admin.apr298.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ac:70:05:bc:d4:68:f1:97:47:76:9c:00:bd:61:78:c5:0e was issued on by Let's Encrypt.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.apr298.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ac:70:05:bc:d4:68:f1:97:47:76:9c:00:bd:61:78:c5:0e
Serial Number (int): 320014328232616213353553130763344236037390
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 18:63:a6:c1:fd:6d:e3:58:f9:0b:6f:33:91:e5:87:70:53:d2:5c:14
Fingerprint (sha256): 51:46:38:23:66:fc:5d:85:0f:2d:e8:f3:46:ee:19:69:fd:5d:89:61:92:cd:48:70:c8:5e:89:f6:06:02:4a:18

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate admin.apr298.com

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.apr298.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.apr298.com
admin.charterschoolofeducationalexcellence.org
admin.courreges.fvsd.us
admin.cox.fvsd.us
admin.ctkschool.com
admin.executiveprep.org
admin.fulton.fvsd.us
admin.gisler.fvsd.us
admin.hnhsoakland.org
admin.iwcs.k12.va.us
admin.kipapaelementary.org
admin.learningatlovejoy.com
admin.lockwoodavenue.org
admin.masuda.fvsd.us
admin.mhs.molineschools.org
admin.molineschools.org
admin.newland.fvsd.us
admin.oka.fvsd.us
admin.plavan.fvsd.us
admin.saintemydiuscatholicschool.org
admin.saturnelementary.org
admin.talbert.fvsd.us
admin.tamura.fvsd.us
admin.vicksburgcatholic.org
apr298.com
ces.cliftonisd.org
cespk2.cliftonisd.org
charterschoolofeducationalexcellence.org
courreges.fvsd.us
cox.fvsd.us
ctkschool.com
elementary.otsegoknights.org
executiveprep.org
fulton.fvsd.us
gisler.fvsd.us
greenfieldschool.org
highschool.otsegoknights.org
hnhsoakland.org
juniorhigh.otsegoknights.org
kipapaelementary.org
learningatlovejoy.com
learningatlovejoy.net
learningatlovejoy.org
lockwoodavenue.org
masuda.fvsd.us
newland.fvsd.us
oka.fvsd.us
plavan.fvsd.us
saintemydiuscatholicschool.org
saturnelementary.org
talbert.fvsd.us
www.apr298.com
www.charterschoolofeducationalexcellence.org
www.courreges.fvsd.us
www.cox.fvsd.us
www.cristoreybatonrouge.org
www.ctkschool.com
www.executiveprep.org
www.fulton.fvsd.us
www.ghsa-k12-ca.us
www.gisler.fvsd.us
www.goethecharterschool.org
www.greenfieldschool.org
www.hnhsoakland.org
www.iwcs.k12.va.us
www.kipapaelementary.org
www.knovalearning.org
www.learningatlovejoy.com
www.learningatlovejoy.net
www.learningatlovejoy.org
www.lockwoodavenue.org
www.masuda.fvsd.us
www.mmbethune.org
www.molineschools.org
www.newland.fvsd.us
www.oka.fvsd.us
www.otsegoknights.org
www.plavan.fvsd.us
www.saintemydiuscatholicschool.org
www.saturnelementary.org
www.sgusd.k12.ca.us
www.sgusd.net
www.talbert.fvsd.us
www.tamura.fvsd.us
www.uinta1.k12.wy.us
www.vicksburgcatholic.org

Other certificates including the domain name apr298.com

(limited to 100 certificates)
admin.apr298.com
cespk2.cliftonisd.org
admin.afantis.org
admin.afantis.org
apr298.com
ces35.cliftonisd.org
admin.apr298.com
admin.apr298.com
admin.apr298.com
apr298.com
admin.tamura.fvsd.us
admin.apr298.com
admin.apr298.com
admin.apr298.com
admin.apr298.com
apr298.com
bes.bayfield.k12.co.us
admin.apr298.com
apr298.com
fless.sd91.bc.ca
admin.apr298.com
apr298.com
admin.mhs.molineschools.org
admin.caes.iwcs.k12.va.us
highschool.otsegoknights.org
cespk2.cliftonisd.org
admin.apr298.com

Certificate

The complete raw certificate details for admin.apr298.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320014328232616213353553130763344236037390
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-28 09:38:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-26 09:38:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.apr298.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1994 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.apr298.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.charterschoolofeducationalexcellence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.courreges.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cox.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ctkschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.executiveprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fulton.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gisler.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hnhsoakland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.iwcs.k12.va.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kipapaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.learningatlovejoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lockwoodavenue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.masuda.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mhs.molineschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.molineschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.newland.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.oka.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.plavan.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.saintemydiuscatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.saturnelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.talbert.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tamura.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.vicksburgcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apr298.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ces.cliftonisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cespk2.cliftonisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charterschoolofeducationalexcellence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courreges.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cox.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctkschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elementary.otsegoknights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'executiveprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fulton.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gisler.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenfieldschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highschool.otsegoknights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hnhsoakland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juniorhigh.otsegoknights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kipapaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learningatlovejoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learningatlovejoy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learningatlovejoy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lockwoodavenue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masuda.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newland.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oka.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plavan.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintemydiuscatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saturnelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talbert.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apr298.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charterschoolofeducationalexcellence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.courreges.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cox.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cristoreybatonrouge.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctkschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.executiveprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fulton.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghsa-k12-ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gisler.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goethecharterschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenfieldschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hnhsoakland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iwcs.k12.va.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kipapaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.knovalearning.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learningatlovejoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learningatlovejoy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learningatlovejoy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lockwoodavenue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masuda.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmbethune.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.molineschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newland.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oka.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otsegoknights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plavan.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintemydiuscatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saturnelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sgusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sgusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.talbert.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tamura.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uinta1.k12.wy.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vicksburgcatholic.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016b9daa94a1000004030046304402207fa47a845c0bfa9fe8b1358d7b1089be5592e06d6119f6ae330508e3847fa5e3022013b6347bf7b3f5a55c24fb5c7fc52fa2e7253ce5f419d09e8a2a01e48bc6cc4600760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b9daa947d0000040300473045022100bac4ef42d883b7fcf7c53f87324d877fe6638ab725f5c869c37bd3576d2b4c900220203da2937fa53d922631cc045e018d46bdb43d9c29e86d7d413c58352e763a0d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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