admin.sandiaprep.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fb:76:9a:3d:22:dd:10:7d:a5:8b:36:5d:14:15:65:41:8b was issued on by Let's Encrypt.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.sandiaprep.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fb:76:9a:3d:22:dd:10:7d:a5:8b:36:5d:14:15:65:41:8b
Serial Number (int): 346905381649644288177206236774165964472715
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fc:b9:d8:10:bc:43:0b:f5:41:af:01:63:d5:c7:5a:56:dd:9d:f7:0c
Fingerprint (sha256): 39:f0:d7:21:cf:ea:8a:b2:86:4f:40:dc:d9:c1:3f:70:35:2a:63:f9:79:6d:4f:cd:f8:84:2f:ec:8c:57:86:64

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate admin.sandiaprep.org

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.sandiaprep.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adams.scrsd.org
admin.cusd1.com
admin.cvalternatives.org
admin.dalhartisd.org
admin.ecesd.org
admin.guadalupecenter.org
admin.hidoecentral.org
admin.high.cusd1.com
admin.institutochicago.org
admin.lifelinecharterschool.com
admin.newmiddleton.smithcoedu.com
admin.nshahs.org
admin.sandiaprep.org
admin.stbernardchurchpgh.org
admin.swartzcreek.org
amerman.northvilleschools.org
armstrong.scrsd.org
bancroft.scrsd.org
con.newton-conover.org
cooke.northvilleschools.org
cpa.confluenceacademy.org
cvalternatives.org
dalhartisd.org
dhs.dalhartisd.org
djhs.dalhartisd.org
dsdk12.net
ea.confluenceacademy.org
hidoecentral.org
high.cusd1.com
hillside.northvilleschools.org
kennedy.scrsd.org
les.lexingtonisd.net
lifelinecharterschool.com
mcnichols.scrsd.org
meadsmill.northvilleschools.org
moraine.northvilleschools.org
morris.scrsd.org
newton-conover.org
nhs.northvilleschools.org
nhuman.mx
northeastis.scrsd.org
nuviewusd.org
on.confluenceacademy.org
prescott.scrsd.org
ridgewood.northvilleschools.org
sandiaprep.org
sc.confluenceacademy.org
school.lexnyc.org
scrantonhs.scrsd.org
silversprings.northvilleschools.org
southis.scrsd.org
stbernardchurchpgh.org
sumner.scrsd.org
tec.newton-conover.org
thorntoncreek.northvilleschools.org
tripp.scrsd.org
wesths.scrsd.org
whittier.scrsd.org
willard.scrsd.org
winchester.northvilleschools.org
www.admin.colegiobvg.edu.mx
www.aspireacademystl.org
www.boyslatin.org
www.clioschools.org
www.colegiobvg.edu.mx
www.cusd1.com
www.cvalternatives.org
www.dalhartisd.org
www.dsdk12.net
www.ecesd.com
www.fillmore.k12.ca.us
www.fillmoreusd.org
www.guadalupecenter.org
www.hidoecentral.org
www.hokulani-elementary.com
www.institutochicago.org
www.lchs78.net
www.lexingtonisd.net
www.lifelinecharterschool.com
www.mccomb.k12.ms.us
www.missionbasilicaschool.org
www.montrosechristian.org
www.ndcrhs.org
www.pcycougars.net
www.phacs.org
www.prospecthillacademy.org
www.ps086.com
www.sandiaprep.org
www.stbernardchurchpgh.org
www.stbschool.com
www.stbschool.net
www.swartzcreek.org
www.synergycharteracademy.org
www.synergykineticacademy.org
www.synergyquantumacademy.org
www.theburlingtonschool.org
www.zcisd.org

Other certificates including the domain name sandiaprep.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for admin.sandiaprep.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346905381649644288177206236774165964472715
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-06 20:54:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-06 20:54:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.sandiaprep.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2237 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adams.scrsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cusd1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cvalternatives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dalhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ecesd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.guadalupecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hidoecentral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.high.cusd1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.institutochicago.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lifelinecharterschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.newmiddleton.smithcoedu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nshahs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sandiaprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stbernardchurchpgh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.swartzcreek.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amerman.northvilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armstrong.scrsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bancroft.scrsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.newton-conover.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cooke.northvilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpa.confluenceacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvalternatives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dalhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhs.dalhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'djhs.dalhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsdk12.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ea.confluenceacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hidoecentral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'high.cusd1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillside.northvilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kennedy.scrsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'les.lexingtonisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifelinecharterschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcnichols.scrsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meadsmill.northvilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moraine.northvilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morris.scrsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newton-conover.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhs.northvilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhuman.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northeastis.scrsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuviewusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'on.confluenceacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prescott.scrsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ridgewood.northvilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandiaprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sc.confluenceacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.lexnyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrantonhs.scrsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silversprings.northvilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southis.scrsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbernardchurchpgh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumner.scrsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tec.newton-conover.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thorntoncreek.northvilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tripp.scrsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wesths.scrsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whittier.scrsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willard.scrsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winchester.northvilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.admin.colegiobvg.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aspireacademystl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boyslatin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clioschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegiobvg.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cusd1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cvalternatives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dalhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsdk12.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecesd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fillmore.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fillmoreusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guadalupecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hidoecentral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hokulani-elementary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.institutochicago.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lchs78.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lexingtonisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifelinecharterschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mccomb.k12.ms.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missionbasilicaschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.montrosechristian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ndcrhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcycougars.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phacs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prospecthillacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps086.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandiaprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbernardchurchpgh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swartzcreek.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.synergycharteracademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.synergykineticacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.synergyquantumacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theburlingtonschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zcisd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000167858378bb00000403004730450220272bfe9bd46d0c3445f5c041dec6d99d26650e50db1bde8bc288d017d331afbc022100952b7468718fbdd7ee3a126510d100bc81ebb2e5fd30a0401db96bbfaa8f769100760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000167858376c70000040300473045022100d50848fd90cbf0b64096c87883c1a6a5bdd275edbec7bd912d62c80b19de23d8022031e25399a38fe863a8ef5224914eb079595783b1a783ab158dc81b41fb8c2175
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0069e442fb35ce92ba6b45df9589deec51e53e8ed13b54844a2d369631bc8d675d3894d328d02f811c296dc52b7775c7639f1624bc3df80c485303ce0587736ca6998f460453e4004e4e21cc42221e3088066f06fb8e876ca049e58411261abbc85045933bea7830eae1ed4b45dcb9bc26db77c46fe7aaadea1f7062921cf2615956fbcd1d0925a17bbbded0b1411692b87329b5605cbda8ac5b1c621dfb5a33270e755d33663420195fc5b68665bad5802b6ce3d95ea45a105a0ac16a0df92d1e5e8378c76f42c7018dc77b0b71f8aef56f3988c5a35062540f8fb16717f40d7a5f55a20e75c94bce961fe351701ffa8da6817d72a5d9703dea1865379872d1b2