fa.ausd.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d3:1b:bd:6c:c8:68:13:f3:f6:c5:a9:7c:2e:03:6b:98:f4 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fa.ausd.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d3:1b:bd:6c:c8:68:13:f3:f6:c5:a9:7c:2e:03:6b:98:f4
Serial Number (int): 333173309921969291801566399031538436774132
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0b:d1:a9:40:45:37:0b:50:09:3c:ee:fe:bd:12:72:ad:c6:3b:d5:5b
Fingerprint (sha256): 43:df:6a:12:0c:af:cd:7b:90:5c:6b:f7:69:fd:c2:2f:f9:e2:75:26:ad:28:4b:e1:76:18:6f:5d:e0:5c:1d:b5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fa.ausd.net

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fa.ausd.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.ahs.ausd.net
admin.ausd.net
admin.brookfieldschool.org
admin.bs.ausd.net
admin.cathedral-elpaso.org
admin.cg.ausd.net
admin.da.ausd.net
admin.earlylearningacademy.org
admin.fa.ausd.net
admin.fh.ausd.net
admin.ha.ausd.net
admin.hamiltonbobcats.net
admin.hamiltonelementary.org
admin.harwoodschool.org
admin.hilldaleschool.org
admin.ho.ausd.net
admin.hr.ausd.net
admin.lvwildcats.com
admin.lw.ausd.net
admin.rlc.ausd.net
admin.sfawolves.org
admin.shekinahchristian.org
admin.stmatthewelpaso.org
admin.stthomasmorealhambra.org
admin.upliftusa.org
admin.villamontessoriaz.org
ahs.ausd.net
bbes.bearvalleyusd.org
bbhs.bearvalleyusd.org
bbms.bearvalleyusd.org
ber.ldcsb.ca
bles.bearvalleyusd.org
brookfieldschool.org
bs.ausd.net
cathedral-elpaso.org
cg.ausd.net
cths.bearvalleyusd.org
da.ausd.net
dam.ldcsb.ca
earlylearningacademy.org
el.dibollisd.com
es.hisdbrahmas.org
fa.ausd.net
fal.ldcsb.ca
fh.ausd.net
fves.bearvalleyusd.org
ha.ausd.net
hamiltonbobcats.net
hamiltonelementary.org
harwoodschool.org
hep.ldcsb.ca
hilldale.pinnacleschools.net
hilldaleschool.org
ho.ausd.net
home.lausd.net
hr.ausd.net
hs.dibollisd.com
hs.hisdbrahmas.org
in.dibollisd.com
jh.hisdbrahmas.org
jr.dibollisd.com
k1.csdar.org
kms.csdar.org
ldcsb.ca
lou.ldcsb.ca
lvwildcats.com
lw.ausd.net
nses.bearvalleyusd.org
pll.ldcsb.ca
pr.dibollisd.com
pyron.csdar.org
sfawolves.org
shagirls.org
stmatthewelpaso.org
stthomasmorealhambra.org
tho.ldcsb.ca
upliftusa.org
villamontessoriaz.org
www.bearvalleyusd.org
www.benchmarkschool.net
www.bigbear.k12.ca.us
www.brookfieldschool.org
www.cathedral-elpaso.org
www.dibollisd.com
www.earlylearningacademy.org
www.hamiltonbobcats.net
www.hamiltonelementary.org
www.harwoodschool.org
www.hilldaleschool.org
www.hisdbrahmas.org
www.ldcsb.ca
www.lvwildcats.com
www.sfawolves.org
www.shagirls.org
www.shekinahchristian.org
www.stmatthewelpaso.org
www.stthomasmorealhambra.org
www.upliftusa.org
www.villamontessori.com
www.villamontessoriaz.org

Other certificates including the domain name ausd.net

(limited to 100 certificates)
arcadiainnovationsummit.ausd.net
intranet.ausd.net
admin.rlc.ausd.net
aacs.net
ldcsb.ca
ha.ausd.net
ha.ausd.net
greatarcadiatakeout.ausd.net
*.ausd.net
dam.ldcsb.ca
admin.fa.ausd.net
*.ausd.net
ausd.net
intranet.ausd.net
tweber.ausd.net
asb.ausd.net
arcadiainnovationsummit.ausd.net
admin.ahs.ausd.net
ho.ausd.net
ige.humphreyscountysd.org
arcadiainnovationsummit.ausd.net
asb.ausd.net
admin.ahs.ausd.net
admin.ahs.ausd.net
bvms.bhusd.org
fh.ausd.net
*.ausd.net
breiske.sites.ausd.net
*.ausd.net
admin.bvms.bhusd.org
*.ausd.net
arcadiainnovationsummit.ausd.net
intranet.ausd.net
pll.ldcsb.ca
admin.johnmarshallhs.org
admin.ahs.ausd.net
rlc.ausd.net
admin.ahs.ausd.net
arcadiainnovationsummit.ausd.net
*.ausd.net
*.ausd.net
*.ausd.net
www.icabh.org
arcadiainnovationsummit.ausd.net
aacs.net
admin.foothill.mpusd.net
fa.ausd.net
asb.ausd.net
admin.burroughsms.org
admin.bs.ausd.net
*.ausd.net
applications.ausd.net
www.pilibospreschool.org
admin.bvms.bhusd.org
admin.ahs.ausd.net
admin.delreywoods.mpusd.net
ahs.ausd.net
admin.bvms.bhusd.org
*.ausd.net
*.ausd.net
*.ausd.net
arcadiainnovationsummit.ausd.net
admin.ece.manorisd.net
*.ausd.net
sitesswag.ausd.net
*.ausd.net
admin.ahs.ausd.net
*.ausd.net
*.ausd.net
admin.lsprep.org
admin.delreywoods.mpusd.net
admin.ahs.ausd.net
admin.bvms.bhusd.org
breiske.sites.ausd.net
arcadiainnovationsummit.ausd.net
*.ausd.net
arcadiainnovationsummit.ausd.net
*.ausd.net
*.ausd.net
ahs.ausd.net
subfinder.ausd.net
*.ausd.net
*.ausd.net
arcadiainnovationsummit.ausd.net
apac.ausd.net
*.ausd.net
*.ausd.net
*.ausd.net
barbaravick.org
*.ausd.net
breiske.sites.ausd.net
*.ausd.net
ms358q.org
portal2.ausd.net
www.corecharter.org
admin.arletahigh.net
admin.mhs.bhusd.org
beverlyvista.info
king.mpusd.net
lw.ausd.net

Certificate

The complete raw certificate details for fa.ausd.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333173309921969291801566399031538436774132
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-04 10:41:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-02 10:41:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fa.ausd.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2058 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ahs.ausd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ausd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.brookfieldschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bs.ausd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cathedral-elpaso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cg.ausd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.da.ausd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.earlylearningacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fa.ausd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fh.ausd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ha.ausd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hamiltonbobcats.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hamiltonelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.harwoodschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hilldaleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ho.ausd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hr.ausd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lvwildcats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lw.ausd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rlc.ausd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sfawolves.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.shekinahchristian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stmatthewelpaso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stthomasmorealhambra.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.upliftusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.villamontessoriaz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahs.ausd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbes.bearvalleyusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbhs.bearvalleyusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbms.bearvalleyusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ber.ldcsb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bles.bearvalleyusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brookfieldschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bs.ausd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cathedral-elpaso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cg.ausd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cths.bearvalleyusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'da.ausd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dam.ldcsb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earlylearningacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'el.dibollisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.hisdbrahmas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fa.ausd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fal.ldcsb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fh.ausd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fves.bearvalleyusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ha.ausd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamiltonbobcats.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamiltonelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harwoodschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hep.ldcsb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hilldale.pinnacleschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hilldaleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ho.ausd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.lausd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hr.ausd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.dibollisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.hisdbrahmas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in.dibollisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jh.hisdbrahmas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jr.dibollisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k1.csdar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kms.csdar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldcsb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lou.ldcsb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lvwildcats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lw.ausd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nses.bearvalleyusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pll.ldcsb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.dibollisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pyron.csdar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfawolves.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shagirls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmatthewelpaso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stthomasmorealhambra.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tho.ldcsb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upliftusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'villamontessoriaz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bearvalleyusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benchmarkschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigbear.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brookfieldschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cathedral-elpaso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dibollisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.earlylearningacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hamiltonbobcats.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hamiltonelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harwoodschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hilldaleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hisdbrahmas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ldcsb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvwildcats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfawolves.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shagirls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shekinahchristian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmatthewelpaso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stthomasmorealhambra.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upliftusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.villamontessori.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.villamontessoriaz.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e3638aa4c0000040300463044022038c2775aa8f3e7c9351126fca9a614b239389dcc1cfdfe2fc585f462926469a902205c44e5f906c1709f661d1f30a3733b28286fcccf3878b145c6dcad012c10ca9c0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e3638aa900000040300473045022100e546cdc4cfb7d8294aa5a43061983290ade6cccaa04b76fc52dcba4c063f637b022023b6c42f4a58ac3bb4419faf14a8cd5d21521cb9c87e14d2556e89da30f5a372
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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