www.bhswca.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bf:d0:e3:8a:90:01:93:ab:87:16:91:4e:d1:aa:7a:e8:0d was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.bhswca.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bf:d0:e3:8a:90:01:93:ab:87:16:91:4e:d1:aa:7a:e8:0d
Serial Number (int): 326608450762072005081918409820282166110221
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f4:b0:40:59:9c:36:e5:d3:7b:27:ff:9f:2a:6b:c9:17:f8:2d:24:80
Fingerprint (sha256): 3b:84:3a:b7:07:e1:dd:5c:4f:84:17:7a:c4:97:53:4b:be:8f:a8:5d:65:31:7a:41:7e:c5:01:bf:f4:48:90:cd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.bhswca.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bhswca.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.amschool.edu.sv
admin.aquinashs.net
admin.arete.prsd.us
admin.argentine.lindenschools.org
admin.aspirejuanitatatecampus.org
admin.benlippen.com
admin.bentworth.org
admin.bhswca.com
admin.canoncityschools.org
admin.cces.crispschools.org
admin.cchs.crispschools.org
admin.cclc.crispschools.org
admin.ccms.crispschools.org
admin.ccpk.crispschools.org
admin.ccps.crispschools.org
admin.central.lindenschools.org
admin.cornellsd.org
admin.cove.prioritycharterschools.org
admin.cristoreylasvegas.org
admin.ecalattc.org
admin.elementary.mypagosaschools.com
admin.equitylab.org
admin.es.hillcity.k12.sd.us
admin.flintschools.org
admin.gfusd.net
admin.goodwatermontessori.org
admin.gpusd.org
admin.high.mypagosaschools.com
admin.highschool.lindenschools.org
admin.hs.hillcity.k12.sd.us
admin.hyatt.lindenschools.org
admin.linden.lindenschools.org
admin.middle.mypagosaschools.com
admin.middleschool.lindenschools.org
admin.ms.hillcity.k12.sd.us
admin.ndhsb.org
admin.sfxcatholicschool.org
admin.socialjusticemclc.org
admin.temple.prioritycharterschools.org
admin.tomasmoro.edu.mx
argentine.lindenschools.org
aspirejuanitatatecampus.org
cces.crispschools.org
cchs.crispschools.org
cclc.crispschools.org
ccms.crispschools.org
ccpk.crispschools.org
ccps.crispschools.org
central.lindenschools.org
cristoreylasvegas.org
cristoreystviator.com
cristoreystviator.net
cristoreystviator.org
earlycollegeacademy.org
ecalattc.org
elementary.mypagosaschools.com
equitylab.org
es.hillcity.k12.sd.us
fcs.mcdowell.k12.nc.us
goodwatermontessori.org
gpusd.org
high.mypagosaschools.com
highschool.lindenschools.org
hs.hillcity.k12.sd.us
hs.somervilleisd.org
hyatt.lindenschools.org
linden.lindenschools.org
middle.mypagosaschools.com
middleschool.lindenschools.org
ms.hillcity.k12.sd.us
sfxcatholicschool.com
sfxcatholicschool.org
temple.prioritycharterschools.org
www.amschool.edu.sv
www.aquinashs.net
www.aspirejuanitatatecampus.org
www.benlippen.com
www.bentworth.org
www.bhswca.com
www.canoncityschools.org
www.cornell.k12.pa.us
www.cornellsd.org
www.cristoreylasvegas.org
www.cristoreystviator.com
www.cristoreystviator.net
www.cristoreystviator.org
www.earlycollegeacademy.org
www.ecalattc.org
www.equitylab.org
www.fcs.mcdowell.k12.nc.us
www.flintschools.org
www.gfusd.k12.ca.us
www.gfusd.net
www.goodwatermontessori.org
www.gpusd.org
www.ndhsb.org
www.sfxcatholicschool.com
www.sfxcatholicschool.org
www.tannahillintermediateschool.wsisd.com
www.tomasmoro.edu.mx

Other certificates including the domain name bhswca.com

(limited to 100 certificates)
www.sandymilleracademy.com
www.bhef.org
admin.amschool.edu.sv
admin.amschool.edu.sv
admin.amschool.edu.sv
abilene.texasleadership.net
abilene.texasleadership.net
admin.amschool.edu.sv
ps16.jcboe.org
admin.amschool.edu.sv
www.bhswca.com
abilene.texasleadership.net
admin.amschool.edu.sv
admin.eagles.lucernevalleyunified.org
admin.somonauk.net
lvmhs.lucernevalleyunified.org
admin.clarabartonhs.org
admin.amschool.edu.sv
admin.amschool.edu.sv
lcsd.k12.ms.us
www.notredameacademy.org
es.notredameacademy.org
abilene.texasleadership.net
admin.hs.notredameacademy.org
www.somonauk.net
admin.sfxcatholicschool.org
bhswca.com
admin.lucernevalleyunified.org
abilene.texasleadership.net
abilene.texasleadership.net
admin.eagles.lucernevalleyunified.org
admin.amschool.edu.sv
abilene.texasleadership.net
abilene.texasleadership.net
admin.family.mypagosaschools.com
admin.amschool.edu.sv
westlincoln.lcsd.k12.ms.us
admin.royjohnson.cv.k12.ca.us
admin.bes.bentworth.org
admin.amschool.edu.sv
abilene.texasleadership.net
family.mypagosaschools.com
admin.lindenschools.org
admin.amschool.edu.sv
abilene.texasleadership.net
admin.amschool.edu.sv
eagles.lucernevalleyunified.org
admin.amschool.edu.sv
admin.crispschools.org

Certificate

The complete raw certificate details for www.bhswca.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQbTHb+2z7
rfYVCl+ph5m8FJJOEgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5pV3R4RBg
n18RTHnTD9fS27JxyeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGrmQF3Z/h2
e6StagubO+pVwFzG8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK7wAhJO8e
l2z375LDd2VIwrdWQP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlWZ1AdjOKf
RiY0ckFuu/DYkuvkNKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5Tu7zbek/
MR/JMR9nceWyZ2Mund+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzwWzBvTD8F
7q6ckUbIgpeo7stn7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuaivjW/P+Tm
64XjXNjP9F1W8+5tlcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ4Iudx/o3
Q4E2w6Aud9PYyV05pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/h0omUmCI
DiQVG30eHhb3OIP3bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUnohkUi6ik
D4me6o58sq/IQVmyem1M/E0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326608450762072005081918409820282166110221
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-11 01:03:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-09 01:03:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bhswca.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2554 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.amschool.edu.sv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.aquinashs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.arete.prsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.argentine.lindenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.aspirejuanitatatecampus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.benlippen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bentworth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bhswca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cces.crispschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cchs.crispschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cclc.crispschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ccms.crispschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ccpk.crispschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ccps.crispschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.central.lindenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cornellsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cove.prioritycharterschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cristoreylasvegas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ecalattc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.elementary.mypagosaschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.equitylab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.es.hillcity.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.flintschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.goodwatermontessori.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gpusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.high.mypagosaschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.highschool.lindenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hs.hillcity.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hyatt.lindenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.linden.lindenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.middle.mypagosaschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.middleschool.lindenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ms.hillcity.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ndhsb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sfxcatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.socialjusticemclc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.temple.prioritycharterschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tomasmoro.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'argentine.lindenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspirejuanitatatecampus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cces.crispschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cchs.crispschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cclc.crispschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccms.crispschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccpk.crispschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccps.crispschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'central.lindenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cristoreylasvegas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cristoreystviator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cristoreystviator.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cristoreystviator.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earlycollegeacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecalattc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elementary.mypagosaschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equitylab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.hillcity.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcs.mcdowell.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodwatermontessori.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'high.mypagosaschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highschool.lindenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.hillcity.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.somervilleisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyatt.lindenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linden.lindenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'middle.mypagosaschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'middleschool.lindenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.hillcity.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfxcatholicschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfxcatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temple.prioritycharterschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amschool.edu.sv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aquinashs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aspirejuanitatatecampus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benlippen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bentworth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhswca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornell.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornellsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cristoreylasvegas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cristoreystviator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cristoreystviator.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cristoreystviator.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.earlycollegeacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecalattc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equitylab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fcs.mcdowell.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flintschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodwatermontessori.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gpusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ndhsb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfxcatholicschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfxcatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tannahillintermediateschool.wsisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tomasmoro.edu.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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