www.gaparish.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c1:60:3d:c3:66:11:92:1e:35:60:3c:17:e4:50:56:84:d4 was issued on by Let's Encrypt.

With 78 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.gaparish.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c1:60:3d:c3:66:11:92:1e:35:60:3c:17:e4:50:56:84:d4
Serial Number (int): 327139281191882169116110031652067132998868
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4b:98:1b:56:f0:d6:d5:21:20:5d:1a:f4:b4:d6:ca:69:ce:1c:be:e2
Fingerprint (sha256): 3f:d4:b9:26:55:56:89:1d:9a:04:95:b4:d0:1d:48:9b:6f:24:34:0b:c2:3b:c0:11:9c:15:e0:dd:14:77:b6:c1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.gaparish.org

78

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.gaparish.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.allsaintsjupiter.org
admin.athlosaustin.org
admin.beethoven-elementary.vanguardacademy.education
admin.ceca.edu.mx
admin.cityofangelsschool.org
admin.hwespacers.org
admin.immaculateheartnj.com
admin.mozart-elementary.vanguardacademy.education
admin.mozart-secondary.vanguardacademy.education
admin.mydehesa.org
admin.picasso-elementary.vanguardacademy.education
admin.rembrandt-secondary.vanguardacademy.education
admin.riograndeschool.org
admin.saintpatrickhawaii.org
admin.vanguardacademy.education
admin.westbronxacademy.org
admin.westernacademycharter.com
allsaintsjupiter.org
athlosaustin.org
beethoven-elementary.vanguardacademy.education
bes.napsk12.org
ceca.edu.mx
cityofangelsschool.org
dhs.napsk12.org
es.pisd.us
gaparish.org
ges.napsk12.org
hs.pisd.us
hwespacers.org
immaculateheartacademy.us
immaculateheartnj.com
jh.pisd.us
mozart-elementary.vanguardacademy.education
mydehesa.org
parish.gaparish.org
pic.pisd.us
ps.pisd.us
rec.frenship.us
rembrandt-secondary.vanguardacademy.education
riograndeschool.org
saintpatrickhawaii.org
samrayburnisd.com
samrayburnisd.org
ses.napsk12.org
tvms.frenship.us
uh.frenship.us
vanguardacademy.education
walkerjonescampus.org
westbronxacademy.org
westernacademycharter.com
www.allsaintsjupiter.org
www.applecharters.org
www.athlosaustin.org
www.bartlettschools.org
www.calvarychapelpreschool.org
www.ceca.edu.mx
www.cityofangelsschool.org
www.gaparish.org
www.gaschool.org
www.gprep.com
www.hwespacers.org
www.immaculateheartacademy.us
www.immaculateheartnj.com
www.kingsvilleisd.com
www.mydehesa.org
www.napsk12.org
www.pisd.us
www.rbhs208.net
www.riograndeschool.org
www.saintpatrickhawaii.org
www.samrayburnisd.com
www.samrayburnisd.org
www.seedsofhealth.org
www.sjscatholic.org
www.sjslibertyville.org
www.westbronxacademy.org
www.westernacademycharter.com
www.wholekidsacademy.com

Other certificates including the domain name gaparish.org

(limited to 100 certificates)
admin.allsaintsjupiter.org
fhs.frenship.us
admin.bayhaven.org
admin.allsaintsjupiter.org
www.gaparish.org
admin.bayhaven.org
shepherdstown.mbgsd.org
admin.allsaintsjupiter.org
admin.allsaintsjupiter.org
stmmsa.org
admin.elmwood.mbgsd.org
adairsvillehigh.bartow.k12.ga.us
admin.bayhaven.org
walkerjonescampus.org
www.gaparish.org
www.giddings.txed.net
admin.allsaintsjupiter.org
admin.allsaintsjupiter.org
admin.bayhaven.org
upperallen.mbgsd.org
www.avoyellespsb.com
adairsvillehigh.bartow.k12.ga.us
admin.allsaintsjupiter.org
gaparish.org
admin.bayhaven.org
www.gaparish.org
portrichmondhs.org
admin.portrichmondhs.org
admin.allsaintsjupiter.org
admin.bayhaven.org
admin.bayhaven.org
rembrandt-secondary.vanguardacademy.education
admin.bayhaven.org
admin.rembrandt-elementary.vanguardacademy.education
monroe.k12.tn.us
parish.gaparish.org
saintpatrickhawaii.org
admin.bayhaven.org
adairsvillehigh.bartow.k12.ga.us
admin.allsaintsjupiter.org
admin.bayhaven.org
admin.allsaintsjupiter.org
adairsvillehigh.bartow.k12.ga.us
admin.bayhaven.org
parish.gaparish.org
gaparish.org
admin.bayhaven.org
ninth.frenship.us
gaparish.org
www.usd465.com
www.zionmarengo.net
admin.broadstreet.mbgsd.org
adairsvillehigh.bartow.k12.ga.us
www.saintpatrickhawaii.org
admin.shulamith.org
bennett.frenship.us
admin.upperallen.mbgsd.org
admin.allsaintsjupiter.org
admin.bayhaven.org
admin.bayhaven.org
www.mydehesa.org
admin.allsaintsjupiter.org
admin.vanguardacademy.education
gaparish.org
athlosaustin.org
adairsvillehigh.bartow.k12.ga.us
or.frenship.us
adairsvillehigh.bartow.k12.ga.us
www.shulamith.org
admin.bayhaven.org
admin.seedsofhealth.org
samrayburnisd.com
adairsvillehigh.bartow.k12.ga.us
admin.middleschool.mbgsd.org
parish.gaparish.org
admin.allsaintsjupiter.org
admin.beethoven-elementary.vanguardacademy.education

Certificate

The complete raw certificate details for www.gaparish.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327139281191882169116110031652067132998868
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-19 10:07:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-17 10:07:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gaparish.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1922 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.allsaintsjupiter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.athlosaustin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.beethoven-elementary.vanguardacademy.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ceca.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cityofangelsschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hwespacers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.immaculateheartnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mozart-elementary.vanguardacademy.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mozart-secondary.vanguardacademy.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mydehesa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.picasso-elementary.vanguardacademy.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rembrandt-secondary.vanguardacademy.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.riograndeschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.saintpatrickhawaii.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.vanguardacademy.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.westbronxacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.westernacademycharter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allsaintsjupiter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athlosaustin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beethoven-elementary.vanguardacademy.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bes.napsk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceca.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofangelsschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhs.napsk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.pisd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ges.napsk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.pisd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hwespacers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immaculateheartacademy.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immaculateheartnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jh.pisd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mozart-elementary.vanguardacademy.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydehesa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parish.gaparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pic.pisd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps.pisd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rec.frenship.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rembrandt-secondary.vanguardacademy.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riograndeschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintpatrickhawaii.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samrayburnisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samrayburnisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ses.napsk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvms.frenship.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uh.frenship.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vanguardacademy.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walkerjonescampus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westbronxacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westernacademycharter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allsaintsjupiter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.applecharters.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athlosaustin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bartlettschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.calvarychapelpreschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ceca.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofangelsschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gaparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gaschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gprep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hwespacers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.immaculateheartacademy.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.immaculateheartnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingsvilleisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mydehesa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.napsk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pisd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rbhs208.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riograndeschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintpatrickhawaii.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.samrayburnisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.samrayburnisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seedsofhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjscatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjslibertyville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westbronxacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westernacademycharter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wholekidsacademy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016ca98f2ce00000040300473045022100a9c9fdb67dbe4527f6bc7a3b7d14b26de77402df4b058f640456f9d448350ba50220170aad9fd1fe1b292d08ff203a90e7156b19882bf7e941f9334ba94ff11c04a6007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ca98f2d000000040300473045022025d0062eae1369f2e043cf153672aeb1ca11b0ba7c4644fbaf77a051cb635441022100f6bf152d404c4bf448e886a92fa1ef7a5655102250b62c806154e0768c979c8f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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