admin.ascensionoakpark.com

Issued by R3

About this certificate

This digital certificate with serial number 04:92:4e:46:31:9d:eb:ae:73:a2:3f:33:2e:3b:5b:18:3d:53 was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.ascensionoakpark.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:92:4e:46:31:9d:eb:ae:73:a2:3f:33:2e:3b:5b:18:3d:53
Serial Number (int): 398234413548299155098305837697272970231123
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): eb:3b:c6:5e:4e:97:cd:48:91:c1:b2:fb:70:77:9b:e6:25:86:2f:24
Fingerprint (sha256): 4d:87:8a:bb:93:d6:5d:a2:df:c1:c3:af:1f:00:c9:a1:4d:54:7d:3b:05:d3:42:a4:5c:6f:62:58:99:4e:8f:db

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate admin.ascensionoakpark.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.ascensionoakpark.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.ascensionoakpark.com
admin.bme.zcs.k12.in.us
admin.bridges.fmsd.org
admin.cca.fmsd.org
admin.colegiolospinos.edu.mx
admin.dahl.fmsd.org
admin.eag.zcs.k12.in.us
admin.fmsd.org
admin.franklin.fmsd.org
admin.goldenoakmontessori.org
admin.hellyer.fmsd.org
admin.kennedy.fmsd.org
admin.lairon.fmsd.org
admin.lknc.org
admin.losarboles.fmsd.org
admin.mckinley.fmsd.org
admin.meadows.fmsd.org
admin.mes.mtsd-vt.org
admin.mhs.mtsd-vt.org
admin.mms.mtsd-vt.org
admin.mtsd-vt.org
admin.nstaracademy.org
admin.olmbulldogs.com
admin.olmcath.org
admin.pcschools.org
admin.pve.zcs.k12.in.us
admin.ramblewood.fmsd.org
admin.santee.fmsd.org
admin.school.ascensionoakpark.com
admin.senahigh.com
admin.sge.zcs.k12.in.us
admin.shirakawa.fmsd.org
admin.stonegate.fmsd.org
admin.sylvandale.fmsd.org
admin.tekoacharterschool.org
admin.uni.zcs.k12.in.us
admin.windmillsprings.fmsd.org
admin.zcs.k12.in.us
admin.zhs.zcs.k12.in.us
admin.zms.zcs.k12.in.us
admin.zwm.zcs.k12.in.us
ascensionoakpark.com
bme.zcs.k12.in.us
bridges.fmsd.org
cca.fmsd.org
colegiolospinos.edu.mx
dahl.fmsd.org
eag.zcs.k12.in.us
franklin.fmsd.org
goldenoakmontessori.org
hellyer.fmsd.org
kennedy.fmsd.org
lacpacademy.org
lairon.fmsd.org
lknc.org
losarboles.fmsd.org
mckinley.fmsd.org
meadows.fmsd.org
mes.mtsd-vt.org
mhs.mtsd-vt.org
mms.mtsd-vt.org
mtsd-vt.org
nstaracademy.org
olmbulldogs.com
olmcath.org
pcschools.org
pve.zcs.k12.in.us
ramblewood.fmsd.org
santee.fmsd.org
school.ascensionoakpark.com
sge.zcs.k12.in.us
shirakawa.fmsd.org
stonegate.fmsd.org
sylvandale.fmsd.org
tekoacharterschool.org
uni.zcs.k12.in.us
windmillsprings.fmsd.org
www.ascensionoakpark.com
www.colegiolospinos.edu.mx
www.fmsd.org
www.goldenoakmontessori.org
www.lacpacademy.org
www.lknc.org
www.mtsd-vt.org
www.nstaracademy.org
www.olmbulldogs.com
www.olmcath.org
www.pcschools.org
www.senahigh.com
www.tekoacharterschool.org
www.zcs.k12.in.us
zhs.zcs.k12.in.us
zms.zcs.k12.in.us
zwm.zcs.k12.in.us

Other certificates including the domain name ascensionoakpark.com

(limited to 100 certificates)
ascensionoakpark.com
admin.ascensionoakpark.com
ascensionoakpark.com
ascensionoakpark.com
admin.ascensionoakpark.com
admin.bme.zcs.k12.in.us
ascensionoakpark.com
ascensionoakpark.com
www.lacpacademy.org
ascensionoakpark.com
ascensionoakpark.com
admin.mes.mtsd-vt.org
school.ascensionoakpark.com
admin.ascensionoakpark.com
admin.ascensionoakpark.com
lacpacademy.org
admin.ascensionoakpark.com
school.ascensionoakpark.com
admin.ascensionoakpark.com
ascensionoakpark.com
www.ascensionoakpark.com
www.ascensionoakpark.com
admin.school.ascensionoakpark.com
ascensionoakpark.com
dev601.ascensionoakpark.com
admin.ascensionoakpark.com
ascensionoakpark.com
ascensionoakpark.com
admin.ascensionoakpark.com
school.ascensionoakpark.com
ascensionoakpark.com
admin.ascensionoakpark.com
admin.ascensionoakpark.com
ascensionoakpark.com
ascensionoakpark.com
admin.tekoacharterschool.org
ascensionoakpark.com
ascensionoakpark.com
www.ascensionoakpark.com
school.ascensionoakpark.com

Certificate

The complete raw certificate details for admin.ascensionoakpark.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 398234413548299155098305837697272970231123
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-08 17:54:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-06 17:54:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.ascensionoakpark.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2029 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ascensionoakpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bme.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bridges.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cca.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.colegiolospinos.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dahl.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eag.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.franklin.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.goldenoakmontessori.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hellyer.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kennedy.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lairon.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lknc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.losarboles.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mckinley.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.meadows.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mes.mtsd-vt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mhs.mtsd-vt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mms.mtsd-vt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mtsd-vt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nstaracademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.olmbulldogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.olmcath.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pcschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pve.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ramblewood.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.santee.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.school.ascensionoakpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.senahigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sge.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.shirakawa.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stonegate.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sylvandale.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tekoacharterschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.uni.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.windmillsprings.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.zhs.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.zms.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.zwm.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ascensionoakpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bme.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridges.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cca.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colegiolospinos.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dahl.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eag.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franklin.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldenoakmontessori.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellyer.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kennedy.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacpacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lairon.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lknc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losarboles.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mckinley.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meadows.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mes.mtsd-vt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhs.mtsd-vt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.mtsd-vt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtsd-vt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nstaracademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olmbulldogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olmcath.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pve.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramblewood.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santee.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.ascensionoakpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sge.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shirakawa.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stonegate.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sylvandale.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tekoacharterschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uni.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windmillsprings.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ascensionoakpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegiolospinos.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldenoakmontessori.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lacpacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lknc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtsd-vt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nstaracademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olmbulldogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olmcath.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.senahigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tekoacharterschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhs.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zms.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zwm.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017c614222d1000004030047304502210088384762e1d47820245ef69b287e5b72351c342d48c0247c7a2ae4e3df1a0f40022005af54a8352b5b62fd584608f576b89ce7eadb9cc51e38847f4e7baa3b294c060077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017c614224280000040300483046022100e438b77461c604ad227cdab4e48fc27a5b7358c34720e135abe546ea26d288be022100cdbff35b9bfc864bf67e4ef46eef947cfe02781eec0b7b4ed0f08bf0749459fe
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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