mas.mpusd.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8b:9f:52:19:5f:87:d5:99:cb:70:0e:2f:bd:40:70:59:9a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mas.mpusd.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8b:9f:52:19:5f:87:d5:99:cb:70:0e:2f:bd:40:70:59:9a
Serial Number (int): 308847880331592342074885181303947908897178
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4e:56:e9:d8:32:cc:72:70:5e:52:d4:6c:50:ca:b5:a4:39:e1:ca:0c
Fingerprint (sha256): 43:21:cc:f5:ee:be:c3:9c:81:6b:9c:ab:4a:0b:8d:09:c2:67:f7:10:eb:87:6d:c6:67:5c:88:d1:e8:29:b9:53

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mas.mpusd.net

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mas.mpusd.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.adultlearning.sunrisesd.ca
admin.aristoiclassical.org
admin.ces.davidson.k12.nc.us
admin.colonies.sunrisesd.ca
admin.des.davidson.k12.nc.us
admin.dtes.davidson.k12.nc.us
admin.echs.davidson.k12.nc.us
admin.edhs.davidson.k12.nc.us
admin.fbe.davidson.k12.nc.us
admin.goasa.org
admin.hes.davidson.k12.nc.us
admin.lhs.davidson.k12.nc.us
admin.lms.davidson.k12.nc.us
admin.mes.davidson.k12.nc.us
admin.ndhs.davidson.k12.nc.us
admin.nms.davidson.k12.nc.us
admin.rallsisd.org
admin.resedahs.net
admin.sgmission.org
admin.stmaryschoolwayne.org
admin.thesae.k12.ca.us
admin.tphs.monroe.k12.tn.us
admin.ves.monroe.k12.tn.us
ans.usd453.org
ar.hpisd.org
aristoiclassical.org
armstrong.hpisd.org
br.hpisd.org
bradfield.hpisd.org
charlottechoicecharter.org
che.lifeschools.net
dbs.usd453.org
dnn.portervilleschools.org
elkhartisd.org
els.usd453.org
enrollment.usd453.org
goasa.org
hartorah.org
hls.usd453.org
hpms.hpisd.org
hs.cumberlandacademy.com
itchome.lpisd.org
jr.glendaleacademy.org
kahoiwai.kalo.org
kanu.kalo.org
le.lifeschools.net
lhs.lifeschools.net
lhs.usd453.org
lphome.lpisd.org
lpsef.usd453.org
malamapokii.kalo.org
mas.mpusd.net
mce.lifeschools.net
mis.hpisd.org
mishpms.hpisd.org
oce.lifeschools.net
ocs.lifeschools.net
rallsisd.org
resedahs.net
roe.lifeschools.net
ros.lifeschools.net
rosebudacademy.com
rws.usd453.org
stmaryschoolwayne.org
thesae.k12.ca.us
tphs.monroe.k12.tn.us
tpjhs.monroe.k12.tn.us
universitypark.hpisd.org
up.hpisd.org
www.advantageacademy.org
www.advantageisd.com
www.advantageisd.net
www.advantageisd.org
www.aristoiclassical.org
www.arrowacademy.com
www.arrowacademy.org
www.cleburne.k12.tx.us
www.gesd32.org
www.goasa.org
www.holyfamilyhs.com
www.kalo.org
www.lazbuddieisd.org
www.lifeschools.net
www.lpisd.org
www.mcgill-toolen.org
www.mcisd.net
www.nyos.org
www.portervilleschools.org
www.rallsisd.org
www.resedahs.net
www.saisd.us
www.sgmission.org
www.stcathmont.org
www.stmaryschoolwayne.org
www.thesae.k12.ca.us
www.thesae.org
www.towandasd.org
www.tsd.k12.pa.us
www.usd453.org
www.wswaldorf.org

Other certificates including the domain name mpusd.net

(limited to 100 certificates)
www.cfn.edu.mx
admin.adultlearning.sunrisesd.ca
admin.shs.seafordbluejays.org
seafordhighschool.seafordbluejays.org
admin.alhs.nyc
southeastrop.org
admin.wjh.wintersisd.org
admin.mpusd.net
www.comalisd.org
acc.ausdk12.org
admin.cchs.mpusd.net
ac21.clps.org
admin.alhs.nyc
admin.allenparkschools.com
admin.bethlehemhigh.org
jres.comalisd.org
academy.pycsd.org
admin.highland.mpusd.net
admin.calmecaacademy.com
186streetschool.com
mpusd.net
admin.wcms.mpusd.net
admin.missionprep.org
acc.ausdk12.org
sgmission.org
cte.mvusd.net
academy.ndasla.org
academy.pycsd.org
shs.mpusd.net
wcms.mpusd.net
admin.bme.manorisd.net
admin.wjh.wintersisd.org
adams.paisd.org
charlestonbluejays.org
admin.cathedralchapelschool.org
www.southeastrop.org
admin.cpdlf.org
lifeschools.net
www.infinityhs.org
admin.dlamp.mpusd.net
dimensions.org
admin.alhs.nyc
admin.alhs.nyc
crumpton.mpusd.net
admin.clp.clps.org
admin.fges.davidson.k12.nc.us
admin.alhs.nyc
olson.mpusd.net
admin.shackelford.wisd.org
fernhill.fgsdk12.org
1fairfield.org
admin.hg.aceroschools.org
admin.mas.mpusd.net
mas.mpusd.net
admin.foothill.mpusd.net
admin.highland.mpusd.net
admin.sac.gcsd.ms
lvmhs.lucernevalleyusd.org
admin.e3civichigh.com
admin.keillerleaders.org
admin.foothill.mpusd.net
admin.bethlehemhigh.org
admin.delreywoods.mpusd.net
admin.crumpton.mpusd.net
186streetschool.com
admin.stetsoncharter.org
admin.omardblaircharterschool.com
186streetschool.com
mpusd.net
admin.e3civichigh.com
www.moorecountyschools.net
adams.paisd.org
shs.mpusd.net
www.rsu14.org
admin.adultlearning.sunrisesd.ca
escondidoadultschool.org
tmsa.org
admin.cchs.mpusd.net
www.humphreyscountysd.org
admin.delreywoods.mpusd.net
admin.ahs.ausd.net
admin.mas.mpusd.net
admin.alhs.nyc
ohs.otsegops.org
admin.ms.pleasanthillschools.com
hy.hpisd.org
186streetschool.com
shs.smithvilleisd.org
admin.delreywoods.mpusd.net
res.rlisd.org
delreywoods.mpusd.net
admin.athletics.rsu14.org
admin.alhs.nyc
admin.bethlehemhigh.org
www.mpusd.net
admin.montereyhigh.mpusd.net
admin.ola-ca.com
admin.foothill.mpusd.net
mpusd.net
mpusd.net

Certificate

The complete raw certificate details for mas.mpusd.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308847880331592342074885181303947908897178
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-13 06:06:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-11 06:06:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mas.mpusd.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2142 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.adultlearning.sunrisesd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.aristoiclassical.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ces.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.colonies.sunrisesd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.des.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dtes.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.echs.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.edhs.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fbe.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.goasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hes.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lhs.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lms.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mes.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ndhs.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nms.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rallsisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.resedahs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sgmission.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stmaryschoolwayne.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.thesae.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tphs.monroe.k12.tn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ves.monroe.k12.tn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ans.usd453.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.hpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aristoiclassical.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armstrong.hpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'br.hpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bradfield.hpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charlottechoicecharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'che.lifeschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbs.usd453.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnn.portervilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'els.usd453.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enrollment.usd453.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hartorah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hls.usd453.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpms.hpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.cumberlandacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itchome.lpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jr.glendaleacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kahoiwai.kalo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanu.kalo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'le.lifeschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lhs.lifeschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lhs.usd453.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lphome.lpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpsef.usd453.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malamapokii.kalo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mas.mpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mce.lifeschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mis.hpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mishpms.hpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oce.lifeschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocs.lifeschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rallsisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resedahs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roe.lifeschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ros.lifeschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosebudacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rws.usd453.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryschoolwayne.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesae.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tphs.monroe.k12.tn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpjhs.monroe.k12.tn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universitypark.hpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'up.hpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advantageacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advantageisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advantageisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advantageisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aristoiclassical.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arrowacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arrowacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cleburne.k12.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gesd32.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamilyhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kalo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lazbuddieisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifeschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcgill-toolen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nyos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portervilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rallsisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resedahs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saisd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sgmission.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcathmont.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryschoolwayne.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesae.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesae.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.towandasd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tsd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usd453.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wswaldorf.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000163f7f75e890000040300473045022100cfc293df7bd53c3cbcad201d7a300719e94ba91e6d6ba623db66585382ce7e100220304e96f10773e0ee8c5de1782c61d3a10260f35135c902f9e72571a2487a2086007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000163f7f75e9c0000040300483046022100b2a18635443f3f81a59116cbdf14119edae02f9c107210a8338a447674e40ed8022100cc2b21162d1fe3f8c236e18bf12812799dfd795a8a335984983b1588be567fb8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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