pdhs.rbusd.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f7:f9:de:81:91:29:88:e3:bd:5e:5d:56:9f:4a:12:3d:c1 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pdhs.rbusd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f7:f9:de:81:91:29:88:e3:bd:5e:5d:56:9f:4a:12:3d:c1
Serial Number (int): 345718735513537356009830190576679502626241
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c9:81:ed:e3:20:0f:7e:37:fa:c3:69:66:a0:5d:b4:f6:cd:d1:df:be
Fingerprint (sha256): 45:02:72:2c:b9:2e:85:6a:ff:bf:49:e6:64:63:89:4a:22:97:3e:26:17:18:2a:4a:a2:91:86:aa:09:a7:d6:d5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate pdhs.rbusd.org

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pdhs.rbusd.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

activities.madrid.k12.ia.us
admin.activities.madrid.k12.ia.us
admin.cornellsd.org
admin.el.madrid.k12.ia.us
admin.es.cornellsd.org
admin.galileogalilei.edu.mx
admin.galtadultschool.com
admin.gatewayk12.org
admin.hs.cornellsd.org
admin.ideapcs.org
admin.jrsr.madrid.k12.ia.us
admin.madrid.k12.ia.us
admin.palihigh.org
admin.pickettk12.net
admin.ranchitoavees.org
admin.stmarysspokane.com
admin.wearelibertyranch.com
admin.youngsvilleacademy.org
el.madrid.k12.ia.us
es.cornell.k12.pa.us
es.cornellsd.org
galileogalilei.edu.mx
hs.cornell.k12.pa.us
hs.cornellsd.org
jrsr.madrid.k12.ia.us
parish.stmarysspokane.com
parish.stmarysspokane.org
pdhs.rbusd.org
ranchitoavees.org
school.stmarysspokane.com
school.stmarysspokane.org
stmarysspokane.com
stmarysspokane.org
www.admin.grupograven.com.mx
www.athlosreno.org
www.cornell.k12.pa.us
www.cornellsd.org
www.galileogalilei.edu.mx
www.galtadultschool.com
www.gatewayk12.org
www.grupograven.com.mx
www.ideapcs.org
www.madrid.k12.ia.us
www.palihigh.org
www.pickettk12.net
www.ranchitoavees.org
www.stmarysspokane.com
www.stmarysspokane.org
www.wearelibertyranch.com
www.youngsvilleacademy.org
youngsvilleacademy.org

Other certificates including the domain name rbusd.org

(limited to 100 certificates)
rbusd.org
www.rbusd.org
rshs.rbusd.org
*.rbusd.org
washington.rbusd.org
altavista.rbusd.org
*.rbusd.org
admin.es.hillcity.k12.sd.us
admin.cdc.rbusd.org
rbusd.org
ic.rbusd.org
adamsmiddle.org
www.ps52si.org
admin.rbusd.org
www.greengates.edu.mx
adamsmiddle.org
adamsmiddle.org
admin.altavista.rbusd.org
adamsmiddle.org
admin.tulita.rbusd.org
washington.rbusd.org
tulita.rbusd.org
portal.rbusd.org
ic.rbusd.org
adamsmiddle.org
pdhs.rbusd.org
madison.rbusd.org
madison.rbusd.org
adamsmiddle.org
adamsmiddle.org
ces.lowndes.k12.ms.us
tulita.rbusd.org
sssq.org
birney.rbusd.org
admin.cse.gatewayk12.org
ic.rbusd.org
adamsmiddle.org
rbusd.org
washington.rbusd.org
adamsmiddle.org
*.rbusd.org
admin.sssq.org
ic.rbusd.org
portal.rbusd.org
ic.rbusd.org
altavista.rbusd.org
rbusd.org
tulita.rbusd.org
beryl.rbusd.org
southbayadult.org
beryl.rbusd.org
jefferson.rbusd.org
admin.beryl.rbusd.org
admin.ces.cliftonisd.org
ic.rbusd.org
rbusd.org
adamsmiddle.org
bcsdk12.org
birney.rbusd.org
rbusd.org
ic.rbusd.org
rbusd.org
www.mpusd.k12.ca.us
lms.rbusd.org
altavista.rbusd.org
www.markedtreeschools.com
rshs.rbusd.org
admin.oahornets.org
adamsmiddle.org
adamsmiddle.org
lms.rbusd.org
wpadmin.ces.lowndes.k12.ms.us
admin.altavista.rbusd.org
madison.rbusd.org
admin.dss.desotoschools.com
jefferson.rbusd.org
admin.rshs.rbusd.org
adamsmiddle.org
rbusd.org
jefferson.rbusd.org
www.oahornets.org
adamsmiddle.org
birney.rbusd.org
beryl.rbusd.org
adamsmiddle.org
www.bpsd.us
adamsmiddle.org
tulita.rbusd.org
adamsmiddle.org
rbusd.org
adamsmiddle.org
rbusd.org
adamsmiddle.org
www.rbusd.org
admin.gulfstreamschool.org
www.wagnerwildcats.org
adamsmiddle.org
cdc.rbusd.org
madison.rbusd.org
www.rbusd.org

Certificate

The complete raw certificate details for pdhs.rbusd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345718735513537356009830190576679502626241
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-22 01:04:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-20 01:04:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pdhs.rbusd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1211 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activities.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.activities.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cornellsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.el.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.es.cornellsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.galileogalilei.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.galtadultschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hs.cornellsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ideapcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jrsr.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.palihigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pickettk12.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ranchitoavees.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stmarysspokane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wearelibertyranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.youngsvilleacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'el.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.cornell.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.cornellsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galileogalilei.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.cornell.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.cornellsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jrsr.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parish.stmarysspokane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parish.stmarysspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdhs.rbusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranchitoavees.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.stmarysspokane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.stmarysspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysspokane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.admin.grupograven.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athlosreno.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornell.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornellsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.galileogalilei.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.galtadultschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grupograven.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ideapcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.palihigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pickettk12.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ranchitoavees.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysspokane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wearelibertyranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youngsvilleacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youngsvilleacademy.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016add48d8a9000004030047304502210095cb6bb1d6707a2cdfb17f32667c193f1421a3c42a2489bb25bc0e21dd6a13bb02201d86d84be68674f5c84be7b074d2ecdfe98123f623f71ce3163c208a8a87ebed007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016add48daa900000403004830460221009854070a7d096e758240657e084e29972e65848b2bf4a490a934eee1f7ad2ba6022100ace281610411ec1bfc5b469b461dccf30e28c6b61c06557b122ff60b3a962724
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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