admin.alvahscott.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:56:32:0b:bd:6e:73:b4:80:34:6f:59:a0:c6:6c:27:87:77 was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.alvahscott.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:56:32:0b:bd:6e:73:b4:80:34:6f:59:a0:c6:6c:27:87:77
Serial Number (int): 290667663707662459429412955632811515545463
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f1:bb:4a:e5:b4:cd:27:f5:2d:c7:e4:60:2b:ee:69:ba:b4:f8:da:9d
Fingerprint (sha256): 33:75:3c:93:64:b7:2f:d4:4f:36:bd:41:5a:9c:26:ef:8d:ec:f9:e9:e2:76:17:f0:d0:a7:51:bb:78:9b:e4:c1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate admin.alvahscott.org

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.alvahscott.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.alvahscott.org
admin.flcobras.net
admin.hollingworthschool.com
admin.hs.unitedsd.net
admin.kalihielementary.org
admin.kinsellamagnet.org
admin.leckielionsdc.org
admin.legacyhigh.net
admin.needlesusd.org
admin.northeast.owassops.org
admin.nwcomplex.org
admin.richmondstreet.org
admin.rosewoodelementary.org
admin.royalschoolk5.org
admin.smith.owassops.org
admin.stjosephccschool.net
admin.stonecanyon.owassops.org
admin.waiauelementary.org
alvahscott.org
ar.fuhsdistrict.org
austin-es.weatherfordisd.com
garfieldelementary.org
hollingworthacademy.com
hollingworthschool.com
hs.unitedsd.net
kalihi.k12.hi.us
kalihielementary.org
kinsellamagnet.org
leckielionsdc.org
legacyhigh.net
les.nwcomplex.org
lhstg.com
maili.nwcomplex.org
makaha.nwcomplex.org
mills.owassops.org
nes.nwcomplex.org
nhis.nwcomplex.org
nhs.needlesusd.org
nms.needlesusd.org
northeast.owassops.org
northprimary.kiskiarea.org
npono.nwcomplex.org
nwcomplex.org
richmondstreet.org
richmondstreetschool.org
rosewoodelementary.org
royalschoolk5.org
smith.owassops.org
southprimary.kiskiarea.org
stjosephccschool.com
stjosephccschool.net
vces.needlesusd.org
waiauelementary.org
wbba.navasotaisd.org
wes.nwcomplex.org
whs.nwcomplex.org
wis.nwcomplex.org
www.alvahscott.org
www.ascisd.net
www.dewisd.net
www.eagleacademypcs.com
www.eagleacademypcs.net
www.eagleacademypcs.org
www.easthighfortuna.org
www.fortunahigh.org
www.fuhsdistrict.org
www.hollingworthacademy.com
www.hollingworthschool.com
www.kalihielementary.org
www.kinsellamagnet.org
www.leckielionsdc.org
www.legacyhigh.net
www.lhstg.com
www.needles.k12.ca.us
www.needlesusd.org
www.nwcomplex.org
www.richmondstreet.org
www.richmondstreetschool.org
www.rosewoodelementary.org
www.royalschoolk5.org
www.saintjudeschool.org
www.schoolofourlady.org
www.stcathchurch.org
www.stjosephccschool.com
www.stjosephccschool.net
www.stlouiseschool.org
www.waiauelementary.org

Other certificates including the domain name alvahscott.org

(limited to 100 certificates)
hs.unitedsd.net
6gc.owassops.org
admin.alvahscott.org
admin.stonecanyon.owassops.org
admin.alvahscott.org
admin.alvahscott.org
admin.alvahscott.org
7gc.owassops.org
admin.alvahscott.org
morrow.owassops.org
admin.alvahscott.org
admin.alvahscott.org
admin.alvahscott.org
www.ascisd.net
admin.7gc.owassops.org
admin.alvahscott.org
6gc.owassops.org
6gc.owassops.org
alvahscott.org
etc.needlesusd.org
alvahscott.org
6gc.owassops.org
garfieldelementary.org
6gc.owassops.org
stonecanyon.owassops.org
alvahscott.org
admin.alvahscott.org
admin.alvahscott.org
6gc.owassops.org
admin.barnes.owassops.org
admin.alvahscott.org
admin.alvahscott.org
admin.barnes.owassops.org
es.ascisd.net
southprimary.kiskiarea.org
www.owassops.org

Certificate

The complete raw certificate details for admin.alvahscott.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290667663707662459429412955632811515545463
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-17 11:07:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-15 11:07:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.alvahscott.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1981 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.alvahscott.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.flcobras.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hollingworthschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hs.unitedsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kalihielementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kinsellamagnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.leckielionsdc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.legacyhigh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.needlesusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.northeast.owassops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nwcomplex.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.richmondstreet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rosewoodelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.royalschoolk5.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.smith.owassops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stjosephccschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stonecanyon.owassops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.waiauelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alvahscott.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.fuhsdistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austin-es.weatherfordisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garfieldelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hollingworthacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hollingworthschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.unitedsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalihi.k12.hi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalihielementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinsellamagnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leckielionsdc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyhigh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'les.nwcomplex.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lhstg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maili.nwcomplex.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makaha.nwcomplex.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mills.owassops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nes.nwcomplex.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhis.nwcomplex.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhs.needlesusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nms.needlesusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northeast.owassops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northprimary.kiskiarea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'npono.nwcomplex.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwcomplex.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richmondstreet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richmondstreetschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosewoodelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalschoolk5.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smith.owassops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southprimary.kiskiarea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephccschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephccschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vces.needlesusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waiauelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wbba.navasotaisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wes.nwcomplex.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whs.nwcomplex.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wis.nwcomplex.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alvahscott.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ascisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dewisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eagleacademypcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eagleacademypcs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eagleacademypcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easthighfortuna.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fortunahigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fuhsdistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hollingworthacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hollingworthschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kalihielementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kinsellamagnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leckielionsdc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legacyhigh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lhstg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.needles.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.needlesusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nwcomplex.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richmondstreet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richmondstreetschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosewoodelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalschoolk5.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintjudeschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolofourlady.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcathchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephccschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephccschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stlouiseschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waiauelementary.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001672191cbae0000040300483046022100e5bd4544c45669d44b63c4c5a5459667bf04fd58bf03706b19d1114bfff7d536022100d80baf26168b9a1393667d59af848c598e7fc32b71477ac99605d7f6c744cf72007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001672191cda4000004030047304502203a1c3a91d3e289bd9a0cc4c940cf49ebbb80c47d7340f711ae344fba1d139e04022100e484a8000a15ffe9a3e642d1a6382dacfdcbed7f996821ba10b2e6a86ee8c5ad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004dcf0967ebf6df52df9f9f0a9d2ca9395a3dd73ec29fc0376a20a2aaae88950d99813969b09bdf8465eb18196e83e3e2ee0c1cdffe717878bb32ee5fa84ce9293093fa3aa41b35fcd0bf276c9984b7cc843973984a8d463da407608fa2f13369bc24891b5dc31029d1711a989e1c9e1f5086e5b57403fd7a381e104b58ab3bf2a6ead796097828b9ada7163e21bd9b56eea070340dd200cfe5ba72d95aaa450b25e3b1316cbddf70da47d1382a206eb3b51a444852c045eff0cda1e8e1aed7bccc9526d182df4a9177056677e6fd2addb2b8de65d4a9d4600d45375658d75d4aa0e4c3206f58ea448cd40dd320e4440366ad28c6630d754e780e10b0d5dd1215