lvmhs.lucernevalleyunified.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cd:d0:a6:02:56:4c:74:a9:13:c3:db:d6:e3:ca:bf:96:17 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lvmhs.lucernevalleyunified.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cd:d0:a6:02:56:4c:74:a9:13:c3:db:d6:e3:ca:bf:96:17
Serial Number (int): 331372084405877007310929929217687729182231
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 94:ae:02:5f:1f:fc:55:4e:76:2d:1d:cc:b2:cc:28:d4:44:f7:a0:d4
Fingerprint (sha256): 53:15:e1:27:6e:a0:a6:46:e3:dd:38:75:11:02:ef:e1:7c:34:45:7e:6f:3d:b3:9d:e7:56:fe:a9:52:5d:e1:f7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lvmhs.lucernevalleyunified.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lvmhs.lucernevalleyunified.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.amschool.edu.sv
admin.aquinashs.net
admin.arete.prsd.us
admin.argentine.lindenschools.org
admin.benlippen.com
admin.bentworth.org
admin.bhswca.com
admin.canoncityschools.org
admin.cces.crispschools.org
admin.cchs.crispschools.org
admin.cclc.crispschools.org
admin.ccms.crispschools.org
admin.ccpk.crispschools.org
admin.ccps.crispschools.org
admin.central.lindenschools.org
admin.cornellsd.org
admin.cove.prioritycharterschools.org
admin.cristoreylasvegas.org
admin.ecalattc.org
admin.equitylab.org
admin.es.hillcity.k12.sd.us
admin.es.notredameacademy.org
admin.flintschools.org
admin.gfusd.net
admin.goodwatermontessori.org
admin.gpusd.org
admin.high.mypagosaschools.com
admin.highschool.lindenschools.org
admin.hs.hillcity.k12.sd.us
admin.hyatt.lindenschools.org
admin.linden.lindenschools.org
admin.lvmhs.lucernevalleyunified.org
admin.middle.mypagosaschools.com
admin.middleschool.lindenschools.org
admin.ms.hillcity.k12.sd.us
admin.ndhsb.org
admin.sfxcatholicschool.org
admin.socialjusticemclc.org
admin.temple.prioritycharterschools.org
admin.tomasmoro.edu.mx
argentine.lindenschools.org
cces.crispschools.org
cchs.crispschools.org
cclc.crispschools.org
ccms.crispschools.org
ccpk.crispschools.org
ccps.crispschools.org
central.lindenschools.org
cristoreylasvegas.org
cristoreystviator.com
cristoreystviator.net
cristoreystviator.org
earlycollegeacademy.org
ecalattc.org
elementary.mypagosaschools.com
equitylab.org
es.notredameacademy.org
fcs.mcdowell.k12.nc.us
goodwatermontessori.org
gpusd.org
high.mypagosaschools.com
highschool.lindenschools.org
hs.hillcity.k12.sd.us
hs.notredameacademy.org
hyatt.lindenschools.org
linden.lindenschools.org
lvmhs.lucernevalleyunified.org
middle.mypagosaschools.com
middleschool.lindenschools.org
ms.hillcity.k12.sd.us
sfxcatholicschool.com
sfxcatholicschool.org
temple.prioritycharterschools.org
www.amschool.edu.sv
www.aquinashs.net
www.benlippen.com
www.bentworth.org
www.bhswca.com
www.canoncityschools.org
www.cornell.k12.pa.us
www.cornellsd.org
www.cristoreylasvegas.org
www.cristoreystviator.com
www.cristoreystviator.net
www.cristoreystviator.org
www.earlycollegeacademy.org
www.ecalattc.org
www.equitylab.org
www.fcs.mcdowell.k12.nc.us
www.flintschools.org
www.gfusd.k12.ca.us
www.gfusd.net
www.goodwatermontessori.org
www.gpusd.org
www.ndhsb.org
www.sfxcatholicschool.com
www.sfxcatholicschool.org
www.somonauk.net
www.tannahillintermediateschool.wsisd.com
www.tomasmoro.edu.mx

Other certificates including the domain name lucernevalleyunified.org

(limited to 100 certificates)
www.sandymilleracademy.com
eagles.lucernevalleyunified.org
acsaregion14.org
www.bhef.org
admin.amschool.edu.sv
admin.amschool.edu.sv
sfrschool.org
acsaregion14.org
acsaregion14.org
admin.amschool.edu.sv
ps16.jcboe.org
acsaregion14.org
admin.amschool.edu.sv
abilene.texasleadership.net
admin.lisbahamas.com
acsaregion14.org
admin.amschool.edu.sv
admin.eagles.lucernevalleyunified.org
lvmhs.lucernevalleyunified.org
acsaregion14.org
admin.amschool.edu.sv
lucernevalleyunified.org
acsaregion14.org
admin.amschool.edu.sv
lcsd.k12.ms.us
www.notredameacademy.org
admin.aquaticscenter.visd.net
vickers.visd.net
acsaregion14.org
abilene.texasleadership.net
admin.bisd-tx.org
acsaregion14.org
lucernevalleyunified.org
admin.hs.notredameacademy.org
acsaregion14.org
acsaregion14.org
admin.lucernevalleyunified.org
abilene.texasleadership.net
lvmhs.lucernevalleyunified.org
admin.eagles.lucernevalleyunified.org
admin.lucernevalleyunified.org
abilene.texasleadership.net
admin.family.mypagosaschools.com
westlincoln.lcsd.k12.ms.us
admin.royjohnson.cv.k12.ca.us
admin.bes.bentworth.org
admin.amschool.edu.sv
eagles.lucernevalleyunified.org
family.mypagosaschools.com
admin.lindenschools.org
admin.amschool.edu.sv
abilene.texasleadership.net
admin.krumisd.net
admin.williamwood.visd.net
eagles.lucernevalleyunified.org
admin.amschool.edu.sv
admin.crispschools.org
admin.aloe.visd.net

Certificate

The complete raw certificate details for lvmhs.lucernevalleyunified.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331372084405877007310929929217687729182231
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-19 02:08:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-19 02:08:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lvmhs.lucernevalleyunified.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2543 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.amschool.edu.sv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.aquinashs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.arete.prsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.argentine.lindenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.benlippen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bentworth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bhswca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cces.crispschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cchs.crispschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cclc.crispschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ccms.crispschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ccpk.crispschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ccps.crispschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.central.lindenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cornellsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cove.prioritycharterschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cristoreylasvegas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ecalattc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.equitylab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.es.hillcity.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.es.notredameacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.flintschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.goodwatermontessori.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gpusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.high.mypagosaschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.highschool.lindenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hs.hillcity.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hyatt.lindenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.linden.lindenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lvmhs.lucernevalleyunified.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.middle.mypagosaschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.middleschool.lindenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ms.hillcity.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ndhsb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sfxcatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.socialjusticemclc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.temple.prioritycharterschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tomasmoro.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'argentine.lindenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cces.crispschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cchs.crispschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cclc.crispschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccms.crispschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccpk.crispschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccps.crispschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'central.lindenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cristoreylasvegas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cristoreystviator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cristoreystviator.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cristoreystviator.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earlycollegeacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecalattc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elementary.mypagosaschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equitylab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.notredameacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcs.mcdowell.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodwatermontessori.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'high.mypagosaschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highschool.lindenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.hillcity.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.notredameacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyatt.lindenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linden.lindenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lvmhs.lucernevalleyunified.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'middle.mypagosaschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'middleschool.lindenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.hillcity.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfxcatholicschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfxcatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temple.prioritycharterschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amschool.edu.sv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aquinashs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benlippen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bentworth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhswca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornell.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornellsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cristoreylasvegas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cristoreystviator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cristoreystviator.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cristoreystviator.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.earlycollegeacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecalattc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equitylab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fcs.mcdowell.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flintschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodwatermontessori.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gpusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ndhsb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfxcatholicschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfxcatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.somonauk.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tannahillintermediateschool.wsisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tomasmoro.edu.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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