www.ccoe.k12.ca.us

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:be:17:75:89:d2:ba:52:0c:96:92:95:62:64:1e:4a:3f:6b was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ccoe.k12.ca.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:be:17:75:89:d2:ba:52:0c:96:92:95:62:64:1e:4a:3f:6b
Serial Number (int): 326021690048280242869286508970059091296107
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 27:c6:48:e7:72:ec:10:c1:a2:94:87:52:63:ab:f3:0f:cb:b4:c0:db
Fingerprint (sha256): 3a:f0:a5:92:39:3c:93:97:fa:a4:b2:93:c7:b2:82:b9:8e:df:e3:f1:05:ee:fb:e6:37:e9:c7:68:7a:e5:ee:10

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ccoe.k12.ca.us

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ccoe.k12.ca.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

academyofthecanyons.net
academyofthecanyons.org
admin.bme.snowlineschools.com
admin.ccoe.k12.ca.us
admin.chs.snowlineschools.com
admin.ciudaddelosninoscr.org
admin.dolemiddleschool.org
admin.escd.snowlineschools.com
admin.icabh.org
admin.kilaueaschool.com
admin.masterschool.org
admin.msd.edu
admin.narbonnehsgauchos.com
admin.pes.snowlineschools.com
admin.phe.snowlineschools.com
admin.pioneeracademy307.org
admin.pmms.snowlineschools.com
admin.qvms.snowlineschools.com
admin.sa.snowlineschools.com
admin.samuelgompersms.net
admin.sas.snowlineschools.com
admin.shs.snowlineschools.com
admin.snowlineschools.com
admin.stanthonyeagles.org
admin.svs.snowlineschools.com
admin.ths.snowlineschools.com
admin.unionsquareacademy.org
admin.vve.snowlineschools.com
admin.wes.snowlineschools.com
arschoolforthedeaf.org
bme.snowlineschools.com
chs.snowlineschools.com
ciudaddelosninoscr.org
dolemiddleschool.org
escd.snowlineschools.com
goldenoakadultschool.net
goldenoakadultschool.org
gompersms.net
icabh.org
kilaueaschool.com
komarek94.org
masterschool.org
msd.edu
narbonnehsgauchos.com
pes.snowlineschools.com
phe.snowlineschools.com
pioneeracademy307.org
pmms.snowlineschools.com
qvms.snowlineschools.com
sa.snowlineschools.com
samuelgompersms.net
sas.snowlineschools.com
sauguscenturions.net
sauguscenturions.org
shs.snowlineschools.com
snowlineschools.com
stanthonyeagles.org
svs.snowlineschools.com
ths.snowlineschools.com
unionsquareacademy.org
valenciavikings.net
valenciavikings.org
vve.snowlineschools.com
wes.snowlineschools.com
www.academyofthecanyons.net
www.academyofthecanyons.org
www.arschoolforthedeaf.org
www.ccoe.k12.ca.us
www.ciudaddelosninoscr.org
www.dolemiddleschool.org
www.goldenoakadultschool.net
www.goldenoakadultschool.org
www.gompersms.net
www.icabh.org
www.kilaueaschool.com
www.masterschool.org
www.msd.edu
www.narbonnehsgauchos.com
www.pioneeracademy307.org
www.samuelgompersms.net
www.sauguscenturions.net
www.sauguscenturions.org
www.snowlineschools.com
www.stanthonyeagles.org
www.unionsquareacademy.org
www.valenciavikings.net
www.valenciavikings.org

Other certificates including the domain name ccoe.k12.ca.us

(limited to 100 certificates)
komarek94.org
admin.allenparkschools.com
academyofthecanyons.net
www.arschoolforthedeaf.org
admin.missionprep.org
ccoe.k12.ca.us
admin.stanthonyeagles.org
academyofthecanyons.net
bradley.etbsd.org
academyofthecanyons.net
ccoe.k12.ca.us
tableau.ccoe.k12.ca.us
dimensions.org
www.ccoe.k12.ca.us
mercury.ccoe.k12.ca.us
ccoe.k12.ca.us
www.grandville.k12.mi.us
academyofthecanyons.net
mercury.ccoe.k12.ca.us
www.ccoe.k12.ca.us
admin.omardblaircharterschool.com
ochoaprep.erusd.org
academyofthecanyons.net
mercury.ccoe.k12.ca.us
academyofthecanyons.net
www.unionsquareacademy.org
ccoe.k12.ca.us
www.icabh.org
ccoe.k12.ca.us
www.ciudaddelosninoscr.org
admin.taylor.etbsd.org
sa.snowlineschools.com
admin.kauffmanschool.org
ccoe.k12.ca.us
tableau.ccoe.k12.ca.us
ccoe.k12.ca.us
academyofthecanyons.net
www.dcsocal.org
admin.allenparkschools.com
academyofthecanyons.net
samuelgompersms.net
www.ccoe.k12.ca.us
admin.allenparkschools.com
admin.ccoe.k12.ca.us
academyofthecanyons.net
admin.dimensions.org
academyofthecanyons.net
athletics.rsu14.org
academyofthecanyons.net
icabh.org
academyofthecanyons.net
academyofthecanyons.net
hamlincharter.org
academyofthecanyons.net
doe.as
academyofthecanyons.net
academyofthecanyons.net
campus.ccoe.k12.ca.us
ccoe.k12.ca.us
www.ccoe.k12.ca.us
edtechteam.mx
admin.allenparkschools.com
academyofthecanyons.net
academyofthecanyons.net
admin.apcs.allenparkschools.com
admin.ccoe.k12.ca.us
ccoe.k12.ca.us
www.ccoe.k12.ca.us
mai.mcdowell.k12.nc.us
admin.allenparkschools.com
www.dolemiddleschool.org

Certificate

The complete raw certificate details for www.ccoe.k12.ca.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326021690048280242869286508970059091296107
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-19 09:45:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-17 09:45:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ccoe.k12.ca.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2171 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academyofthecanyons.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academyofthecanyons.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bme.snowlineschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ccoe.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.chs.snowlineschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ciudaddelosninoscr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dolemiddleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.escd.snowlineschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.icabh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kilaueaschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.masterschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.msd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.narbonnehsgauchos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pes.snowlineschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.phe.snowlineschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pioneeracademy307.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pmms.snowlineschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.qvms.snowlineschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sa.snowlineschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.samuelgompersms.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sas.snowlineschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.shs.snowlineschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.snowlineschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stanthonyeagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.svs.snowlineschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ths.snowlineschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.unionsquareacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.vve.snowlineschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wes.snowlineschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arschoolforthedeaf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bme.snowlineschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chs.snowlineschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciudaddelosninoscr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dolemiddleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escd.snowlineschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldenoakadultschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldenoakadultschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gompersms.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icabh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kilaueaschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'komarek94.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masterschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'narbonnehsgauchos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pes.snowlineschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phe.snowlineschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pioneeracademy307.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmms.snowlineschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qvms.snowlineschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sa.snowlineschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samuelgompersms.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sas.snowlineschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sauguscenturions.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sauguscenturions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shs.snowlineschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snowlineschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanthonyeagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svs.snowlineschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ths.snowlineschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unionsquareacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valenciavikings.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valenciavikings.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vve.snowlineschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wes.snowlineschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.academyofthecanyons.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.academyofthecanyons.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arschoolforthedeaf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccoe.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ciudaddelosninoscr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolemiddleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldenoakadultschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldenoakadultschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gompersms.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icabh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kilaueaschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masterschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.narbonnehsgauchos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pioneeracademy307.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.samuelgompersms.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sauguscenturions.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sauguscenturions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snowlineschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanthonyeagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unionsquareacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valenciavikings.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valenciavikings.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016acfb23af8000004030046304402205b465086cb0982f71603e72e21981ec4ab70ff1865bb0fdd6acbbf5b9ab19602022027e1b9d7a5cb92652d953245b07aa7b5ff38bba84ae435e8c03e24ca362ed26800770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016acfb23b240000040300483046022100be087e0e27f4968aaf8b072de995bd76c63d78fb1191bf1ea7b5c594d55645b3022100dc99b3999d95a2509be6d94085a80c5e802b6fc4a32fec9df706abb1ad133852
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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