sequoia.bcsd.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ee:ef:1c:91:9d:6e:9d:9c:d5:84:7e:0e:3f:0f:8b:f0:7c was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sequoia.bcsd.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ee:ef:1c:91:9d:6e:9d:9c:d5:84:7e:0e:3f:0f:8b:f0:7c
Serial Number (int): 342641894951191176050246078645829899120764
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b9:92:f1:69:12:f1:03:7d:94:ca:41:c1:6f:68:d6:05:24:bf:b2:a6
Fingerprint (sha256): 3a:44:f2:89:f4:eb:f3:a3:50:46:43:b4:1a:c1:34:6e:e6:12:94:96:ad:28:0b:50:21:e9:14:dc:07:62:fd:6f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sequoia.bcsd.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sequoia.bcsd.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.bcsd.com
admin.casaloma.bcsd.com
admin.cato.bcsd.com
admin.chavez.bcsd.com
admin.chipman.bcsd.com
admin.collegeheights.bcsd.com
admin.dunnestemacademy.org
admin.eastview.gcschools.net
admin.eissler.bcsd.com
admin.emerson.bcsd.com
admin.euhs.exeter.k12.ca.us
admin.exeter.k12.ca.us
admin.fletcher.bcsd.com
admin.frankwest.bcsd.com
admin.fremont.bcsd.com
admin.garza.bcsd.com
admin.gcschools.net
admin.ghs.gcschools.net
admin.gms.gcschools.net
admin.gsdacademy.com
admin.halhenard.gcschools.net
admin.harding.bcsd.com
admin.harris.bcsd.com
admin.heather.scsdk8.org
admin.hermiston.k12.or.us
admin.highland.gcschools.net
admin.highschoolforartsandbusiness.org
admin.khs.exeter.k12.ca.us
admin.les.exeter.k12.ca.us
admin.mckinley.bcsd.com
admin.munsey.bcsd.com
admin.noble.bcsd.com
admin.notredameparish.org
admin.owensintermediate.bcsd.com
admin.owensprimary.bcsd.com
admin.pauly.bcsd.com
admin.rhes.exeter.k12.ca.us
admin.roosevelt.bcsd.com
admin.saltfork.org
admin.sierra.bcsd.com
admin.sjboces.org
admin.steinerschool.org
admin.stiern.bcsd.com
admin.tusculumview.gcschools.net
admin.voorhies.bcsd.com
admin.williams.bcsd.com
admin.wms.exeter.k12.ca.us
cas.centerusd.org
casaloma.bcsd.com
cato.bcsd.com
collegeheights.bcsd.com
compton.bcsd.com
crammiddleschool.org
dunnestemacademy.org
eissler.bcsd.com
emerson.bcsd.com
euhs.exeter.k12.ca.us
evergreen.bcsd.com
exeter.k12.ca.us
faithmarietta.org
fletcher.bcsd.com
frankwest.bcsd.com
gsdacademy.com
harris.bcsd.com
high.saltfork.org
highschoolforartsandbusiness.org
hills.bcsd.com
horacemann.bcsd.com
jefferson.bcsd.com
juniorhigh.saltfork.org
khs.exeter.k12.ca.us
les.exeter.k12.ca.us
longfellow.bcsd.com
north.saltfork.org
notredameparish.org
owensprimary.bcsd.com
pioneer.bcsd.com
rhes.exeter.k12.ca.us
roosevelt.bcsd.com
saltfork.org
seal.bcsd.com
sequoia.bcsd.com
sjboces.org
south.saltfork.org
steinerschool.org
stiern.bcsd.com
washington.bcsd.com
wayside.bcsd.com
williams.bcsd.com
wms.exeter.k12.ca.us
www.bcsd.com
www.dunnestemacademy.org
www.exeter.k12.ca.us
www.gsdacademy.com
www.highschoolforartsandbusiness.org
www.notredameparish.org
www.saltfork.org
www.sjboces.org
www.steinerschool.org

Other certificates including the domain name bcsd.com

(limited to 100 certificates)
walshcps.org
admin-cuajimalpa.peterson.edu.mx
gutierrez.hcisd.org
bce.slvusd.org
*.bcsd.com
palomares.cv.k12.ca.us
admin.bcsd.com
www.cv.k12.ca.us
gfes.comalisd.org
admin-cuajimalpa.peterson.edu.mx
admin.proctor.cv.k12.ca.us
washington.bcsd.com
sunnyside.goldenruledallas.org
admin.veca.gocats.org
admin.gsdacademy.com
admin.rowlettacademy.org
www.dhs.dover.k12.nh.us
smartfind.bcsd.com
admin.bowie.hcisd.org
admin-cuajimalpa.peterson.edu.mx
www.msd120.org
admin.illinois.goldenruledallas.org
fremont.bcsd.com
www.rowlettacademy.org
admin.bclc.burke.k12.ga.us
Reportcard.bcsd.com
pioneer.bcsd.com
admin.nichols.bcsd.com
chs.comalisd.org
hles.comalisd.org
cses.comalisd.org
fes.comalisd.org
admin.wayside.bcsd.com
desoto.goldenruledallas.org
admin.fuesd.org
www.hilltopprep.org
admin.independent.cv.k12.ca.us
tpes.comalisd.org
www.btaallday.org
leonardeulerd.edu.mx
svms.comalisd.org
bcsd.com
www.wherelifehappens.org
admin.cano.hcisd.org
admin.crma5.org
dover.k12.nh.us
redwood.cv.k12.ca.us
admin.milam.hcisd.org
admin.evanshs.ccboe.net
admin.vannoy.cv.k12.ca.us
admin.compton.bcsd.com
admin.evergreen.bcsd.com
mvms.comalisd.org
116elementary.org
pg.goldenruledallas.org
admin.hills.bcsd.com
admin.alma.cv.k12.ca.us
admin.church.faithmarietta.org
www.teachersupportsite.com
crockett.hcisd.org
admin-cuajimalpa.peterson.edu.mx
voorhies.bcsd.com
bcsd.com
smartfind.bcsd.com
admin.longfellow.bcsd.com
admin.bonham.hcisd.org
burney.hattiesburgpsd.com
ballingerisd.net
sierra.bcsd.com
sequoia.bcsd.com
www.kcgpa.org
chs.comalisd.org
www.leavittms.net
admin.cornerstone.pvpusd.net
admin.redwood.cv.k12.ca.us
longfellow.bcsd.com
www.bce.slvusd.org
admin.athletics.goshenlocalschools.org
rvs.monroe.k12.tn.us
www.notredameparish.org
www.comalisd.org
admin.llc.lex3.org
admin.wayside.bcsd.com
admin.lunadabay.pvpusd.net
sequoia.bcsd.com
charter.slvusd.org
msd120.org
cses.comalisd.org
owensintermediate.bcsd.com
admin.casaloma.bcsd.com
painesville-city.k12.oh.us
admin.alma.cv.k12.ca.us
dvms.comalisd.org
slvusd.org
bcsd.com
stmss.org
admin.sle.slvusd.org
admin.athletics.goshenlocalschools.org
admin.harding.bcsd.com
cdc.comalisd.org

Certificate

The complete raw certificate details for sequoia.bcsd.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342641894951191176050246078645829899120764
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-27 10:46:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-27 10:46:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sequoia.bcsd.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2261 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.casaloma.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cato.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.chavez.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.chipman.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.collegeheights.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dunnestemacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eastview.gcschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eissler.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.emerson.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.euhs.exeter.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.exeter.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fletcher.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.frankwest.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fremont.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.garza.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gcschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ghs.gcschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gms.gcschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gsdacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.halhenard.gcschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.harding.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.harris.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.heather.scsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.highland.gcschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.highschoolforartsandbusiness.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.khs.exeter.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.les.exeter.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mckinley.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.munsey.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.noble.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.notredameparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.owensintermediate.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.owensprimary.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pauly.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rhes.exeter.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.roosevelt.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.saltfork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sierra.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sjboces.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.steinerschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stiern.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tusculumview.gcschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.voorhies.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.williams.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wms.exeter.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cas.centerusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casaloma.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cato.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegeheights.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compton.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crammiddleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dunnestemacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eissler.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emerson.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euhs.exeter.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evergreen.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exeter.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faithmarietta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fletcher.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frankwest.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsdacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harris.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'high.saltfork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highschoolforartsandbusiness.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hills.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horacemann.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jefferson.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juniorhigh.saltfork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khs.exeter.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'les.exeter.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longfellow.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'north.saltfork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notredameparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owensprimary.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pioneer.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhes.exeter.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roosevelt.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saltfork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seal.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sequoia.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjboces.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'south.saltfork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steinerschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stiern.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washington.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wayside.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'williams.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wms.exeter.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dunnestemacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exeter.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gsdacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highschoolforartsandbusiness.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notredameparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saltfork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjboces.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steinerschool.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001688f21eed6000004030046304402202c812468c94ae87a4287a8edcd4dced841b9a3d8269753d660baa9b21d7ff7d002207096d76a3a0b7f3d39a30ab00a20a5b344dbd1733fcac84e51251b7601aa9d8500760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001688f21eed2000004030047304502204d22d74665f360a325a8d2ec9364458504315bb027eb0b4e44b1630913211ef8022100d6d1f5f60ecd1daa4c5f761e0d2d70812eee4b559f16a833c8e6c1c66354c1a4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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