admin.hahntownschool.norwinsd.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:32:ba:7b:4b:3c:fd:0e:ad:6c:1a:9c:cc:76:57:75:2a:5c was issued on by Let's Encrypt.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.hahntownschool.norwinsd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:32:ba:7b:4b:3c:fd:0e:ad:6c:1a:9c:cc:76:57:75:2a:5c
Serial Number (int): 278598852727069984725339830731058586135132
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b2:38:9c:7b:63:60:ac:ab:1e:ab:3d:76:ad:96:2c:dc:3c:c3:73:d5
Fingerprint (sha256): 3c:a0:9f:10:6b:74:9e:bb:f8:4d:cd:f9:90:e0:fa:f9:84:10:a7:0b:e0:1b:30:8e:68:e1:e5:2e:a5:1a:08:6b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate admin.hahntownschool.norwinsd.org

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.hahntownschool.norwinsd.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.arcataafterschool.org
admin.centennial.nsd131.org
admin.central.nsd131.org
admin.columbiahigh.nsd131.org
admin.eastvalley.nsd131.org
admin.endeavor.nsd131.org
admin.gateways.nsd131.org
admin.greenhurst.nsd131.org
admin.hahntownschool.norwinsd.org
admin.highschool.norwinsd.org
admin.hillcrestschool.norwinsd.org
admin.icat.nsd131.org
admin.iowa.nsd131.org
admin.isp.edu.pa
admin.josefita.org
admin.lakeridge.nsd131.org
admin.lonestar.nsd131.org
admin.middleschool.norwinsd.org
admin.nampahigh.nsd131.org
admin.newhorizons.nsd131.org
admin.norwinsd.org
admin.nsd131.org
admin.owyhee.nsd131.org
admin.parkridge.nsd131.org
admin.preschool.nsd131.org
admin.reagan.nsd131.org
admin.roosevelt.nsd131.org
admin.sheridanterrace.norwinsd.org
admin.sherman.nsd131.org
admin.skyviewhigh.nsd131.org
admin.snakeriver.nsd131.org
admin.south.nsd131.org
admin.stewartsvilleschool.norwinsd.org
admin.sunsetvalley.norwinsd.org
admin.tvla.nsd131.org
admin.west.nsd131.org
admin.willowcreek.nsd131.org
arcataafterschool.org
beavercreek.k12.oh.us
beavercreekschools.org
centennial.nsd131.org
central.nsd131.org
columbiahigh.nsd131.org
eastvalley.nsd131.org
endeavor.nsd131.org
gateways.nsd131.org
greenhurst.nsd131.org
hahntownschool.norwinsd.org
highschool.norwinsd.org
hillcrestschool.norwinsd.org
icat.nsd131.org
iowa.nsd131.org
isp.edu.pa
jmspr.org
josefita.org
lakeridge.nsd131.org
lonestar.nsd131.org
middleschool.norwinsd.org
nampahigh.nsd131.org
newhorizons.nsd131.org
norwinsd.org
nsd131.org
owyhee.nsd131.org
parkridge.nsd131.org
preschool.nsd131.org
reagan.nsd131.org
roosevelt.nsd131.org
sheridanterrace.norwinsd.org
sherman.nsd131.org
skyviewhigh.nsd131.org
snakeriver.nsd131.org
south.nsd131.org
stewartsvilleschool.norwinsd.org
sunsetvalley.norwinsd.org
tvla.nsd131.org
west.nsd131.org
willowcreek.nsd131.org
www.arcataafterschool.org
www.beavercreek.k12.oh.us
www.beavercreekschools.org
www.isp.edu.pa
www.jmspr.org
www.josefita.org
www.norwinsd.org
www.nsd131.org

Other certificates including the domain name norwinsd.org

(limited to 100 certificates)
admin.godwinschools.org
admin.arcataafterschool.org
chs.somerset.k12.md.us
norwinsd.org
www.norwinsd.org
student.norwinsd.org
*.norwinsd.org
employee.norwinsd.org
cristoreytc.org
*.norwinsd.org
cte.nsd131.org
mail.norwinsd.org
stewartsvilleschool.norwinsd.org
admin.hahntownschool.norwinsd.org
middleschool.norwinsd.org
hahntownschool.norwinsd.org
employee.norwinsd.org
norwinsd.org
student.norwinsd.org
employee.norwinsd.org
mail.norwinsd.org
sheridanterrace.norwinsd.org
www.norwinsd.org
norwinsd.org
mail.norwinsd.org
norwinsd.org
admin.orchardviewschool.org
student.norwinsd.org
admin.arcataafterschool.org
sherpateacher.norwinsd.org
admin-wms.slzusd.org

admin.arcataafterschool.org
www.norwinsd.org
jmspr.org
admin.arcataafterschool.org
www.norwinsd.org
sheridanterrace.norwinsd.org
norwinsd.org
norwinsd.org
employee.norwinsd.org
student.norwinsd.org
admin.arcataafterschool.org
admin-wms.slzusd.org
beavercreek.k12.oh.us
admin.arcataafterschool.org
stewartsvilleschool.norwinsd.org
student.norwinsd.org
norwinsd.org
mail.norwinsd.org
orchardviewschool.org
admin.josefita.org
*.norwinsd.org
norwinsd.org
norwinsd.org
admin.norwinsd.org
*.norwinsd.org
*.norwinsd.org
admin.arcataafterschool.org
scths.somerset.k12.md.us

Certificate

The complete raw certificate details for admin.hahntownschool.norwinsd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278598852727069984725339830731058586135132
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-03 10:43:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-01 10:43:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.hahntownschool.norwinsd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2055 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.arcataafterschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.centennial.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.central.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.columbiahigh.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eastvalley.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.endeavor.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gateways.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.greenhurst.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hahntownschool.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.highschool.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hillcrestschool.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.icat.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.iowa.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.isp.edu.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.josefita.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lakeridge.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lonestar.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.middleschool.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nampahigh.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.newhorizons.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.owyhee.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.parkridge.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.preschool.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.reagan.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.roosevelt.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sheridanterrace.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sherman.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.skyviewhigh.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.snakeriver.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.south.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stewartsvilleschool.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sunsetvalley.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tvla.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.west.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.willowcreek.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcataafterschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beavercreek.k12.oh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beavercreekschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centennial.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'central.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiahigh.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastvalley.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endeavor.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateways.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenhurst.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hahntownschool.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highschool.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillcrestschool.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icat.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowa.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isp.edu.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jmspr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'josefita.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakeridge.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lonestar.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'middleschool.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nampahigh.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newhorizons.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owyhee.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkridge.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preschool.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reagan.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roosevelt.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sheridanterrace.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sherman.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skyviewhigh.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snakeriver.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'south.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stewartsvilleschool.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunsetvalley.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvla.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'west.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willowcreek.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arcataafterschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beavercreek.k12.oh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beavercreekschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isp.edu.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jmspr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.josefita.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nsd131.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169435dc6b300000403004730450220345e675e4cc1e0632039c3d5468a71b9f144276f0c21cd2c7655cd32249ef429022100e0990f6e8ef436f73adef1cef9d7326a8e6fbe9381530c97732f675388ca6295007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169435dc4c20000040300463044022010890ad35a05e175457e8d022ea399e2646085678a8771ade5d79387e1d86c8c02205ffd79552aa8eabc720712ec5f33f44ecd5bd599dd22b87d63dbadca0acea5e0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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