www.lusd.k12.ca.us

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6d:19:ef:0a:f9:c1:74:b9:73:7a:dc:74:04:06:ec:42:da was issued on by Let's Encrypt.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.lusd.k12.ca.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6d:19:ef:0a:f9:c1:74:b9:73:7a:dc:74:04:06:ec:42:da
Serial Number (int): 298462107671118625398632491856192630178522
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): da:f3:a6:e5:f6:22:62:84:6c:c4:97:ce:54:0b:39:21:1d:10:66:3f
Fingerprint (sha256): 4d:cc:fe:29:61:ce:7c:06:77:11:16:33:9d:57:2f:12:72:4e:5a:84:8a:0b:fd:cf:1d:27:8a:26:6b:4a:22:61

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.lusd.k12.ca.us

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lusd.k12.ca.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.adulteducation.pleasantonusd.net
admin.assumptionschool-sl.org
admin.breed.exteraschools.org
admin.carlossantanaarts.org
admin.chamlian.org
admin.cottageschool.org
admin.eastman.exteraschools.org
admin.exteraschools.org
admin.holyangelsarcadia.net
admin.hsmp.org
admin.ichspride.org
admin.lorena.exteraschools.org
admin.ranchopicojuniorhigh.org
admin.res.rfisd.net
admin.rfisd.net
admin.rhs.rfisd.net
admin.rms.rfisd.net
admin.saintpaulcatholic.org
admin.second.exteraschools.org
admin.shaeagles.org
admin.trinitystelementary.com
admin.wardhigh.org
adulteducation.pleasantonusd.net
alisal.pleasantonusd.net
amador.pleasantonusd.net
assumptionschool-sl.org
barrington.nclusd.k12.ca.us
bonita.nclusd.k12.ca.us
breed.exteraschools.org
carlossantanaarts.org
chamlian.org
donlon.pleasantonusd.net
eastman.exteraschools.org
edlioschooldistrict.org
elem.cumberlandacademy.com
es.rockdaleisd.net
fairlands.pleasantonusd.net
harvest.pleasantonusd.net
hearst.pleasantonusd.net
holyangelsarcadia.net
hs.cumberlandacademy.com
hs.rockdaleisd.net
hsmp.org
hunt.nclusd.k12.ca.us
ichspride.org
is.rockdaleisd.net
jh.rockdaleisd.net
lorena.exteraschools.org
lydiksen.pleasantonusd.net
mohr.pleasantonusd.net
ms.cumberlandacademy.com
orestimba.nclusd.k12.ca.us
pleasantonmiddle.pleasantonusd.net
ranchopicojuniorhigh.com
ranchopicojuniorhigh.net
ranchopicojuniorhigh.org
res.rfisd.net
rfisd.net
rhs.rfisd.net
rms.rfisd.net
saintpaulcatholic.org
second.exteraschools.org
shaeagles.org
smmschool.net
valleyview.pleasantonusd.net
vintagehills.pleasantonusd.net
vonrenner.nclusd.k12.ca.us
walnutgrove.pleasantonusd.net
wardhigh.org
www.assumptionschool-sl.org
www.bgh4.k12.wy.us
www.carlossantanaarts.org
www.chamlian.org
www.cumberlandacademy.com
www.glcps.org
www.holyangelsarcadia.net
www.hsmp.org
www.ichspride.org
www.lusd.k12.ca.us
www.pleasantonusd.net
www.ranchopicojuniorhigh.com
www.ranchopicojuniorhigh.net
www.ranchopicojuniorhigh.org
www.rfisd.net
www.rockdaleisd.net
www.saintpaulcatholic.org
www.shaeagles.org
www.smmschool.net
www.trinitystelementary.com
www.wardhigh.org
yolo.nclusd.k12.ca.us

Other certificates including the domain name lusd.k12.ca.us

(limited to 100 certificates)
sequoiasamurai.com
bps.bayfield.k12.co.us
admin.belmonthighschool.org
lusd.k12.ca.us
lusd-wlc-1.lusd.k12.ca.us
admin.adulteducation.pleasantonusd.net
lusd.k12.ca.us
admin.belmonthighschool.org
lusd.k12.ca.us
admin.belmonthighschool.org
admin.belmonthighschool.org
www.freeman.flintschools.org
admin.adulteducation.pleasantonusd.net
admin.belmonthighschool.org
admin.belmonthighschool.org
lusd.k12.ca.us
admin.belmonthighschool.org
exteraschools.org
www.lusd.k12.ca.us
lusd.k12.ca.us
admin.belmonthighschool.org
lusd.k12.ca.us
www.kvilleps.org
lusd.k12.ca.us
admin.belmonthighschool.org
www.exteraschools.org
lusd.k12.ca.us
ninth.frenship.us
admin.corey.bpsd.k12.ca.us
admin.jewishacademyorlando.org
mail.lusd.k12.ca.us
admin.dtm.flintschools.org
bhs.bayfield.k12.co.us
lusd.k12.ca.us
lusd.k12.ca.us
admin.brownell.flintschools.org
bis.bayfield.k12.co.us
admin.belmonthighschool.org
lusd.k12.ca.us
admin.belmonthighschool.org
lusd.k12.ca.us
usf.com.mx
trinitystelementary.com
lusd.k12.ca.us
admin.adulteducation.pleasantonusd.net
lusd.k12.ca.us
www.forthamiltononline.org
lusd.k12.ca.us
lusd-wlc-1.lusd.k12.ca.us
admin.liholiho.org
lusd.k12.ca.us
lusd.k12.ca.us

Certificate

The complete raw certificate details for www.lusd.k12.ca.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIO2DCCDcCgAwIBAgISA20Z7wr5wXS5c3rcdAQG7ELaMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MjkwOTQ3MzVaFw0x
OTA5MjcwOTQ3MzVaMB0xGzAZBgNVBAMTEnd3dy5sdXNkLmsxMi5jYS51czCCAiIw
DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK2shenuZt6MUG0x2/ts+632FQpf
qYeZvBSSThIBLbBZ4fODBV4SJe7hDrakpTCrEdtnc3DQLStRuaVd0eEQYJ9fEUx5
0w/X0tuyccnsn5V33VF+1cOGhq8jH/DBPmRoaGkD9F2Ad1wxq5kBd2f4dnukrWoL
mzvqVcBcxvFQwHZ2obFK2x66Unn4ms4soYXj5C980IPzpmkJCu8AISTvHpds9++S
w3dlSMK3VkD9iY1fPdmHfrSGTpwJNo8g5b9zGFylxopQcq0JVmdQHYzin0YmNHJB
brvw2JLr5DSptn981Gr8N7JQro2Vh5CB2TaWjbcX7K6SLVCKuU7u823pPzEfyTEf
Z3HlsmdjLp3fkm4Hy3/esD4VQWq67KdRzUfiJKMra+TzDUQc8Fswb0w/Be6unJFG
yIKXqO7LZ+29CDVz2IDU+8xV/1DQnFo/mmifirvDCleBBBLmor41vz/k5uuF41zY
z/RdVvPubZXCYCYRlMhMpQlLQEaoT6I1M0J64dYlEjETSNpYieCLncf6N0OBNsOg
LnfT2MldOaRYDHUi2DURkE8kEUmkm0Nx5n2Yv6UIxclKIYgO/4dKJlJgiA4kFRt9
Hh4W9ziD92yYrF2SuKhK5+WQ5inVIDQtxkvssK0wAWI9DfhFJ6IZFIuopA+JnuqO
fLKvyEFZsnptTPxNAgMBAAGjggrjMIIK3zAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FC9ryE1sLC4y8gAg/y1NbFr8brq7MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF
Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au
aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu
aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wggiWBgNVHREEggiNMIIIiYImYWRtaW4u
YWR1bHRlZHVjYXRpb24ucGxlYXNhbnRvbnVzZC5uZXSCHWFkbWluLmFzc3VtcHRp
b25zY2hvb2wtc2wub3Jngh1hZG1pbi5icmVlZC5leHRlcmFzY2hvb2xzLm9yZ4Ib
YWRtaW4uY2FybG9zc2FudGFuYWFydHMub3JnghJhZG1pbi5jaGFtbGlhbi5vcmeC
F2FkbWluLmNvdHRhZ2VzY2hvb2wub3Jngh9hZG1pbi5lYXN0bWFuLmV4dGVyYXNj
aG9vbHMub3JnghdhZG1pbi5leHRlcmFzY2hvb2xzLm9yZ4IbYWRtaW4uaG9seWFu
Z2Vsc2FyY2FkaWEubmV0gg5hZG1pbi5oc21wLm9yZ4ITYWRtaW4uaWNoc3ByaWRl
Lm9yZ4IeYWRtaW4ubG9yZW5hLmV4dGVyYXNjaG9vbHMub3Jngh5hZG1pbi5yYW5j
aG9waWNvanVuaW9yaGlnaC5vcmeCE2FkbWluLnJlcy5yZmlzZC5uZXSCD2FkbWlu
LnJmaXNkLm5ldIITYWRtaW4ucmhzLnJmaXNkLm5ldIITYWRtaW4ucm1zLnJmaXNk
Lm5ldIIbYWRtaW4uc2FpbnRwYXVsY2F0aG9saWMub3Jngh5hZG1pbi5zZWNvbmQu
ZXh0ZXJhc2Nob29scy5vcmeCE2FkbWluLnNoYWVhZ2xlcy5vcmeCHWFkbWluLnRy
aW5pdHlzdGVsZW1lbnRhcnkuY29tghJhZG1pbi53YXJkaGlnaC5vcmeCIGFkdWx0
ZWR1Y2F0aW9uLnBsZWFzYW50b251c2QubmV0ghhhbGlzYWwucGxlYXNhbnRvbnVz
ZC5uZXSCGGFtYWRvci5wbGVhc2FudG9udXNkLm5ldIIXYXNzdW1wdGlvbnNjaG9v
bC1zbC5vcmeCG2JhcnJpbmd0b24ubmNsdXNkLmsxMi5jYS51c4IXYm9uaXRhLm5j
bHVzZC5rMTIuY2EudXOCF2JyZWVkLmV4dGVyYXNjaG9vbHMub3JnghVjYXJsb3Nz
YW50YW5hYXJ0cy5vcmeCDGNoYW1saWFuLm9yZ4IYZG9ubG9uLnBsZWFzYW50b251
c2QubmV0ghllYXN0bWFuLmV4dGVyYXNjaG9vbHMub3JnghdlZGxpb3NjaG9vbGRp
c3RyaWN0Lm9yZ4IaZWxlbS5jdW1iZXJsYW5kYWNhZGVteS5jb22CEmVzLnJvY2tk
YWxlaXNkLm5ldIIbZmFpcmxhbmRzLnBsZWFzYW50b251c2QubmV0ghloYXJ2ZXN0
LnBsZWFzYW50b251c2QubmV0ghhoZWFyc3QucGxlYXNhbnRvbnVzZC5uZXSCFWhv
bHlhbmdlbHNhcmNhZGlhLm5ldIIYaHMuY3VtYmVybGFuZGFjYWRlbXkuY29tghJo
cy5yb2NrZGFsZWlzZC5uZXSCCGhzbXAub3JnghVodW50Lm5jbHVzZC5rMTIuY2Eu
dXOCDWljaHNwcmlkZS5vcmeCEmlzLnJvY2tkYWxlaXNkLm5ldIISamgucm9ja2Rh
bGVpc2QubmV0ghhsb3JlbmEuZXh0ZXJhc2Nob29scy5vcmeCGmx5ZGlrc2VuLnBs
ZWFzYW50b251c2QubmV0ghZtb2hyLnBsZWFzYW50b251c2QubmV0ghhtcy5jdW1i
ZXJsYW5kYWNhZGVteS5jb22CGm9yZXN0aW1iYS5uY2x1c2QuazEyLmNhLnVzgiJw
bGVhc2FudG9ubWlkZGxlLnBsZWFzYW50b251c2QubmV0ghhyYW5jaG9waWNvanVu
aW9yaGlnaC5jb22CGHJhbmNob3BpY29qdW5pb3JoaWdoLm5ldIIYcmFuY2hvcGlj
b2p1bmlvcmhpZ2gub3Jngg1yZXMucmZpc2QubmV0gglyZmlzZC5uZXSCDXJocy5y
ZmlzZC5uZXSCDXJtcy5yZmlzZC5uZXSCFXNhaW50cGF1bGNhdGhvbGljLm9yZ4IY
c2Vjb25kLmV4dGVyYXNjaG9vbHMub3Jngg1zaGFlYWdsZXMub3Jngg1zbW1zY2hv
b2wubmV0ghx2YWxsZXl2aWV3LnBsZWFzYW50b251c2QubmV0gh52aW50YWdlaGls
bHMucGxlYXNhbnRvbnVzZC5uZXSCGnZvbnJlbm5lci5uY2x1c2QuazEyLmNhLnVz
gh13YWxudXRncm92ZS5wbGVhc2FudG9udXNkLm5ldIIMd2FyZGhpZ2gub3Jnght3
d3cuYXNzdW1wdGlvbnNjaG9vbC1zbC5vcmeCEnd3dy5iZ2g0LmsxMi53eS51c4IZ
d3d3LmNhcmxvc3NhbnRhbmFhcnRzLm9yZ4IQd3d3LmNoYW1saWFuLm9yZ4IZd3d3
LmN1bWJlcmxhbmRhY2FkZW15LmNvbYINd3d3LmdsY3BzLm9yZ4IZd3d3LmhvbHlh
bmdlbHNhcmNhZGlhLm5ldIIMd3d3LmhzbXAub3JnghF3d3cuaWNoc3ByaWRlLm9y
Z4ISd3d3Lmx1c2QuazEyLmNhLnVzghV3d3cucGxlYXNhbnRvbnVzZC5uZXSCHHd3
dy5yYW5jaG9waWNvanVuaW9yaGlnaC5jb22CHHd3dy5yYW5jaG9waWNvanVuaW9y
aGlnaC5uZXSCHHd3dy5yYW5jaG9waWNvanVuaW9yaGlnaC5vcmeCDXd3dy5yZmlz
ZC5uZXSCE3d3dy5yb2NrZGFsZWlzZC5uZXSCGXd3dy5zYWludHBhdWxjYXRob2xp
Yy5vcmeCEXd3dy5zaGFlYWdsZXMub3JnghF3d3cuc21tc2Nob29sLm5ldIIbd3d3
LnRyaW5pdHlzdGVsZW1lbnRhcnkuY29tghB3d3cud2FyZGhpZ2gub3JnghV5b2xv
Lm5jbHVzZC5rMTIuY2EudXMwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC
3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcw
ggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwDiaUuuJujpQAnohhu2O4PUPuf+dIj7
pI8okwGd3fHb/gAAAWui2PNjAAAEAwBIMEYCIQD1eRvlyGpxpS2kHai58vtv8lS0
Hbeu9nzmkdloXdCuKQIhAJs6BqCLKZidPO7y602wWdG5SRzulkTa2L1VO1JpfbZj
AHYAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFrotjzWQAABAMA
RzBFAiEAmn1yp1LXlC9MDgooCXpHyVyD7mju7VvUKZfcVIZZtyMCIH+sHTyumKZ1
p77xR0QKfOfnCLCT8+DDvf1jYWyJXLkCMA0GCSqGSIb3DQEBCwUAA4IBAQBlDRYz
TDd0KLBop/zuBgDf2gaZ4hs93ecXLyu4z4IWQDRoI+07fWZeT+jphXICsW5QjIZp
3dLCtWMbNmaqCfq1Gb61aj1Q7cCMDPRyrThB8DxvLPArP9wCl2yqhmNoU9i+QUOn
AYVQ3rz834FYhO4gHm7yqiUx8gg9ZSE6gJbl4w/5lcXAyaBprublKX4U5uWXdKgX
i1drFF0xzlI2o2xHtDO4dt70kYDBIyVoYGxPyXwbr0tjra92XwUVfc+BmJYF4zlL
IJk960ryxNdvGs7pJQW5zrorJovdHqAERCpufDrvAEQTBXAym9LhrWNCmhJpze+d
8XZAHjheSGZb3m0Z
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298462107671118625398632491856192630178522
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-29 09:47:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-27 09:47:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lusd.k12.ca.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2189 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.adulteducation.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.assumptionschool-sl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.breed.exteraschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.carlossantanaarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.chamlian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cottageschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eastman.exteraschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.exteraschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.holyangelsarcadia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hsmp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ichspride.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lorena.exteraschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ranchopicojuniorhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.res.rfisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rfisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rhs.rfisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rms.rfisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.saintpaulcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.second.exteraschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.shaeagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.trinitystelementary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wardhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adulteducation.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alisal.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amador.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assumptionschool-sl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barrington.nclusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonita.nclusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breed.exteraschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carlossantanaarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chamlian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donlon.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastman.exteraschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edlioschooldistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elem.cumberlandacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.rockdaleisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fairlands.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harvest.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearst.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyangelsarcadia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.cumberlandacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.rockdaleisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsmp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hunt.nclusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ichspride.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is.rockdaleisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jh.rockdaleisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lorena.exteraschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lydiksen.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mohr.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.cumberlandacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orestimba.nclusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pleasantonmiddle.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranchopicojuniorhigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranchopicojuniorhigh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranchopicojuniorhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'res.rfisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rfisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhs.rfisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rms.rfisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintpaulcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'second.exteraschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaeagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smmschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valleyview.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vintagehills.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vonrenner.nclusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walnutgrove.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wardhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assumptionschool-sl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bgh4.k12.wy.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carlossantanaarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chamlian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cumberlandacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glcps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyangelsarcadia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsmp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ichspride.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ranchopicojuniorhigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ranchopicojuniorhigh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ranchopicojuniorhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rfisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rockdaleisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintpaulcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shaeagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smmschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trinitystelementary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wardhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yolo.nclusd.k12.ca.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016ba2d8f3630000040300483046022100f5791be5c86a71a52da41da8b9f2fb6ff254b41db7aef67ce691d9685dd0ae290221009b3a06a08b29989d3ceef2eb4db059d1b9491cee9644dad8bd553b52697db663007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ba2d8f35900000403004730450221009a7d72a752d7942f4c0e0a28097a47c95c83ee68eeed5bd42997dc548659b72302207fac1d3cae98a675a7bef147440a7ce7e708b093f3e0c3bdfd63616c895cb902
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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