preschool.castaicusd.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:de:a4:65:8a:34:a0:55:c8:b8:a9:2c:e0:0b:8d:91:c2:5b was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=preschool.castaicusd.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:de:a4:65:8a:34:a0:55:c8:b8:a9:2c:e0:0b:8d:91:c2:5b
Serial Number (int): 337098063868162528112305601657649744691803
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bc:eb:84:6e:1f:68:e2:77:07:04:85:f4:93:a2:b8:ad:1a:4e:d7:06
Fingerprint (sha256): 43:ab:3e:79:66:c7:8b:d6:b8:29:b5:91:ce:2a:fd:17:30:e8:38:c0:c3:f0:ab:ec:43:cd:0b:fa:bb:80:1d:07

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate preschool.castaicusd.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for preschool.castaicusd.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.aeropuerto.ipefh.edu.mx
admin.bennett.frenship.net
admin.castaicusd.com
admin.ces.castaicusd.com
admin.charter.ncsd.school
admin.cms.castaicusd.com
admin.colegiobosquereal.edu.mx
admin.colegioterranova.edu.mx
admin.csx211.org
admin.cv.frenship.net
admin.deercreek.ncsd.school
admin.fhs.frenship.net
admin.fms.frenship.net
admin.gilbertacademy.org
admin.gilmore.ucboe.us
admin.hms.frenship.net
admin.ipefh.edu.mx
admin.legacy.frenship.net
admin.los.castaicusd.com
admin.metepec.ipefh.edu.mx
admin.ncsd.school
admin.newnasa.org
admin.nhs.castaicusd.com
admin.nr.frenship.net
admin.or.frenship.net
admin.preschool.castaicusd.com
admin.rec.frenship.net
admin.sevenhills.ncsd.school
admin.toluca.ipefh.edu.mx
admin.tvms.frenship.net
admin.usd205.com
admin.wb.frenship.net
admin.ww.frenship.net
aeropuerto.ipefh.edu.mx
bennett.frenship.net
castaicusd.com
ces.castaicusd.com
charter.ncsd.school
cms.castaicusd.com
colegiobosquereal.edu.mx
colegioterranova.edu.mx
csx211.org
cv.frenship.net
deercreek.ncsd.school
dietz.crandall-isd.net
elementary.montourschools.com
faa.pamlico.k12.nc.us
fhs.frenship.net
fms.frenship.net
gilbertacademy.org
gilmore.ucboe.us
hms.frenship.net
ipefh.edu.mx
legacy.frenship.net
los.castaicusd.com
metepec.ipefh.edu.mx
ncsd.school
nes.norris.k12.ca.us
newnasa.org
nhs.castaicusd.com
nms.norris.k12.ca.us
norris.k12.ca.us
nr.frenship.net
ode.norris.k12.ca.us
or.frenship.net
pamlico.k12.nc.us
pchs.pamlico.k12.nc.us
pcms.pamlico.k12.nc.us
pcps.pamlico.k12.nc.us
preschool.castaicusd.com
rec.frenship.net
sevenhills.ncsd.school
stemhigh.org
stemk12.org
toluca.ipefh.edu.mx
tvms.frenship.net
uh.frenship.net
ves.norris.k12.ca.us
vvhs.info
wb.frenship.net
wbe.norris.k12.ca.us
ww.frenship.net
www.castaicusd.com
www.colegiobosquereal.edu.mx
www.colegioterranova.edu.mx
www.csx211.org
www.gilbertacademy.org
www.loyola-nyc.org
www.ncsd.school
www.newnasa.org
www.norris.k12.ca.us
www.stemhigh.org
www.stemk12.org
www.usd205.com

Other certificates including the domain name castaicusd.com

(limited to 100 certificates)
admin.ninth.frenship.net
admin.aeropuerto.ipefh.edu.mx
schoolforthedeaf.wvsdb2.state.k12.wv.us
admin.aeropuerto.ipefh.edu.mx
admin.ces.castaicusd.com
nhs.castaicusd.com
admin.castaicusd.com
cms.castaicusd.com
www.bpbraves.net
castaicusd.com
phs.pusdatsa.org
admin.aeropuerto.ipefh.edu.mx
preschool.castaicusd.com
admin.frenship.net
castaicusd.com
admin.los.castaicusd.com
hyer.hpisd.org
castaicusd.com
burkett.montourschools.com
admin.ces.castaicusd.com
*.castaicusd.com
admin.bennett.frenship.net
admin.stemk12.org
preschool.castaicusd.com
admin.aeropuerto.ipefh.edu.mx
admin.aeropuerto.ipefh.edu.mx
admin.multisensoryschool.wvsdb2.state.k12.wv.us
castaicusd.com
castaicusd.com
castaicusd.com
admin.aeropuerto.ipefh.edu.mx
www.montourschools.com
admin.cms.castaicusd.com
admin.bennett.frenship.net
admin.bennett.frenship.net
admin.preschool.castaicusd.com
admin.cfn.edu.mx
castaicusd.com
admin.bennett.frenship.net
admin.nhs.castaicusd.com
admin.preschool.castaicusd.com
castaicusd.com
admin.bennett.frenship.net
admin.bennett.frenship.net
admin.castaicusd.com
preschool.castaicusd.com
admin.aeropuerto.ipefh.edu.mx
admin.schoolforthedeaf.wvsdb2.state.k12.wv.us
admin.bennett.frenship.net
admin.bennett.frenship.net
los.castaicusd.com
admin.bennett.frenship.net
ces.castaicusd.com
admin.bennett.frenship.net
admin.aeropuerto.ipefh.edu.mx
admin.cms.castaicusd.com
castaicusd.com
castaicusd.com
admin.cms.castaicusd.com
*.castaicusd.com
los.castaicusd.com

Certificate

The complete raw certificate details for preschool.castaicusd.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337098063868162528112305601657649744691803
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-22 01:02:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-20 01:02:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'preschool.castaicusd.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2048 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.aeropuerto.ipefh.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bennett.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.castaicusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ces.castaicusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.charter.ncsd.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cms.castaicusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.colegiobosquereal.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.colegioterranova.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.csx211.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cv.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.deercreek.ncsd.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fhs.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fms.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gilbertacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gilmore.ucboe.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hms.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ipefh.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.legacy.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.los.castaicusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.metepec.ipefh.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ncsd.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.newnasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nhs.castaicusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nr.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.or.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.preschool.castaicusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rec.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sevenhills.ncsd.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.toluca.ipefh.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tvms.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.usd205.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wb.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ww.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeropuerto.ipefh.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bennett.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castaicusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ces.castaicusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charter.ncsd.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.castaicusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colegiobosquereal.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colegioterranova.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csx211.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cv.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deercreek.ncsd.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dietz.crandall-isd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elementary.montourschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faa.pamlico.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fhs.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fms.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gilbertacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gilmore.ucboe.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hms.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipefh.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'los.castaicusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metepec.ipefh.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncsd.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nes.norris.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newnasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhs.castaicusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nms.norris.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norris.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nr.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ode.norris.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'or.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pamlico.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pchs.pamlico.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcms.pamlico.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcps.pamlico.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preschool.castaicusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rec.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sevenhills.ncsd.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toluca.ipefh.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvms.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uh.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ves.norris.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vvhs.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wb.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wbe.norris.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.castaicusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegiobosquereal.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegioterranova.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csx211.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gilbertacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loyola-nyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncsd.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newnasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norris.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usd205.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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