www.movalleyelementary.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bd:f0:1e:89:4b:9b:de:12:44:47:33:70:1b:03:e1:8d:b8 was issued on by Let's Encrypt.

With 77 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.movalleyelementary.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bd:f0:1e:89:4b:9b:de:12:44:47:33:70:1b:03:e1:8d:b8
Serial Number (int): 325969398415912711921940311111505385983416
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ea:61:99:9a:bc:0e:bc:2d:be:b6:f6:46:f4:6f:1c:01:4f:44:31:29
Fingerprint (sha256): 3a:09:d9:dd:ee:9d:ef:72:77:61:60:89:a9:31:fb:a1:d6:c9:f1:7b:e5:64:6a:13:95:48:34:7d:c5:50:6b:7d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.movalleyelementary.org

77

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.movalleyelementary.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acldtillotsonschool.org
admin.acldtillotsonschool.org
admin.automotivehs.com
admin.chapmanelementary.org
admin.colegiojunipero.com.mx
admin.colegioverdi.edu.mx
admin.corpuschristi-school.com
admin.eastprimary.kiskiarea.com
admin.foxboroughrcs.org
admin.gotecs.org
admin.highschool.kiskiarea.com
admin.intermediate.kiskiarea.com
admin.ipedregal.edu.mx
admin.isokvirtual.net
admin.kiskiarea.com
admin.madisonmonterrey.edu.mx
admin.masonisd.net
admin.mmatrailblazers.com
admin.movalleyelementary.org
admin.northprimary.kiskiarea.com
admin.preescolar.semperaltius.edu.mx
admin.saintjames.school
admin.semperaltius.edu.mx
admin.southprimary.kiskiarea.com
admin.stpaulschoolannarbor.org
admin.team-charter.org
admin.upperelementary.kiskiarea.com
admin.westmonona.org
automotivehs.com
chapmanelementary.org
colegioalgari.edu.mx
colegiojunipero.com.mx
colegioverdi.edu.mx
corpuschristi-school.com
eastprimary.kiskiarea.com
foxboroughrcs.org
gotecs.org
highschool.kiskiarea.com
intermediate.kiskiarea.com
ipedregal.edu.mx
isokvirtual.net
kernhighnetwork.net
kiskiarea.com
madisonmonterrey.edu.mx
mmatrailblazers.com
movalleyelementary.org
northprimary.kiskiarea.com
preescolar.semperaltius.edu.mx
saintjames.school
semperaltius.edu.mx
southprimary.kiskiarea.com
stpaulschoolannarbor.org
team-charter.org
upperelementary.kiskiarea.com
wirtz.pusdschools.net
www.acldtillotsonschool.org
www.automotivehs.com
www.chapmanelementary.org
www.colegioalgari.edu.mx
www.colegiojunipero.com.mx
www.colegioverdi.edu.mx
www.corpuschristi-school.com
www.davidson.k12.nc.us
www.foxboroughrcs.org
www.gotecs.org
www.ipedregal.edu.mx
www.isokvirtual.net
www.kernhighnetwork.net
www.kiskiarea.com
www.madisonmonterrey.edu.mx
www.masonisd.net
www.mmatrailblazers.com
www.movalleyelementary.org
www.saintjames.school
www.semperaltius.edu.mx
www.stpaulschoolannarbor.org
www.team-charter.org

Other certificates including the domain name movalleyelementary.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.movalleyelementary.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQbTHb+2z7
rfYVCl+ph5m8FJJOEgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5pV3R4RBg
n18RTHnTD9fS27JxyeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGrmQF3Z/h2
e6StagubO+pVwFzG8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK7wAhJO8e
l2z375LDd2VIwrdWQP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlWZ1AdjOKf
RiY0ckFuu/DYkuvkNKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5Tu7zbek/
MR/JMR9nceWyZ2Mund+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzwWzBvTD8F
7q6ckUbIgpeo7stn7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuaivjW/P+Tm
64XjXNjP9F1W8+5tlcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ4Iudx/o3
Q4E2w6Aud9PYyV05pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/h0omUmCI
DiQVG30eHhb3OIP3bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUnohkUi6ik
D4me6o58sq/IQVmyem1M/E0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325969398415912711921940311111505385983416
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-27 01:05:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-25 01:05:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.movalleyelementary.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1943 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acldtillotsonschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.acldtillotsonschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.automotivehs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.chapmanelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.colegiojunipero.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.colegioverdi.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.corpuschristi-school.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eastprimary.kiskiarea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.foxboroughrcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gotecs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.highschool.kiskiarea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.intermediate.kiskiarea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ipedregal.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.isokvirtual.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kiskiarea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.madisonmonterrey.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.masonisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mmatrailblazers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.movalleyelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.northprimary.kiskiarea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.preescolar.semperaltius.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.saintjames.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.semperaltius.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.southprimary.kiskiarea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stpaulschoolannarbor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.team-charter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.upperelementary.kiskiarea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.westmonona.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'automotivehs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chapmanelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colegioalgari.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colegiojunipero.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colegioverdi.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corpuschristi-school.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastprimary.kiskiarea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foxboroughrcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotecs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highschool.kiskiarea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intermediate.kiskiarea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipedregal.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isokvirtual.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kernhighnetwork.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiskiarea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madisonmonterrey.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmatrailblazers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movalleyelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northprimary.kiskiarea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preescolar.semperaltius.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintjames.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'semperaltius.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southprimary.kiskiarea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpaulschoolannarbor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team-charter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upperelementary.kiskiarea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wirtz.pusdschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acldtillotsonschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.automotivehs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chapmanelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegioalgari.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegiojunipero.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegioverdi.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corpuschristi-school.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foxboroughrcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gotecs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipedregal.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isokvirtual.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kernhighnetwork.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiskiarea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madisonmonterrey.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masonisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmatrailblazers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.movalleyelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintjames.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.semperaltius.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpaulschoolannarbor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.team-charter.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c312cf3000000040300473045022100b4645c72cc89d9bb9ef370b78ec02146ba11ffb7b3b57e95a44f6e81e738abe6022010bb2721303099145a287acf88e30829d4a8cd7d369af7dcf872ee228dd69993007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c312cf507000004030046304402205c3e64430cd6ffa880f8f2eccfe6729448b2b72804233aef2354f3719e65d46a02202ea0d0f3de80208ebc7a1961cc4890c4e8605c275d78b6543484e23e91b2dce4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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