hmr.franklinlakes.k12.nj.us

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bc:33:16:61:48:46:02:9f:af:5d:b9:46:f3:8e:a9:a1:90 was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hmr.franklinlakes.k12.nj.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bc:33:16:61:48:46:02:9f:af:5d:b9:46:f3:8e:a9:a1:90
Serial Number (int): 325377849607852915924581447845752437580176
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 76:61:f9:70:cd:3c:86:f9:5c:a1:20:e0:1c:1c:d4:ff:3d:0e:77:95
Fingerprint (sha256): 3d:67:45:74:49:1b:4c:8b:be:eb:87:6a:1f:b4:b3:be:21:db:6b:d8:68:ab:55:91:1e:ce:10:1e:36:d8:24:c7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate hmr.franklinlakes.k12.nj.us

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hmr.franklinlakes.k12.nj.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abilene.texasleadership.net
admin.abilene.texasleadership.net
admin.altacaliforniaelementary.org
admin.californiak12.org
admin.dtschools.org
admin.ehs.elkincityschools.org
admin.fdavms.org
admin.greybullschools.com
admin.jamesjordanms.com
admin.loyolavillageartsmagnet.org
admin.midland.texasleadership.net
admin.northsidecatholic.org
admin.queenmaryschool.edu.mx
admin.sanangelo.texasleadership.net
admin.shenandoahes.org
admin.sheridanstreetschool.com
admin.somonauk.net
admin.stjohnsprepschool.org
admin.stpius5school.net
admin.tehiyah.org
admin.thomasedisonms.org
admin.waterstrainingcenter.org
arlington.texasleadership.net
autismcharter.org
bgh3.net
bgh3.org
californiak12.org
crs.franklinlakes.k12.nj.us
dennistwpschools.org
district.franklinlakes.k12.nj.us
dtschools.com
dtschools.org
ehs.elkincityschools.org
es.californiak12.org
espanol.tecsalvord.org
fams.franklinlakes.k12.nj.us
fdavms.org
greybullschools.com
hmr.franklinlakes.k12.nj.us
hs.californiak12.org
jamesjordanms.com
loyolavillageartsmagnet.org
mes.midland-7.net
mhs.midland-7.net
midland.texasleadership.net
ms.californiak12.org
sanangelo.texasleadership.net
shenandoahes.org
somonauk.net
stpius5school.net
texasleadershipabilene.com
texasleadershiparlington.com
texasleadershipmidland.com
thomasedisonms.org
tlca-sanangelo.com
was.franklinlakes.k12.nj.us
waterstrainingcenter.org
www.altacaliforniaelementary.org
www.asd.k12.pa.us
www.autismcharter.org
www.californiak12.org
www.dennistwpschools.org
www.detroitsla.org
www.dtschools.com
www.dtschools.org
www.fdavms.org
www.greybullschools.com
www.jamesjordanms.com
www.loyolavillageartsmagnet.org
www.lsusfw.org
www.midland-7.net
www.northsidecatholic.org
www.queenmaryschool.edu.mx
www.redfordsla.org
www.shenandoahes.org
www.sheridanstreetschool.com
www.stedmundprep.org
www.stjohnsprepschool.org
www.stpius5school.net
www.tehiyah.org
www.texasleadershipabilene.com
www.texasleadershiparlington.com
www.texasleadershipmidland.com
www.thomasedisonms.org
www.tlca-sanangelo.com
www.waterstrainingcenter.org
www.windhamps.org

Other certificates including the domain name franklinlakes.k12.nj.us

(limited to 100 certificates)
admin.argyleisd.com
admin.argyleisd.com
admin.argyleisd.com
admin.espanol.tecsalvord.org
abilene.texasleadership.net
abilene.texasleadership.net
ees.elkincityschools.org
www.granths.org
*.franklinlakes.k12.nj.us
abilene.texasleadership.net
abilene.texasleadership.net
abilene.texasleadership.net
abilene.texasleadership.net
admin.stedmundprep.org
*.franklinlakes.k12.nj.us
fams.franklinlakes.k12.nj.us
hmr.franklinlakes.k12.nj.us
abilene.texasleadership.net
crs.franklinlakes.k12.nj.us
admin.argyleisd.com
abilene.texasleadership.net
abilene.texasleadership.net
admin.eagles.lucernevalleyunified.org
admin.somonauk.net
admin.argyleisd.com
*.franklinlakes.k12.nj.us
ees.elkincityschools.org
admin.clarabartonhs.org
ecc.windhamps.org
admin.argyleisd.com
admin.griggscountycentral.org
saspasadena.org
abilene.texasleadership.net
admin.cbs.windhamps.org
admin.argyleisd.com
admin.argyleisd.com
abilene.texasleadership.net
*.franklinlakes.k12.nj.us
texasleadership.net
www.lsusfw.org
abilene.texasleadership.net
admin.argyleisd.com
admin.argyleisd.com
www.theirvingtonschool.org
admin.argyleisd.com
*.franklinlakes.k12.nj.us
admin.argyleisd.com
admin.ehs.elkincityschools.org
admin.argyleisd.com
bhswca.com
abilene.texasleadership.net
admin.argyleisd.com
admin.argyleisd.com
admin.northsidecatholic.org
admin.lucernevalleyunified.org
abilene.texasleadership.net
abilene.texasleadership.net
abilene.texasleadership.net
abilene.texasleadership.net
abilene.texasleadership.net
admin.argyleisd.com
abilene.texasleadership.net
admin.argyleisd.com
*.franklinlakes.k12.nj.us
admin.argyleisd.com
abilene.texasleadership.net
lisbahamas.com
uci.edu.mx
admin.wms.windhamps.org
taylor.ogsd.net
abilene.texasleadership.net

Certificate

The complete raw certificate details for hmr.franklinlakes.k12.nj.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325377849607852915924581447845752437580176
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-15 10:53:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-15 10:53:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hmr.franklinlakes.k12.nj.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abilene.texasleadership.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.abilene.texasleadership.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.altacaliforniaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.californiak12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dtschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ehs.elkincityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fdavms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.greybullschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jamesjordanms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.loyolavillageartsmagnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.midland.texasleadership.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.northsidecatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.queenmaryschool.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sanangelo.texasleadership.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.shenandoahes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sheridanstreetschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.somonauk.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stjohnsprepschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stpius5school.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tehiyah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.thomasedisonms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.waterstrainingcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arlington.texasleadership.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autismcharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bgh3.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bgh3.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'californiak12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crs.franklinlakes.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dennistwpschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'district.franklinlakes.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dtschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dtschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehs.elkincityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.californiak12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espanol.tecsalvord.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fams.franklinlakes.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fdavms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greybullschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hmr.franklinlakes.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.californiak12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamesjordanms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loyolavillageartsmagnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mes.midland-7.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhs.midland-7.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midland.texasleadership.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.californiak12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanangelo.texasleadership.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shenandoahes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'somonauk.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpius5school.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texasleadershipabilene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texasleadershiparlington.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texasleadershipmidland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thomasedisonms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tlca-sanangelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'was.franklinlakes.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterstrainingcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altacaliforniaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autismcharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.californiak12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dennistwpschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.detroitsla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dtschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dtschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fdavms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greybullschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jamesjordanms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loyolavillageartsmagnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lsusfw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.midland-7.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northsidecatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.queenmaryschool.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redfordsla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shenandoahes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sheridanstreetschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stedmundprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnsprepschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpius5school.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tehiyah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.texasleadershipabilene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.texasleadershiparlington.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.texasleadershipmidland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thomasedisonms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tlca-sanangelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waterstrainingcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.windhamps.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000168515c1f65000004030047304502201f2a338f7786086b96cf07796b92e5aeb842ae716b85d9398d7e42cf39fd24ab022100ed3da45317e9be397ec64d270799b41c4b4c87feb5d6a4d5ce7bfe652800ed9800760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000168515c21b40000040300473045022100bc6d5bb297f75e672396d0b5e41c8d319eb7c505bb3567fb5a28763edd55f0f602200aeab79c652a8e65bee2c00c70ed8b409526a74af13ba7a0c7ffe404498a004f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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