www.grandville.k12.mi.us

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c0:32:5d:c4:85:98:28:ce:78:54:e9:a6:83:09:bc:87:d9 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.grandville.k12.mi.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c0:32:5d:c4:85:98:28:ce:78:54:e9:a6:83:09:bc:87:d9
Serial Number (int): 326738020513434733441131679217528424138713
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 07:f5:61:85:6e:e2:5a:56:a5:1e:5f:75:d4:b5:c2:7c:0f:5b:1b:cb
Fingerprint (sha256): 2f:e9:e4:20:ef:9c:24:74:14:46:87:69:db:b7:8f:db:c9:f4:4e:da:9f:7d:83:cc:f0:a1:a2:60:e8:45:9b:66

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.grandville.k12.mi.us

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.grandville.k12.mi.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.es.elkhartisd.org
admin.gtchs.org
admin.holyfamilyhs.com
admin.hs.elkhartisd.org
admin.is.elkhartisd.org
admin.kahukuhigh.org
admin.ms.elkhartisd.org
admin.orcaeagles.org
admin.res.davidson.k12.nc.us
admin.sbdiocesecef.org
admin.sdhs.davidson.k12.nc.us
admin.sme.davidson.k12.nc.us
admin.sms.davidson.k12.nc.us
admin.sts.davidson.k12.nc.us
admin.sves.davidson.k12.nc.us
admin.tes.davidson.k12.nc.us
admin.tms.davidson.k12.nc.us
admin.upshurschools.com
admin.va.davidson.k12.nc.us
admin.vciseagles.org
bes.gobearsgo.net
bhs.gobearsgo.net
bis.gobearsgo.net
bjh.gobearsgo.net
bl.parkerusd.org
bradley.usd207.org
ces.gobearsgo.net
ces35.cliftonisd.org
cfh.chesterfieldschools.org
chs.chesterfieldschools.org
chs.cliftonisd.org
cis.chesterfieldschools.org
cms.cliftonisd.org
cnh.chesterfieldschools.org
colehs.fshisd.net
colems.fshisd.net
coop.fshisd.net
cps.chesterfieldschools.org
crms.chesterfieldschools.org
cte.chesterfieldschools.org
dz.aceroschools.org
ees.chesterfieldschools.org
eisenhower.usd207.org
es.elkhartisd.org
es.roosevelt.k12.tx.us
fa.arrowacademy.org
fshelem.fshisd.net
gtchs.org
hs.elkhartisd.org
hs.roosevelt.k12.tx.us
is.elkhartisd.org
jes.chesterfieldschools.org
jh.roosevelt.k12.tx.us
kahukuhigh.org
lms.chesterfieldschools.org
lp.parkerusd.org
macarthur.usd207.org
mes.chesterfieldschools.org
mhs.chesterfieldschools.org
ms.elkhartisd.org
nhms.chesterfieldschools.org
patton.usd207.org
pes.chesterfieldschools.org
pps.chesterfieldschools.org
pve.chesterfieldschools.org
res.chesterfieldschools.org
sbdiocesecef.org
south.fisd.us
triviumcharter.org
upshurschools.com
vciseagles.org
webster.usd465.com
www.brentwood.k12.mo.us
www.brentwoodmoschools.org
www.chesterfieldschools.org
www.cliftonisd.org
www.elkhartisd.org
www.fshisd.net
www.fuchsmizrachi.org
www.gobearsgo.net
www.grandville.k12.mi.us
www.gtchs.org
www.hbuhsd.edu
www.hemetusd.k12.ca.us
www.hemetusd.org
www.jecc.org
www.kahukuhigh.org
www.magnoliaisd.org
www.parkerusd.org
www.phillips.k12.wi.us
www.reaganacademy.org
www.roosevelt.k12.tx.us
www.sbdiocesecef.org
www.smcjuhsd.org
www.tahquitzhs.org
www.upshurschools.com
www.usd207.org
www.vciseagles.org
www2.smcjuhsd.org

Other certificates including the domain name grandville.k12.mi.us

(limited to 100 certificates)
10.bellevilleschools.org
*.grandville.k12.mi.us
www.leavittms.net
www.icampus.grandville.k12.mi.us
admin.eagleridgeacademy.net
komarek94.org
casshigh.bartow.k12.ga.us
*.grandville.k12.mi.us
10.bellevilleschools.org
anacondaschools.org
www.btaallday.org
www.icampus.grandville.k12.mi.us
acrma8.org
www.icampus.grandville.k12.mi.us
www.icampus.grandville.k12.mi.us
www.portrichmondhs.org
www.grandville.k12.mi.us
admin.kpe.mpsdnow.org
www.grandville.k12.mi.us
admin.eue.mpsdnow.org
www.grandville.k12.mi.us
owensintermediate.bcsd.com
10.bellevilleschools.org
www.grandville.k12.mi.us
admin.kes.pullmanschools.org
10.bellevilleschools.org
www.ciudaddelosninoscr.org
www.mpsdnow.org
admin.ar.cypsd.org
www.campacharter.org
bellevilleschools.org
acrma8.org
*.grandville.k12.mi.us
admin.btaallday.org
acrma8.org
www.ms-ap.org
www.grandville.k12.mi.us
*.grandville.k12.mi.us
admin.mphs.mpsdnow.org
*.grandville.k12.mi.us
*.grandville.k12.mi.us
www.grandville.k12.mi.us
mms.mpsdnow.org
cte.mpsdnow.org
admin.mms.mpsdnow.org
admin.sycamoreprep.org
admin.kindergartenacademy.mbgsd.org
www.marissa40.org
cses.comalisd.org
3.bellevilleschools.org
admin.nichols.bcsd.com
bayheadschool.org
academyofthecanyons.net
admin.churchill.edu.mx
acsaregion16.com
alamo.otsegops.org
hles.comalisd.org
admin.leavittms.net
*.grandville.k12.mi.us
acrma8.org
mphs.mpsdnow.org
dms.dover.k12.nh.us
admin.masterschool.org
www.btaallday.org
www.grandville.k12.mi.us
admin.cecdc914.org
www.masterschool.org
3rcs.org
mpsdnow.org
10.bellevilleschools.org
admin.washington.bcsd.com
acrma8.org
garza.bcsd.com

Certificate

The complete raw certificate details for www.grandville.k12.mi.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIO1TCCDb2gAwIBAgISA8AyXcSFmCjOeFTppoMJvIfZMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzEwMjEwMTIwMjZaFw0x
ODAxMTkwMTIwMjZaMCMxITAfBgNVBAMTGHd3dy5ncmFuZHZpbGxlLmsxMi5taS51
czCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK2shenuZt6MUG0x2/ts
+632FQpfqYeZvBSSThIBLbBZ4fODBV4SJe7hDrakpTCrEdtnc3DQLStRuaVd0eEQ
YJ9fEUx50w/X0tuyccnsn5V33VF+1cOGhq8jH/DBPmRoaGkD9F2Ad1wxq5kBd2f4
dnukrWoLmzvqVcBcxvFQwHZ2obFK2x66Unn4ms4soYXj5C980IPzpmkJCu8AISTv
Hpds9++Sw3dlSMK3VkD9iY1fPdmHfrSGTpwJNo8g5b9zGFylxopQcq0JVmdQHYzi
n0YmNHJBbrvw2JLr5DSptn981Gr8N7JQro2Vh5CB2TaWjbcX7K6SLVCKuU7u823p
PzEfyTEfZ3HlsmdjLp3fkm4Hy3/esD4VQWq67KdRzUfiJKMra+TzDUQc8Fswb0w/
Be6unJFGyIKXqO7LZ+29CDVz2IDU+8xV/1DQnFo/mmifirvDCleBBBLmor41vz/k
5uuF41zYz/RdVvPubZXCYCYRlMhMpQlLQEaoT6I1M0J64dYlEjETSNpYieCLncf6
N0OBNsOgLnfT2MldOaRYDHUi2DURkE8kEUmkm0Nx5n2Yv6UIxclKIYgO/4dKJlJg
iA4kFRt9Hh4W9ziD92yYrF2SuKhK5+WQ5inVIDQtxkvssK0wAWI9DfhFJ6IZFIuo
pA+JnuqOfLKvyEFZsnptTPxNAgMBAAGjggraMIIK1jAOBgNVHQ8BAf8EBAMCBaAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD
VR0OBBYEFC9ryE1sLC4y8gAg/y1NbFr8brq7MB8GA1UdIwQYMBaAFKhKamMEfd26
5tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDov
L29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDov
L2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wggjjBgNVHREEggjaMIII1oIX
YWRtaW4uZXMuZWxraGFydGlzZC5vcmeCD2FkbWluLmd0Y2hzLm9yZ4IWYWRtaW4u
aG9seWZhbWlseWhzLmNvbYIXYWRtaW4uaHMuZWxraGFydGlzZC5vcmeCF2FkbWlu
LmlzLmVsa2hhcnRpc2Qub3JnghRhZG1pbi5rYWh1a3VoaWdoLm9yZ4IXYWRtaW4u
bXMuZWxraGFydGlzZC5vcmeCFGFkbWluLm9yY2FlYWdsZXMub3JnghxhZG1pbi5y
ZXMuZGF2aWRzb24uazEyLm5jLnVzghZhZG1pbi5zYmRpb2Nlc2VjZWYub3Jngh1h
ZG1pbi5zZGhzLmRhdmlkc29uLmsxMi5uYy51c4IcYWRtaW4uc21lLmRhdmlkc29u
LmsxMi5uYy51c4IcYWRtaW4uc21zLmRhdmlkc29uLmsxMi5uYy51c4IcYWRtaW4u
c3RzLmRhdmlkc29uLmsxMi5uYy51c4IdYWRtaW4uc3Zlcy5kYXZpZHNvbi5rMTIu
bmMudXOCHGFkbWluLnRlcy5kYXZpZHNvbi5rMTIubmMudXOCHGFkbWluLnRtcy5k
YXZpZHNvbi5rMTIubmMudXOCF2FkbWluLnVwc2h1cnNjaG9vbHMuY29tghthZG1p
bi52YS5kYXZpZHNvbi5rMTIubmMudXOCFGFkbWluLnZjaXNlYWdsZXMub3JnghFi
ZXMuZ29iZWFyc2dvLm5ldIIRYmhzLmdvYmVhcnNnby5uZXSCEWJpcy5nb2JlYXJz
Z28ubmV0ghFiamguZ29iZWFyc2dvLm5ldIIQYmwucGFya2VydXNkLm9yZ4ISYnJh
ZGxleS51c2QyMDcub3JnghFjZXMuZ29iZWFyc2dvLm5ldIIUY2VzMzUuY2xpZnRv
bmlzZC5vcmeCG2NmaC5jaGVzdGVyZmllbGRzY2hvb2xzLm9yZ4IbY2hzLmNoZXN0
ZXJmaWVsZHNjaG9vbHMub3JnghJjaHMuY2xpZnRvbmlzZC5vcmeCG2Npcy5jaGVz
dGVyZmllbGRzY2hvb2xzLm9yZ4ISY21zLmNsaWZ0b25pc2Qub3JnghtjbmguY2hl
c3RlcmZpZWxkc2Nob29scy5vcmeCEWNvbGVocy5mc2hpc2QubmV0ghFjb2xlbXMu
ZnNoaXNkLm5ldIIPY29vcC5mc2hpc2QubmV0ghtjcHMuY2hlc3RlcmZpZWxkc2No
b29scy5vcmeCHGNybXMuY2hlc3RlcmZpZWxkc2Nob29scy5vcmeCG2N0ZS5jaGVz
dGVyZmllbGRzY2hvb2xzLm9yZ4ITZHouYWNlcm9zY2hvb2xzLm9yZ4IbZWVzLmNo
ZXN0ZXJmaWVsZHNjaG9vbHMub3JnghVlaXNlbmhvd2VyLnVzZDIwNy5vcmeCEWVz
LmVsa2hhcnRpc2Qub3JnghZlcy5yb29zZXZlbHQuazEyLnR4LnVzghNmYS5hcnJv
d2FjYWRlbXkub3JnghJmc2hlbGVtLmZzaGlzZC5uZXSCCWd0Y2hzLm9yZ4IRaHMu
ZWxraGFydGlzZC5vcmeCFmhzLnJvb3NldmVsdC5rMTIudHgudXOCEWlzLmVsa2hh
cnRpc2Qub3JnghtqZXMuY2hlc3RlcmZpZWxkc2Nob29scy5vcmeCFmpoLnJvb3Nl
dmVsdC5rMTIudHgudXOCDmthaHVrdWhpZ2gub3JnghtsbXMuY2hlc3RlcmZpZWxk
c2Nob29scy5vcmeCEGxwLnBhcmtlcnVzZC5vcmeCFG1hY2FydGh1ci51c2QyMDcu
b3JnghttZXMuY2hlc3RlcmZpZWxkc2Nob29scy5vcmeCG21ocy5jaGVzdGVyZmll
bGRzY2hvb2xzLm9yZ4IRbXMuZWxraGFydGlzZC5vcmeCHG5obXMuY2hlc3RlcmZp
ZWxkc2Nob29scy5vcmeCEXBhdHRvbi51c2QyMDcub3JnghtwZXMuY2hlc3RlcmZp
ZWxkc2Nob29scy5vcmeCG3Bwcy5jaGVzdGVyZmllbGRzY2hvb2xzLm9yZ4IbcHZl
LmNoZXN0ZXJmaWVsZHNjaG9vbHMub3JnghtyZXMuY2hlc3RlcmZpZWxkc2Nob29s
cy5vcmeCEHNiZGlvY2VzZWNlZi5vcmeCDXNvdXRoLmZpc2QudXOCEnRyaXZpdW1j
aGFydGVyLm9yZ4IRdXBzaHVyc2Nob29scy5jb22CDnZjaXNlYWdsZXMub3JnghJ3
ZWJzdGVyLnVzZDQ2NS5jb22CF3d3dy5icmVudHdvb2QuazEyLm1vLnVzghp3d3cu
YnJlbnR3b29kbW9zY2hvb2xzLm9yZ4Ibd3d3LmNoZXN0ZXJmaWVsZHNjaG9vbHMu
b3JnghJ3d3cuY2xpZnRvbmlzZC5vcmeCEnd3dy5lbGtoYXJ0aXNkLm9yZ4IOd3d3
LmZzaGlzZC5uZXSCFXd3dy5mdWNoc21penJhY2hpLm9yZ4IRd3d3LmdvYmVhcnNn
by5uZXSCGHd3dy5ncmFuZHZpbGxlLmsxMi5taS51c4INd3d3Lmd0Y2hzLm9yZ4IO
d3d3LmhidWhzZC5lZHWCFnd3dy5oZW1ldHVzZC5rMTIuY2EudXOCEHd3dy5oZW1l
dHVzZC5vcmeCDHd3dy5qZWNjLm9yZ4ISd3d3LmthaHVrdWhpZ2gub3JnghN3d3cu
bWFnbm9saWFpc2Qub3JnghF3d3cucGFya2VydXNkLm9yZ4IWd3d3LnBoaWxsaXBz
LmsxMi53aS51c4IVd3d3LnJlYWdhbmFjYWRlbXkub3Jnghd3d3cucm9vc2V2ZWx0
LmsxMi50eC51c4IUd3d3LnNiZGlvY2VzZWNlZi5vcmeCEHd3dy5zbWNqdWhzZC5v
cmeCEnd3dy50YWhxdWl0emhzLm9yZ4IVd3d3LnVwc2h1cnNjaG9vbHMuY29tgg53
d3cudXNkMjA3Lm9yZ4ISd3d3LnZjaXNlYWdsZXMub3JnghF3d3cyLnNtY2p1aHNk
Lm9yZzCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEwgdYw
JgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggrBgEF
BQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVw
b24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0
aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2Vu
Y3J5cHQub3JnL3JlcG9zaXRvcnkvMA0GCSqGSIb3DQEBCwUAA4IBAQAS0B/zwBUW
Lw7S9wrU8qVwsmVHuKekEv4DTbWHW5BnaPJtkXl+XFPPPouWtJ4nw+UhYSwmZdKx
/3M3epljcfkEVp0LE38M/4O9cXI7FQsMBiHxhpehxmTKgF/dD9P5PjcNisw4wbo8
NJhekoxmCgf6GpphWUNHZ/HQutl2ZteFi7DImz7OOzJL4g1PxS28JIE10siiu9H0
180RvQwXa05ZNIZy8KDCmSRO5arC4Kt4Xc5Dr8LV7NHSyUM06lgZMDqnBqZgPhGT
FrCCTUXGazCa6Lbqv3pQ0tbqyxktIJVziKHJ7d1BFfzhkq+15Dg134v7kPezYDrJ
yxdhtET4Jv7O
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326738020513434733441131679217528424138713
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-21 01:20:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-19 01:20:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.grandville.k12.mi.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2266 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.es.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gtchs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.holyfamilyhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hs.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.is.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kahukuhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ms.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.orcaeagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.res.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sbdiocesecef.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sdhs.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sme.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sms.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sts.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sves.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tes.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tms.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.upshurschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.va.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.vciseagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bes.gobearsgo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhs.gobearsgo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bis.gobearsgo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bjh.gobearsgo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bl.parkerusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bradley.usd207.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ces.gobearsgo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ces35.cliftonisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfh.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chs.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chs.cliftonisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cis.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.cliftonisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnh.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colehs.fshisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colems.fshisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coop.fshisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cps.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crms.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cte.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dz.aceroschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ees.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eisenhower.usd207.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.roosevelt.k12.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fa.arrowacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fshelem.fshisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtchs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.roosevelt.k12.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jes.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jh.roosevelt.k12.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kahukuhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lms.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.parkerusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macarthur.usd207.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mes.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhs.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhms.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patton.usd207.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pes.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pps.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pve.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'res.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbdiocesecef.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'south.fisd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triviumcharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upshurschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vciseagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webster.usd465.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brentwood.k12.mo.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brentwoodmoschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cliftonisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fshisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fuchsmizrachi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gobearsgo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandville.k12.mi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gtchs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbuhsd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hemetusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hemetusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jecc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kahukuhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magnoliaisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkerusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phillips.k12.wi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reaganacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roosevelt.k12.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sbdiocesecef.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smcjuhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tahquitzhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upshurschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usd207.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vciseagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.smcjuhsd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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