admin.bloomfieldcsd.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:52:d5:5e:6e:b1:6f:a6:bf:b5:96:13:f0:b6:a2:b1:88:26 was issued on by Let's Encrypt.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.bloomfieldcsd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:52:d5:5e:6e:b1:6f:a6:bf:b5:96:13:f0:b6:a2:b1:88:26
Serial Number (int): 376635913698687825535024341466597790156838
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 37:86:89:66:47:59:46:c9:97:05:26:37:97:dd:f9:02:91:c3:09:10
Fingerprint (sha256): 3d:2a:40:00:3e:5e:0c:d7:1e:15:5a:b3:6e:ca:b4:fd:88:36:6e:8a:94:a7:1d:b0:98:30:64:7e:06:e5:c5:d4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate admin.bloomfieldcsd.org

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.bloomfieldcsd.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.bloomfieldcsd.org
admin.bronxenvision.org
admin.cortez.pusd.org
admin.cvhs.cvsd.org
admin.cvvl.cvsd.org
admin.emerson.pusd.org
admin.goldensprings.pusd.org
admin.honeoye.org
admin.hs.moodyisd.org
admin.jeannetteschooldistrict.org
admin.lles.cvsd.org
admin.lorbeer.pusd.org
admin.lvstc.pusd.org
admin.oes.cvsd.org
admin.palomares.pusd.org
admin.pantera.pusd.org
admin.philadelphia.pusd.org
admin.poes.cvsd.org
admin.pomona.pusd.org
admin.qvsd.org
admin.res.cvsd.org
admin.roosevelt.pusd.org
admin.sanantonio.pusd.org
admin.seeo.pusd.org
admin.simons.pusd.org
admin.spanish.pusd.org
admin.summit.cvsd.org
admin.svla.cvsd.org
admin.vejar.pusd.org
admin.villageacademy.pusd.org
admin.washington.pusd.org
admin.westmont.pusd.org
admin.willow.hsd153.org
alcott.pusd.org
armstrong.pusd.org
barfield.pusd.org
bes.cvsd.org
bloomfieldcsd.org
bms.cvsd.org
bronxenvision.org
cvvl.cvsd.org
decker.pusd.org
diamondpoint.pusd.org
diamondranch.pusd.org
elc.cvsd.org
ems.cvsd.org
es.jeannetteschooldistrict.org
fremont.pusd.org
ganesha.pusd.org
garey.pusd.org
harrison.pusd.org
honeoye.org
hs.jeannetteschooldistrict.org
jeannetteschooldistrict.org
kellogg.pusd.org
kingsley.pusd.org
lexington.pusd.org
lincoln.pusd.org
lopez.pusd.org
madison.pusd.org
marshall.pusd.org
mes.cherokee.k12.nc.us
montvue.pusd.org
moodyisd.org
ms.moodyisd.org
oes.cvsd.org
palomares.pusd.org
pantera.pusd.org
parkwest.pusd.org
philadelphia.pusd.org
poes.cvsd.org
pomona.pusd.org
proudtobe.pusd.org
ranchhills.pusd.org
rems.cherokee.k12.nc.us
roosevelt.pusd.org
sanantonio.pusd.org
sanjose.pusd.org
seeo.pusd.org
simons.pusd.org
spanish.pusd.org
vejar.pusd.org
villageacademy.pusd.org
washington.pusd.org
westmont.pusd.org
www.bloomfieldcsd.org
www.cherokee.k12.nc.us
www.honeoye.org
www.huntingtonisd.com
www.jeannetteschooldistrict.org
www.qvsd.org

Other certificates including the domain name bloomfieldcsd.org

(limited to 100 certificates)
ace.pusd.org
bloomfieldcsd.org
bloomfieldcsd.org
www.huntingtonisd.com
admin.allison.pusd.org
ic.bloomfieldcsd.org
admin.bloomfieldcsd.org
morelandpreschool.moreland.org
ms.moodyisd.org
ngc.lancasterisd.org
admin.cvhs.cvsd.org
admin.bloomfieldcsd.org
admin.allison.pusd.org
bloomfieldcsd.org
bloomfieldcsd.org
huntingtonisd.com
ic.bloomfieldcsd.org
ic.bloomfieldcsd.org
admin.bloomfieldcsd.org
admin.allison.pusd.org
mishpms.hpisd.org
admin.allison.pusd.org
admin.allison.pusd.org
admin.oes.cvsd.org
bloomfieldcsd.org
llanoisd.org
bloomfieldcsd.org
admin.allison.pusd.org
admin.bloomfieldcsd.org
www.coahomak12.org
admin.ahs.cherokee.k12.nc.us
admin.huntingtonisd.com
bloomfieldcsd.org
ic.bloomfieldcsd.org
admin.allison.pusd.org
www.cherokee.k12.nc.us
admin.bloomfieldcsd.org
mta-sts.bloomfieldcsd.org
bloomfieldcsd.org
ic.bloomfieldcsd.org
admin.bloomfieldcsd.org
admin.allison.pusd.org
harrison.pusd.org
admin.bloomfieldcsd.org
bloomfieldcsd.org
bloomfieldcsd.org
admin.bloomfieldcsd.org
admin.bloomfieldcsd.org
admin.rowlettacademy.org

Certificate

The complete raw certificate details for admin.bloomfieldcsd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 376635913698687825535024341466597790156838
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-26 10:31:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-25 10:31:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.bloomfieldcsd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1913 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bloomfieldcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bronxenvision.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cortez.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cvhs.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cvvl.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.emerson.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.goldensprings.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.honeoye.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hs.moodyisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jeannetteschooldistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lles.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lorbeer.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lvstc.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.oes.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.palomares.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pantera.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.philadelphia.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.poes.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pomona.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.qvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.res.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.roosevelt.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sanantonio.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.seeo.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.simons.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.spanish.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.summit.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.svla.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.vejar.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.villageacademy.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.washington.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.westmont.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.willow.hsd153.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alcott.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armstrong.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barfield.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bes.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloomfieldcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bms.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bronxenvision.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvvl.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decker.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondpoint.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondranch.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elc.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ems.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.jeannetteschooldistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fremont.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ganesha.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garey.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrison.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honeoye.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.jeannetteschooldistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeannetteschooldistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kellogg.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingsley.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lexington.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincoln.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lopez.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madison.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marshall.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mes.cherokee.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montvue.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moodyisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.moodyisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oes.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palomares.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pantera.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkwest.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'philadelphia.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poes.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pomona.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proudtobe.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranchhills.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rems.cherokee.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roosevelt.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanantonio.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanjose.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seeo.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simons.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spanish.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vejar.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'villageacademy.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washington.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westmont.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bloomfieldcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cherokee.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.honeoye.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huntingtonisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jeannetteschooldistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qvsd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d6d56eb4e000004030046304402207ca6b79a49c03e61b0786961b258ed5ddef2cecd74e7be1465816d96bf1d0d6602205d1136fcda65e7ea7833f383a68f00788d69e5e8da53741c3fee1b84792ab0d9007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d6d56ed1f0000040300473045022020925b15c53ece86be7d66eac3fb6508c92704e0c4926959d8fdf6241ddf83f60221009940d07ee61ef8cad4a4ac3cb83f736d6b2af1b05fdbc0b03cd1ec420877a31e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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