south.legacyprep.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5e:b2:23:24:a4:42:9a:40:33:df:b2:bc:cd:8a:d6:ea:37 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=south.legacyprep.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5e:b2:23:24:a4:42:9a:40:33:df:b2:bc:cd:8a:d6:ea:37
Serial Number (int): 293560185342669496121985061890180393658935
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fe:cf:8b:2b:72:86:58:b0:7c:ce:60:20:07:af:e8:c3:4d:60:33:6c
Fingerprint (sha256): 2f:8f:6d:8c:18:8e:9c:8a:c8:41:c4:13:4b:4c:45:bd:90:f3:f1:56:89:5f:e7:fc:79:b4:77:1a:2a:e2:ca:9d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate south.legacyprep.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for south.legacyprep.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.aes.fentressboe.com
admin.cchs.canoncityschools.org
admin.ccms.canoncityschools.org
admin.ces.canoncityschools.org
admin.ces.gpusd.org
admin.chs.fentressboe.com
admin.clarendon.sboe.org
admin.coa.canoncityschools.org
admin.fairview.gfusd.net
admin.gaec.burkburnettisd.org
admin.gms.gfusd.net
admin.granitepointe.gfusd.net
admin.harrison.canoncityschools.org
admin.headstart.burkburnettisd.org
admin.hes.gpusd.org
admin.hes.jcsd.net
admin.horizon.gfusd.net
admin.huber.sboe.org
admin.ivelem.apluscharterschools.org
admin.ivsec.apluscharterschools.org
admin.jcap.jcsd.net
admin.kendrick.gfusd.net
admin.kernhigh.org
admin.lincoln.canoncityschools.org
admin.mckinley.canoncityschools.org
admin.mhafyos.org
admin.mms.gfusd.net
admin.mvcks.canoncityschools.org
admin.oms.gfusd.net
admin.phs.fentressboe.com
admin.plantation.gfusd.net
admin.planz.gfusd.net
admin.rdr.gpusd.org
admin.res.jcsd.net
admin.rhs.jcsd.net
admin.rice.garvey.k12.ca.us
admin.rms.jcsd.net
admin.sanchez.garvey.k12.ca.us
admin.sfes.fentressboe.com
admin.shs.sboe.org
admin.sjes.gpusd.org
admin.sms.sboe.org
admin.south.legacyprep.org
admin.templeint.garvey.k12.ca.us
admin.tes.gpusd.org
admin.ths.gpusd.org
admin.valleverde.gfusd.net
admin.washington.canoncityschools.org
admin.willard.garvey.k12.ca.us
admin.yes.fentressboe.com
aes.fentressboe.com
cchs.canoncityschools.org
ccms.canoncityschools.org
ces.canoncityschools.org
ces.gpusd.org
chs.fentressboe.com
clarendon.sboe.org
coa.canoncityschools.org
fairview.gfusd.net
gms.gfusd.net
granitepointe.gfusd.net
harrison.canoncityschools.org
hes.gpusd.org
hes.jcsd.net
horizon.gfusd.net
huber.sboe.org
ivsec.apluscharterschools.org
jcap.jcsd.net
kendrick.gfusd.net
lincoln.canoncityschools.org
mckinley.canoncityschools.org
mhafyos.org
mms.gfusd.net
mvcks.canoncityschools.org
mvista.garvey.k12.ca.us
oms.gfusd.net
palla.gfusd.net
phs.fentressboe.com
plantation.gfusd.net
planz.gfusd.net
rdr.gpusd.org
res.jcsd.net
rhs.jcsd.net
rice.garvey.k12.ca.us
rms.jcsd.net
sanchez.garvey.k12.ca.us
sfes.fentressboe.com
shs.sboe.org
sjes.gpusd.org
sms.sboe.org
south.legacyprep.org
templeint.garvey.k12.ca.us
tes.gpusd.org
ths.gpusd.org
valleverde.gfusd.net
washington.canoncityschools.org
willard.garvey.k12.ca.us
www.kernhigh.org
www.mhafyos.org
yes.fentressboe.com

Other certificates including the domain name legacyprep.org

(limited to 100 certificates)
admin.acsc.net
www.cerratosd.org
forest.riverviewschools.com
admin.houstonelem.net
admin.aes.fentressboe.com
admin.acsc.net
academywest.hamadyhawks.net
stnorbertschool.org
www.windham.k12.ct.us
legacyprep.org
www.sgisd.net
admin.benjamin.bendist25.org
admin.altavista.unionsd.org
admin.aes.fentressboe.com
admin.arvin.kernhigh.org
admin.aes.fentressboe.com
cerratosd.org
admin.apluscharterschools.org
admin.benjamin.bendist25.org
admin.lshs.wuhsd.org
admin.aes.fentressboe.com
admin.arvin.kernhigh.org
admin.apluscharterschools.org
south.legacyprep.org
admin.kabbalahacademy.net
admin.sd44.org
legacyprep.org
qhs.burnetcisd.net
admin.benjamin.bendist25.org
admin.apluscharterschools.org
admin.altavista.unionsd.org
admin.altavista.unionsd.org
admin.mes.mcduffie.k12.ga.us
admin.gfusd.net
admin.aes.fentressboe.com
admin.acsc.net
www.sangabrielmissionfiesta.org
admin.benjamin.bendist25.org
admin.fentressboe.com
north.legacyprep.org
sgisd.net
north.legacyprep.org
legacyprep.org
legacyprep.org
admin.acsc.net
admin.apluscharterschools.org
admin.youngelem.net
admin.acsc.net
admin.bhs.burkburnettisd.org
admin.south.legacyprep.org
admin.d124.org
admin.altavista.unionsd.org
admin.ec.sd44.org
forest.riverviewschools.com
admin.benjamin.bendist25.org
sphsgoldeneagles.org
admin.canoncityschools.org
admin.bf.sd44.org
admin.acsc.net
admin.altavista.unionsd.org
stnorbertschool.org
admin.arvin.kernhigh.org
admin.altavista.unionsd.org
legacyprep.org
admin.altavista.unionsd.org
admin.altavista.unionsd.org
admin.aes.fentressboe.com
admin.legacyprep.org
admin.bhs.burkburnettisd.org
admin.benjamin.bendist25.org
edwards.tisd.org
www.bendist25.org
admin.bas.kernhigh.org
admin.sboe.org
admin.north.legacyprep.org
legacyprep.org
admin.acsc.net
workforce.kernhigh.org
remoteapp.legacyprep.org
admin.benjamin.bendist25.org
admin.benjamin.bendist25.org
admin.stnorbertschool.org
admin.aes.fentressboe.com
admin.apluselem.apluscharterschools.org
admin.aes.fentressboe.com
admin.boydisd.net
admin.apluselem.apluscharterschools.org
admin.benjamin.bendist25.org

Certificate

The complete raw certificate details for south.legacyprep.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293560185342669496121985061890180393658935
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-07 21:30:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-05 21:30:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'south.legacyprep.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2382 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.aes.fentressboe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cchs.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ccms.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ces.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ces.gpusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.chs.fentressboe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.clarendon.sboe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.coa.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fairview.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gaec.burkburnettisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gms.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.granitepointe.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.harrison.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.headstart.burkburnettisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hes.gpusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hes.jcsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.horizon.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.huber.sboe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ivelem.apluscharterschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ivsec.apluscharterschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jcap.jcsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kendrick.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lincoln.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mckinley.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mhafyos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mms.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mvcks.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.oms.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.phs.fentressboe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.plantation.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.planz.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rdr.gpusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.res.jcsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rhs.jcsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rice.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rms.jcsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sanchez.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sfes.fentressboe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.shs.sboe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sjes.gpusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sms.sboe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.south.legacyprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.templeint.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tes.gpusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ths.gpusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.valleverde.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.washington.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.willard.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.yes.fentressboe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aes.fentressboe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cchs.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccms.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ces.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ces.gpusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chs.fentressboe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clarendon.sboe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coa.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fairview.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gms.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'granitepointe.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrison.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hes.gpusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hes.jcsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horizon.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huber.sboe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivsec.apluscharterschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcap.jcsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kendrick.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincoln.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mckinley.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhafyos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvcks.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvista.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oms.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palla.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phs.fentressboe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plantation.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planz.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdr.gpusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'res.jcsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhs.jcsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rice.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rms.jcsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanchez.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfes.fentressboe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shs.sboe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjes.gpusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms.sboe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'south.legacyprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'templeint.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tes.gpusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ths.gpusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valleverde.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washington.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willard.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mhafyos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yes.fentressboe.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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