXNjaG9vbHNtcy5jb22CH2Zocy5m
cmFua2xpbmNvdW50eXNjaG9vbHNtcy5jb22CH2Ztcy5mcmFua2xpbmNvdW50eXNj
aG9vbHNtcy5jb22CH2dyb3ZlcmJlYWNoLmx1Y2lhbWFyc2Nob29scy5vcmeCFGhj
YWwuaGVyZWZvcmRpc2QubmV0ghNoaHMuaGVyZWZvcmRpc2QubmV0ghNoamguaGVy
ZWZvcmRpc2QubmV0ghFobWVsYy5yaW1zZDQxLm9yZ4ITaHBhLmhlcmVmb3JkaXNk
Lm5ldIIZamhhci5qdWJpbGVlYWNhZGVtaWVzLm9yZ4IbanVka2lucy5sdWNpYW1h
cnNjaG9vbHMub3Jnghlsb3Blei5sdWNpYW1hcnNjaG9vbHMub3JnghNsdWNpYW1h
cnNjaG9vbHMub3JnghhtZXNhLmx1Y2lhbWFyc2Nob29scy5vcmeCEW1ocy5jZW50
ZXJ1c2Qub3JnghJudy5oZXJlZm9yZGlzZC5uZXSCHHBhdWxkaW5nLmx1Y2lhbWFy
c2Nob29scy5vcmeCFXBlbmluc3VsYWhlcml0YWdlLm9yZ4IWcHJlcGFyYXRvcmlh
Z2VhLmVkdS5teIITcml2ZXJzaWRlLmsxMi5wYS51c4ITc2xjLmhlcmVmb3JkaXNk
Lm5ldIISc29tZXJzZXRwcmVwZGMub3Jngg1zdW5yYXlpc2Qub3JnghJ0Yi5oZXJl
Zm9yZGlzZC5uZXSCDXRoZW5ld212Yi5jb22CDXRpZWdlcm1hbi5vcmeCEHRtbGMu
cmltc2Q0MS5vcmeCFHRvZGF5c2ZyZXNoc3RhcnQub3JnghJ3Yy5oZXJlZm9yZGlz
ZC5uZXSCFHd3dy5icmFkZm9yZHByZXAub3Jnghd3d3cuY2VzY2FsaGFuc2Nob29s
Lm9yZ4IXd3d3LmNoc2NhbGhhbnNjaG9vbC5vcmeCF3d3dy5jbXNjYWxoYW5zY2hv
b2wub3Jngg13d3cuZGxzbmMub3JnghN3d3cuaGVyZWZvcmRpc2QubmV0ghd3d3cu
bHVjaWFtYXJzY2hvb2xzLm9yZ4IZd3d3LnBlbmluc3VsYWhlcml0YWdlLm9yZ4IX
d3d3LnJpdmVyc2lkZS5rMTIucGEudXOCEnd3dy5zb21lcnNldGRjLmNvbYIWd3d3
LnNvbWVyc2V0cHJlcGRjLm9yZ4IRd3d3LnN1bnJheWlzZC5vcmeCEXd3dy50aGVu
ZXdtdmIuY29tghh3d3cudG9kYXlzZnJlc2hzdGFydC5vcmcwTAYDVR0gBEUwQzAI
BgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nw
cy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwB0ftqD
Ma0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWcmpPYmAAAEAwBIMEYCIQC7
C5sk2Nnk9RlASUnd7sukDOiIQj1USzCp/+mohH5RJwIhAOXdiKEzc+G2LMeTK3Uh
j7yU29PLCZv4PpD45KPou6MaAHYAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHH
aFRL2I0AAAFnJqT4QAAABAMARzBFAiA2a2aFiLstiV5PyNnRFe0YN1gthRxX9var
zd3KNKXyYQIhAKjlXqXPz5ktg21vHzN9i613XAiR7favPccVGUpzvuTlMA0GCSqG
SIb3DQEBCwUAA4IBAQAftd15ZAftRizXkAzAhh83RuCqgI+t+I52gVDdT3D/4oHA
ParCbc0SLCPWuGVtiNqCmGHYvSsyxA+OUFeNDk8UxWbl6J9YTrciaslvQ5wa7GOl
4HrQljj5tdlQajF2xeS7lqV8l5CCYFaWfKJEdVIlsWplEKP7udDV4p6b7IcC5ldK
TTyWySi2eqZWCJgBJzzSxsUgdsbpphRozVrm5JeoZc6JjIM7TXMTRmHmYFI5PG4Y
ST3saHDkfcM76UjetHmCAeKndQNX3GRFXeWI+TzKrtzcDzw+jYmDqRi7OuJdyBm5
LJWgvZVe1iNx6yg2o+Ui093K5PA1tCvcAwnwdlSn
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303479808403134545731464647623815406379264
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-18 10:46:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-16 10:46:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acatitlan.edu.mx'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2593 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acatitlan.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.acatitlan.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.aikman.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.athletics.rimsd41.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bluebonnet.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bradfordprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.branch.luciamarschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.carruselamericas.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cescalhanschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.chscalhanschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cmscalhanschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dana.luciamarschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.elementary.alexandercsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fairgrove.luciamarschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fcctc.franklincountyschoolsms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fcle.franklincountyschoolsms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fhs.franklincountyschoolsms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fms.franklincountyschoolsms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.groverbeach.luciamarschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hcal.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hhs.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hjh.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hmelc.rimsd41.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hpa.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lopez.luciamarschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.luciamarschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mesa.luciamarschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mhs.centerusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.middlehigh.alexandercsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nw.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.paulding.luciamarschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.peninsulaheritage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.preparatoriagea.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.riverside.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.slc.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.somersetprepdc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sunrayisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tb.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.thenewmvb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tmlc.rimsd41.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.todaysfreshstart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wc.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aikman.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athletics.rimsd41.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluebonnet.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bradfordprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branch.luciamarschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carruselamericas.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cescalhanschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chscalhanschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmscalhanschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dana.luciamarschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlsnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'excel.dcs.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fairgrove.luciamarschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcctc.franklincountyschoolsms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcle.franklincountyschoolsms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcue.franklincountyschoolsms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fhs.franklincountyschoolsms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fms.franklincountyschoolsms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groverbeach.luciamarschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcal.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhs.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hjh.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hmelc.rimsd41.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpa.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhar.jubileeacademies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'judkins.luciamarschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lopez.luciamarschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luciamarschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesa.luciamarschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhs.centerusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nw.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paulding.luciamarschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peninsulaheritage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preparatoriagea.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riverside.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slc.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'somersetprepdc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunrayisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tb.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thenewmvb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiegerman.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmlc.rimsd41.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'todaysfreshstart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wc.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bradfordprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cescalhanschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chscalhanschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmscalhanschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dlsnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luciamarschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peninsulaheritage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverside.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.somersetdc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.somersetprepdc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunrayisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thenewmvb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.todaysfreshstart.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016726a4f6260000040300483046022100bb0b9b24d8d9e4f519404949ddeecba40ce888423d544b30a9ffe9a8847e5127022100e5dd88a13373e1b62cc7932b75218fbc94dbd3cb099bf83e90f8e4a3e8bba31a00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016726a4f84000000403004730450220366b668588bb2d895e4fc8d9d115ed1837582d851c57f6f6abcdddca34a5f261022100a8e55ea5cfcf992d836d6f1f337d8bad775c0891edf6af3dc715194a73bee4e5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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