admin.ascensionoakpark.com

Issued by R3

About this certificate

This digital certificate with serial number 04:1e:31:f2:99:92:69:73:29:7a:a0:b3:f9:dc:ca:36:53:ac was issued on by Let's Encrypt.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.ascensionoakpark.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1e:31:f2:99:92:69:73:29:7a:a0:b3:f9:dc:ca:36:53:ac
Serial Number (int): 358724006557110983030623000674748759167916
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): eb:e6:c0:b8:6b:97:97:db:d8:da:f2:f6:d0:9d:2d:fb:02:2b:12:c2
Fingerprint (sha256): 47:2b:43:78:84:b7:5a:b0:4d:ea:1d:58:b4:56:0f:1c:05:b1:fa:dd:9f:44:e9:38:dc:6a:d3:11:62:ff:6b:8c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate admin.ascensionoakpark.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.ascensionoakpark.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.ascensionoakpark.com
admin.bme.zcs.k12.in.us
admin.bridges.fmsd.org
admin.cca.fmsd.org
admin.colegiolospinos.edu.mx
admin.dahl.fmsd.org
admin.eag.zcs.k12.in.us
admin.fmsd.org
admin.franklin.fmsd.org
admin.goldenoakmontessori.org
admin.hellyer.fmsd.org
admin.kennedy.fmsd.org
admin.lairon.fmsd.org
admin.lknc.org
admin.losarboles.fmsd.org
admin.mckinley.fmsd.org
admin.meadows.fmsd.org
admin.mes.mtsd-vt.org
admin.mhs.mtsd-vt.org
admin.mms.mtsd-vt.org
admin.mtsd-vt.org
admin.nstaracademy.org
admin.olmbulldogs.com
admin.olmcath.org
admin.pcschools.org
admin.pve.zcs.k12.in.us
admin.ramblewood.fmsd.org
admin.santee.fmsd.org
admin.school.ascensionoakpark.com
admin.senahigh.com
admin.sge.zcs.k12.in.us
admin.shirakawa.fmsd.org
admin.stonegate.fmsd.org
admin.sylvandale.fmsd.org
admin.tekoacharterschool.org
admin.uni.zcs.k12.in.us
admin.watervlietps.org
admin.windmillsprings.fmsd.org
admin.zcs.k12.in.us
admin.zhs.zcs.k12.in.us
admin.zms.zcs.k12.in.us
admin.zwm.zcs.k12.in.us
ascensionoakpark.com
bme.zcs.k12.in.us
bridges.fmsd.org
cca.fmsd.org
colegiolospinos.edu.mx
dahl.fmsd.org
eag.zcs.k12.in.us
franklin.fmsd.org
goldenoakmontessori.org
hellyer.fmsd.org
kennedy.fmsd.org
lacpacademy.org
lairon.fmsd.org
lknc.org
losarboles.fmsd.org
mckinley.fmsd.org
meadows.fmsd.org
mes.mtsd-vt.org
mhs.mtsd-vt.org
mms.mtsd-vt.org
mtsd-vt.org
nstaracademy.org
olmbulldogs.com
olmcath.org
pcschools.org
pve.zcs.k12.in.us
ramblewood.fmsd.org
santee.fmsd.org
school.ascensionoakpark.com
sge.zcs.k12.in.us
shirakawa.fmsd.org
stonegate.fmsd.org
sylvandale.fmsd.org
tekoacharterschool.org
uni.zcs.k12.in.us
watervlietps.org
windmillsprings.fmsd.org
www.ascensionoakpark.com
www.colegiolospinos.edu.mx
www.fmsd.org
www.goldenoakmontessori.org
www.lacpacademy.org
www.lknc.org
www.mtsd-vt.org
www.nstaracademy.org
www.olmbulldogs.com
www.olmcath.org
www.pcschools.org
www.senahigh.com
www.tekoacharterschool.org
www.watervlietps.org
www.zcs.k12.in.us
zhs.zcs.k12.in.us
zms.zcs.k12.in.us
zwm.zcs.k12.in.us

Other certificates including the domain name ascensionoakpark.com

(limited to 100 certificates)
ascensionoakpark.com
admin.ascensionoakpark.com
ascensionoakpark.com
ascensionoakpark.com
admin.ascensionoakpark.com
admin.bme.zcs.k12.in.us
ascensionoakpark.com
ascensionoakpark.com
www.lacpacademy.org
ascensionoakpark.com
ascensionoakpark.com
admin.mes.mtsd-vt.org
school.ascensionoakpark.com
admin.ascensionoakpark.com
admin.ascensionoakpark.com
lacpacademy.org
admin.ascensionoakpark.com
school.ascensionoakpark.com
admin.ascensionoakpark.com
ascensionoakpark.com
www.ascensionoakpark.com
www.ascensionoakpark.com
admin.school.ascensionoakpark.com
ascensionoakpark.com
dev601.ascensionoakpark.com
admin.ascensionoakpark.com
ascensionoakpark.com
ascensionoakpark.com
admin.ascensionoakpark.com
school.ascensionoakpark.com
ascensionoakpark.com
admin.ascensionoakpark.com
admin.ascensionoakpark.com
ascensionoakpark.com
ascensionoakpark.com
admin.tekoacharterschool.org
ascensionoakpark.com
ascensionoakpark.com
www.ascensionoakpark.com
school.ascensionoakpark.com

Certificate

The complete raw certificate details for admin.ascensionoakpark.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 358724006557110983030623000674748759167916
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-16 10:35:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-16 10:35:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.ascensionoakpark.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2093 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ascensionoakpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bme.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bridges.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cca.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.colegiolospinos.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dahl.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eag.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.franklin.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.goldenoakmontessori.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hellyer.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kennedy.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lairon.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lknc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.losarboles.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mckinley.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.meadows.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mes.mtsd-vt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mhs.mtsd-vt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mms.mtsd-vt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mtsd-vt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nstaracademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.olmbulldogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.olmcath.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pcschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pve.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ramblewood.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.santee.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.school.ascensionoakpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.senahigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sge.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.shirakawa.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stonegate.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sylvandale.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tekoacharterschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.uni.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.watervlietps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.windmillsprings.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.zhs.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.zms.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.zwm.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ascensionoakpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bme.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridges.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cca.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colegiolospinos.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dahl.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eag.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franklin.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldenoakmontessori.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellyer.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kennedy.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacpacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lairon.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lknc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losarboles.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mckinley.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meadows.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mes.mtsd-vt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhs.mtsd-vt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.mtsd-vt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtsd-vt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nstaracademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olmbulldogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olmcath.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pve.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramblewood.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santee.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.ascensionoakpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sge.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shirakawa.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stonegate.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sylvandale.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tekoacharterschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uni.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watervlietps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windmillsprings.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ascensionoakpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegiolospinos.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldenoakmontessori.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lacpacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lknc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtsd-vt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nstaracademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olmbulldogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olmcath.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.senahigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tekoacharterschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.watervlietps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhs.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zms.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zwm.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c2000001766b55c0060000040300463044022008dbf28feba259fc85117a47b2ce54dc783edd0108e2cff613ba1e5398aaf02b022018870deb86a650f219824ff9da98dd70a465642ec4180ed1a327234c64d9d3fb007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001766b55c1da000004030047304502204fe2af8989d39fee5b81eaf7cdfa02ef3272d6b22fcbc57428197ed76a777139022100934be7af988ee08349773e41679add3479107e89886a04b6b1870aa8b7f35384
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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