canyon.cv.k12.ca.us

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2d:5d:28:3d:b5:8d:01:a3:ab:c1:eb:3d:8d:01:95:42:97 was issued on by Let's Encrypt.

With 53 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=canyon.cv.k12.ca.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2d:5d:28:3d:b5:8d:01:a3:ab:c1:eb:3d:8d:01:95:42:97
Serial Number (int): 276773391453816231971067224627321125552791
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): db:a6:79:e6:8d:08:82:fe:b6:42:3d:1a:9c:3c:1c:20:fd:f5:63:fd
Fingerprint (sha256): 2e:40:86:cc:ff:50:3f:c9:17:c4:a9:d9:d3:f1:dc:63:30:9f:28:bb:35:df:0c:17:d5:e5:bd:a5:7c:c6:32:4d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate canyon.cv.k12.ca.us

53

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for canyon.cv.k12.ca.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.addams.southredford.org
admin.ajshs.anacondaschools.org
admin.anacondaschools.org
admin.bhs.bolingisd.net
admin.bolingisd.net
admin.creekside.cv.k12.ca.us
admin.cve.cv.k12.ca.us
admin.fmis.anacondaschools.org
admin.ghctk12.com
admin.hss.dover.k12.nh.us
admin.iago.bolingisd.net
admin.jefferson.southredford.org
admin.lisanorthhigh.lisaacademy.org
admin.ms.slvusd.org
admin.newgulf.bolingisd.net
admin.stanton.cv.k12.ca.us
admin.swprep.org
admin.virtualacademy.cv.k12.ca.us
anacondaschools.org
bb.elanco.org
bhs.bolingisd.net
br.elanco.org
bufordhs.org
canyon.cv.k12.ca.us
cve.cv.k12.ca.us
fairfield1.org
ghctk12.com
gshs.elanco.org
gsms.elanco.org
har.sau29.org
holualoa.school
iago.bolingisd.net
ises.comalisd.org
lincoln.anacondaschools.org
mvms.comalisd.org
newgulf.bolingisd.net
nh.elanco.org
palomares.cv.k12.ca.us
proctor.cv.k12.ca.us
rap48.richardallenschools.com
rbes.comalisd.org
redwood.cv.k12.ca.us
webadmin.bb.elanco.org
webadmin.br.elanco.org
webadmin.elanco.org
webadmin.gshs.elanco.org
www.anacondaschools.org
www.bolingisd.net
www.cv.k12.ca.us
www.ghctk12.com
www.swprep.org
www.trinityhallnj.org
www.whitmanhs.org

Other certificates including the domain name cv.k12.ca.us

(limited to 100 certificates)
kahuluischool.k12.hi.us
www.sandymilleracademy.com
gutierrez.hcisd.org
palomares.cv.k12.ca.us
www.bhef.org
sacredheartacademyhempstead.org
admin.amschool.edu.sv
admin.cvlcc.org
webadmin.br.elanco.org
www.cv.k12.ca.us
sems.cv.k12.ca.us
admin.proctor.cv.k12.ca.us
*.cv.k12.ca.us
admin.canyon.cv.k12.ca.us
admin.mshs.monessenschooldistrict.com
admin.veca.gocats.org
admin.rowlettacademy.org
admin.bowie.hcisd.org
www.msd120.org
fremont.bcsd.com
admin.chabot.cv.k12.ca.us
*.cv.k12.ca.us
www.rowlettacademy.org
admin.nichols.bcsd.com
admin.cv.k12.ca.us
www.hilltopprep.org
admin.independent.cv.k12.ca.us
svms.comalisd.org
admin.gctech.edu
admin.cano.hcisd.org
admin.crma5.org
cv.k12.ca.us
admin.clarendon.sboe.org
dover.k12.nh.us
redwood.cv.k12.ca.us
admin.crawfordschools.org
admin.milam.hcisd.org
cv.k12.ca.us
admin.cve.cv.k12.ca.us
ps16.jcboe.org
admin.creekside.cv.k12.ca.us
canyon.cv.k12.ca.us
admin.vannoy.cv.k12.ca.us
admin.evergreen.bcsd.com
admin.dms.dover.k12.nh.us
admin.hs.crawfordschools.org
admin.alma.cv.k12.ca.us
crockett.hcisd.org
admin.longfellow.bcsd.com
admin.bonham.hcisd.org
burney.hattiesburgpsd.com
www.anacondaschools.org
ballingerisd.net
webadmin.nh.elanco.org
chs.comalisd.org
admin.bce.slvusd.org
admin.cornerstone.pvpusd.net
admin.redwood.cv.k12.ca.us
cv.k12.ca.us
admin.fairfield1.org
kahuluischool.k12.hi.us
admin.lunadabay.pvpusd.net
cses.comalisd.org
admin.cve.cv.k12.ca.us
admin.proctor.cv.k12.ca.us
painesville-city.k12.oh.us
admin.alma.cv.k12.ca.us
cdc.comalisd.org
admin.woodley.hattiesburgpsd.com
admin.gutierrez.hcisd.org
webadmin.elanco.org
admin.austin.hcisd.org
newgulf.bolingisd.net
admin.stanton.cv.k12.ca.us
chabot.cv.k12.ca.us
admin.newpathways.hcisd.org
cv.k12.ca.us
ghctk12.com
admin.cvhs.cv.k12.ca.us
admin.cve.cv.k12.ca.us
harding.bcsd.com
canyon.cv.k12.ca.us
kahoiwai.kalo.org
admin.chabot.cv.k12.ca.us
www.fpcharter.org
admin.echs.hcisd.org
webadmin.gsms.elanco.org
fmis.anacondaschools.org
admin.creekside.cv.k12.ca.us
proctor.cv.k12.ca.us
cv.k12.ca.us
alma.cv.k12.ca.us
creekside.cv.k12.ca.us
admin.bethune.hattiesburgpsd.com
www.gctech.edu
admin.creekside.cv.k12.ca.us
admin.swprep.org
admin.charter.slvusd.org
hhs.hcisd.org
downtown.bcsd.com

Certificate

The complete raw certificate details for canyon.cv.k12.ca.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 276773391453816231971067224627321125552791
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-01 16:57:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-30 16:57:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'canyon.cv.k12.ca.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1194 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.addams.southredford.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ajshs.anacondaschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.anacondaschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bhs.bolingisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bolingisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.creekside.cv.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cve.cv.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fmis.anacondaschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ghctk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hss.dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.iago.bolingisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jefferson.southredford.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lisanorthhigh.lisaacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ms.slvusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.newgulf.bolingisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stanton.cv.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.swprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.virtualacademy.cv.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anacondaschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bb.elanco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhs.bolingisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'br.elanco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bufordhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canyon.cv.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cve.cv.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fairfield1.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghctk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gshs.elanco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsms.elanco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'har.sau29.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holualoa.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iago.bolingisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ises.comalisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincoln.anacondaschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvms.comalisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newgulf.bolingisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nh.elanco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palomares.cv.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proctor.cv.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rap48.richardallenschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbes.comalisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redwood.cv.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webadmin.bb.elanco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webadmin.br.elanco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webadmin.elanco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webadmin.gshs.elanco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anacondaschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bolingisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cv.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghctk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trinityhallnj.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whitmanhs.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169da0cf9b50000040300473045022100d275963f63cf19a34c5662708c6e9dfe697fff7c4bacac075fdace54716765a5022016a2c48f9191563ca8c4cca69fc5ab887518a5828ef93154b806f16f5b66ee50007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169da0cfa03000004030047304502205c4fdd88497b023fdcca7c13b5f679a300224993a6bf5891f7375177b5009ffa022100adeee62a2e25ef2d4319a8348641be5e230f7d43a909ac9465a2731f02111442
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00496569658515d7bf7cdd56f80343e1292b305e678615f835e93bcc5aac80959a73a5a0c82c1afc3582ca9c7deb8de2c60e8bdc8f397344407d88962c3125e77b262f83295bb84176bf7f938f72ae38b609f1dd24d18011e5e4bab3ade08273694aa022e93e0c3ee417c499d86de1b8b8c34c520cf8d990c7cb444859d4545b25fa1912c4631bb372b7ce1b7a50d6c8a135d7e771a6cdd8c20148995a58103b91ff6bd457dbb48a877ea35f1c62d729f8c2fb7f934114ab1d60e5e8feae68740fd8965731a1a1b3fdd3cd99143a12586733b2511f4970b1649a4bf58bcbfe37149a170a331ff2bd9f3c8c8abadaffc0f8c21f4684a9a33c0cc7faee62fac531c4