admin.stggcs.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:dc:16:3c:3c:b6:e3:02:aa:ea:4a:a8:7f:7a:78:61:2c:21 was issued on by Let's Encrypt.

With 83 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.stggcs.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:dc:16:3c:3c:b6:e3:02:aa:ea:4a:a8:7f:7a:78:61:2c:21
Serial Number (int): 336228534303040340259577347057418462374945
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 34:d2:8c:ce:c9:74:88:88:ab:ac:75:2f:1d:bc:95:f8:2e:33:e4:22
Fingerprint (sha256): 39:4b:5c:c6:f6:52:d8:b6:11:d0:d6:9b:bc:2f:81:35:7e:81:37:73:eb:d0:66:50:81:f9:f6:d6:eb:fc:6d:86

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate admin.stggcs.org

83

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.stggcs.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acsaregionxv.org
admin.acsaregionxv.org
admin.aquinashs.net
admin.athletics.aquinashs.net
admin.binghamminers.org
admin.en-merida.mis.edu.mx
admin.gmstigers.com
admin.goldenvalleyhs.org
admin.merida.mis.edu.mx
admin.metro-arts.org
admin.millikanmiddleschool.org
admin.mis.edu.mx
admin.novaacademy.org
admin.oakridgereformed.org
admin.smidttech.org
admin.stcroixcatholic.org
admin.stgeorgeontario.com
admin.stggcs.org
admin.sunnysandses.com
admin.thefranklinranch.com
admin.waimeaelementary.org
admin.washburnschoolpr.com
alt.fisd.us
athletics.aquinashs.net
binghamminers.org
claytonvalley.org
en-merida.mis.edu.mx
gmstigers.com
goldenvalleyhighschool.net
goldenvalleyhighschool.org
goldenvalleyhs.org
gt.rs-wolves.com
hs.fisd.us
merida.mis.edu.mx
metro-arts.com
metro-arts.org
millikanmiddleschool.org
ms.fisd.us
north.fisd.us
oakridgereformed.org
rt.aceroschools.org
smidttech.org
stcroixcatholic.org
stggcs.org
sunnysandses.com
thefranklinranch.com
vs.aceroschools.org
waimeaelementary.org
washburnschoolpr.com
www.acsaregionxv.org
www.americanmartyrsschool.org
www.aquinashs.net
www.binghamminers.org
www.bishopamat.org
www.cfn.edu.mx
www.claytonvalley.org
www.fisd.us
www.gmstigers.com
www.gmstigers.org
www.goldenvalleyhighschool.net
www.goldenvalleyhighschool.org
www.goldenvalleyhs.org
www.highlandhall.org
www.metro-arts.com
www.metro-arts.org
www.millikanmiddleschool.org
www.mis.edu.mx
www.novaacademy.org
www.nweccharter.com
www.nweccharter.org
www.oakridgechristian.org
www.oakridgereformed.org
www.peabodycharter.org
www.sfayl.org
www.smidttech.org
www.sojournacademy.org
www.stcroixcatholic.org
www.stgeorgeontario.com
www.stggcs.org
www.sunnysandses.com
www.thefranklinranch.com
www.waimeaelementary.org
www.washburnschoolpr.com

Other certificates including the domain name stggcs.org

(limited to 100 certificates)
admin.dm.aceroschools.org
www.cfn.edu.mx
admin.allenparkschools.com
admin.calmecaacademy.com
admin.missionprep.org
www.stggcs.org
www.calmecaacademy.com
aceroschools.org
www.collegeachievegreaterasburyparkcharterschool.org
www.kaumanaelementary.org
acsaregionxv.org
dimensions.org
acsaregionxv.org
mis.edu.mx
admin.stggcs.org
admin.res.rsu14.org
fernhill.fgsdk12.org
acsaregionxv.org
admin.hg.aceroschools.org
athletics.aquinashs.net
www.missionprep.org
admin.omardblaircharterschool.com
acsaregionxv.org
aceroschools.org
www.hilohs.k12.hi.us
acsaregionxv.org
mail.stggcs.org
shs.smithvilleisd.org
admin.kauffmanschool.org
www.garvanzaelementary.org
admin.dz.aceroschools.org
vs.aceroschools.org
acsaregionxv.org
aceroschools.org
hanak12school.org
aceroschools.org
www.dcsocal.org
admin.allenparkschools.com
shs.mpusd.net
admin.allenparkschools.com
acsaregionxv.org
admin.calmecaacademy.com
admin.cms.davidson.k12.nc.us
acsaregionxv.org
en-merida.mis.edu.mx
admin.dimensions.org
acsaregionxv.org
admin.cfn.edu.mx
www.ryderschool.org
hamlincharter.org
acsaregionxv.org
www.leusd.k12.ca.us
acsaregionxv.org
claytonvalley.org
merida.mis.edu.mx
edtechteam.mx
admin.allenparkschools.com
admin.sfva.org
admin.apcs.allenparkschools.com
acsaregionxv.org
www.ccoe.k12.ca.us
mai.mcdowell.k12.nc.us
admin.allenparkschools.com
admin.aquinashs.net

Certificate

The complete raw certificate details for admin.stggcs.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINbzCCDFegAwIBAgISA9wWPDy24wKq6kqof3p4YSwhMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MTkwOTQyMDZaFw0x
OTA4MTcwOTQyMDZaMBsxGTAXBgNVBAMTEGFkbWluLnN0Z2djcy5vcmcwggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCtrIXp7mbejFBtMdv7bPut9hUKX6mH
mbwUkk4SAS2wWeHzgwVeEiXu4Q62pKUwqxHbZ3Nw0C0rUbmlXdHhEGCfXxFMedMP
19LbsnHJ7J+Vd91RftXDhoavIx/wwT5kaGhpA/RdgHdcMauZAXdn+HZ7pK1qC5s7
6lXAXMbxUMB2dqGxStseulJ5+JrOLKGF4+QvfNCD86ZpCQrvACEk7x6XbPfvksN3
ZUjCt1ZA/YmNXz3Zh360hk6cCTaPIOW/cxhcpcaKUHKtCVZnUB2M4p9GJjRyQW67
8NiS6+Q0qbZ/fNRq/DeyUK6NlYeQgdk2lo23F+yuki1QirlO7vNt6T8xH8kxH2dx
5bJnYy6d35JuB8t/3rA+FUFquuynUc1H4iSjK2vk8w1EHPBbMG9MPwXurpyRRsiC
l6juy2ftvQg1c9iA1PvMVf9Q0JxaP5pon4q7wwpXgQQS5qK+Nb8/5ObrheNc2M/0
XVbz7m2VwmAmEZTITKUJS0BGqE+iNTNCeuHWJRIxE0jaWIngi53H+jdDgTbDoC53
09jJXTmkWAx1Itg1EZBPJBFJpJtDceZ9mL+lCMXJSiGIDv+HSiZSYIgOJBUbfR4e
Fvc4g/dsmKxdkrioSuflkOYp1SA0LcZL7LCtMAFiPQ34RSeiGRSLqKQPiZ7qjnyy
r8hBWbJ6bUz8TQIDAQABo4IJfDCCCXgwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQv
a8hNbCwuMvIAIP8tTWxa/G66uzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv
86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu
dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu
dC14My5sZXRzZW5jcnlwdC5vcmcvMIIHMAYDVR0RBIIHJzCCByOCEGFjc2FyZWdp
b254di5vcmeCFmFkbWluLmFjc2FyZWdpb254di5vcmeCE2FkbWluLmFxdWluYXNo
cy5uZXSCHWFkbWluLmF0aGxldGljcy5hcXVpbmFzaHMubmV0ghdhZG1pbi5iaW5n
aGFtbWluZXJzLm9yZ4IaYWRtaW4uZW4tbWVyaWRhLm1pcy5lZHUubXiCE2FkbWlu
Lmdtc3RpZ2Vycy5jb22CGGFkbWluLmdvbGRlbnZhbGxleWhzLm9yZ4IXYWRtaW4u
bWVyaWRhLm1pcy5lZHUubXiCFGFkbWluLm1ldHJvLWFydHMub3Jngh5hZG1pbi5t
aWxsaWthbm1pZGRsZXNjaG9vbC5vcmeCEGFkbWluLm1pcy5lZHUubXiCFWFkbWlu
Lm5vdmFhY2FkZW15Lm9yZ4IaYWRtaW4ub2FrcmlkZ2VyZWZvcm1lZC5vcmeCE2Fk
bWluLnNtaWR0dGVjaC5vcmeCGWFkbWluLnN0Y3JvaXhjYXRob2xpYy5vcmeCGWFk
bWluLnN0Z2Vvcmdlb250YXJpby5jb22CEGFkbWluLnN0Z2djcy5vcmeCFmFkbWlu
LnN1bm55c2FuZHNlcy5jb22CGmFkbWluLnRoZWZyYW5rbGlucmFuY2guY29tghph
ZG1pbi53YWltZWFlbGVtZW50YXJ5Lm9yZ4IaYWRtaW4ud2FzaGJ1cm5zY2hvb2xw
ci5jb22CC2FsdC5maXNkLnVzghdhdGhsZXRpY3MuYXF1aW5hc2hzLm5ldIIRYmlu
Z2hhbW1pbmVycy5vcmeCEWNsYXl0b252YWxsZXkub3JnghRlbi1tZXJpZGEubWlz
LmVkdS5teIINZ21zdGlnZXJzLmNvbYIaZ29sZGVudmFsbGV5aGlnaHNjaG9vbC5u
ZXSCGmdvbGRlbnZhbGxleWhpZ2hzY2hvb2wub3JnghJnb2xkZW52YWxsZXlocy5v
cmeCEGd0LnJzLXdvbHZlcy5jb22CCmhzLmZpc2QudXOCEW1lcmlkYS5taXMuZWR1
Lm14gg5tZXRyby1hcnRzLmNvbYIObWV0cm8tYXJ0cy5vcmeCGG1pbGxpa2FubWlk
ZGxlc2Nob29sLm9yZ4IKbXMuZmlzZC51c4INbm9ydGguZmlzZC51c4IUb2Frcmlk
Z2VyZWZvcm1lZC5vcmeCE3J0LmFjZXJvc2Nob29scy5vcmeCDXNtaWR0dGVjaC5v
cmeCE3N0Y3JvaXhjYXRob2xpYy5vcmeCCnN0Z2djcy5vcmeCEHN1bm55c2FuZHNl
cy5jb22CFHRoZWZyYW5rbGlucmFuY2guY29tghN2cy5hY2Vyb3NjaG9vbHMub3Jn
ghR3YWltZWFlbGVtZW50YXJ5Lm9yZ4IUd2FzaGJ1cm5zY2hvb2xwci5jb22CFHd3
dy5hY3NhcmVnaW9ueHYub3Jngh13d3cuYW1lcmljYW5tYXJ0eXJzc2Nob29sLm9y
Z4IRd3d3LmFxdWluYXNocy5uZXSCFXd3dy5iaW5naGFtbWluZXJzLm9yZ4ISd3d3
LmJpc2hvcGFtYXQub3Jngg53d3cuY2ZuLmVkdS5teIIVd3d3LmNsYXl0b252YWxs
ZXkub3Jnggt3d3cuZmlzZC51c4IRd3d3Lmdtc3RpZ2Vycy5jb22CEXd3dy5nbXN0
aWdlcnMub3Jngh53d3cuZ29sZGVudmFsbGV5aGlnaHNjaG9vbC5uZXSCHnd3dy5n
b2xkZW52YWxsZXloaWdoc2Nob29sLm9yZ4IWd3d3LmdvbGRlbnZhbGxleWhzLm9y
Z4IUd3d3LmhpZ2hsYW5kaGFsbC5vcmeCEnd3dy5tZXRyby1hcnRzLmNvbYISd3d3
Lm1ldHJvLWFydHMub3Jnghx3d3cubWlsbGlrYW5taWRkbGVzY2hvb2wub3Jngg53
d3cubWlzLmVkdS5teIITd3d3Lm5vdmFhY2FkZW15Lm9yZ4ITd3d3Lm53ZWNjaGFy
dGVyLmNvbYITd3d3Lm53ZWNjaGFydGVyLm9yZ4IZd3d3Lm9ha3JpZGdlY2hyaXN0
aWFuLm9yZ4IYd3d3Lm9ha3JpZGdlcmVmb3JtZWQub3JnghZ3d3cucGVhYm9keWNo
YXJ0ZXIub3Jngg13d3cuc2ZheWwub3JnghF3d3cuc21pZHR0ZWNoLm9yZ4IWd3d3
LnNvam91cm5hY2FkZW15Lm9yZ4IXd3d3LnN0Y3JvaXhjYXRob2xpYy5vcmeCF3d3
dy5zdGdlb3JnZW9udGFyaW8uY29tgg53d3cuc3RnZ2NzLm9yZ4IUd3d3LnN1bm55
c2FuZHNlcy5jb22CGHd3dy50aGVmcmFua2xpbnJhbmNoLmNvbYIYd3d3LndhaW1l
YWVsZW1lbnRhcnkub3Jnghh3d3cud2FzaGJ1cm5zY2hvb2xwci5jb20wTAYDVR0g
BEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0
cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAA
dwB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWrPrzPWAAAEAwBI
MEYCIQDdpS3Cg5h6JCFEeXnAs8QZgvaF1k55/YDQXWmQUhPi1wIhAPhaMc3nxN8D
v9AKmSyAFDHBjQhuk11e8V6c12sIM//vAHUAKTxRllTIOWW6qlD8WAfUt2+/WHop
ctykwwz05UVH9HgAAAFqz6817QAABAMARjBEAiBdqXQAaLumRJ07X+lagnQ31Sq2
UVNDhNLATQeTn44MUQIgb2kcjc5eU5W6nRyl6Da8DiSpE7e5ayxMgPyE8fRhWXUw
DQYJKoZIhvcNAQELBQADggEBAJJhVryeJmt4Ujah2OBsLzUB1eNKZ3V457Ali+UO
V4J1Tm+NyWz93fkoogjQBgp/T2esWnM90m1BF0xSSwubu5YDCouHIKTfvfWxbPxh
GHB6JBoizUoUrgdyJtjasclvH51TkUPGUPS/rNNBAEVO+PFhIgDgnA7HdszsFLdM
LeVyRkHXJwYTQRGitu7LZIJuuFGsNwfkevkK33DkaG0/FyrCJrE7Xj1ikFd5DvG+
sYCWQlug1zw8lWTCTfBfLv5CWPAWDsFmNpJy71/wgZXrui5V5e6i1cpoIBMJQwAH
LwlOe+8KuZrkV/VoNnuMUy46Bq1hxoku4f9dFy/mf2aB+KU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQbTHb+2z7
rfYVCl+ph5m8FJJOEgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5pV3R4RBg
n18RTHnTD9fS27JxyeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGrmQF3Z/h2
e6StagubO+pVwFzG8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK7wAhJO8e
l2z375LDd2VIwrdWQP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlWZ1AdjOKf
RiY0ckFuu/DYkuvkNKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5Tu7zbek/
MR/JMR9nceWyZ2Mund+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzwWzBvTD8F
7q6ckUbIgpeo7stn7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuaivjW/P+Tm
64XjXNjP9F1W8+5tlcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ4Iudx/o3
Q4E2w6Aud9PYyV05pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/h0omUmCI
DiQVG30eHhb3OIP3bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUnohkUi6ik
D4me6o58sq/IQVmyem1M/E0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336228534303040340259577347057418462374945
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-19 09:42:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-17 09:42:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.stggcs.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1831 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acsaregionxv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.acsaregionxv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.aquinashs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.athletics.aquinashs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.binghamminers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.en-merida.mis.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gmstigers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.goldenvalleyhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.merida.mis.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.metro-arts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.millikanmiddleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mis.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.novaacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.oakridgereformed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.smidttech.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stcroixcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stgeorgeontario.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stggcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sunnysandses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.thefranklinranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.waimeaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.washburnschoolpr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alt.fisd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athletics.aquinashs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'binghamminers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claytonvalley.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'en-merida.mis.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmstigers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldenvalleyhighschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldenvalleyhighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldenvalleyhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gt.rs-wolves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.fisd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merida.mis.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metro-arts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metro-arts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'millikanmiddleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.fisd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'north.fisd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oakridgereformed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rt.aceroschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smidttech.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcroixcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stggcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunnysandses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefranklinranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vs.aceroschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waimeaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washburnschoolpr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acsaregionxv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.americanmartyrsschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aquinashs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.binghamminers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bishopamat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cfn.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.claytonvalley.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fisd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmstigers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmstigers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldenvalleyhighschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldenvalleyhighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldenvalleyhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highlandhall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metro-arts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metro-arts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.millikanmiddleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mis.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novaacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nweccharter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nweccharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oakridgechristian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oakridgereformed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peabodycharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfayl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smidttech.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sojournacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcroixcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stgeorgeontario.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stggcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunnysandses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thefranklinranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waimeaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.washburnschoolpr.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016acfaf33d60000040300483046022100dda52dc283987a2421447979c0b3c41982f685d64e79fd80d05d69905213e2d7022100f85a31cde7c4df03bfd00a992c801431c18d086e935d5ef15e9cd76b0833ffef007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016acfaf35ed000004030046304402205da9740068bba6449d3b5fe95a827437d52ab651534384d2c04d07939f8e0c5102206f691c8dce5e5395ba9d1ca5e836bc0e24a913b7b96b2c4c80fc84f1f4615975
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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