acrma12.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:17:df:dc:46:f4:63:4b:49:28:ca:27:df:f1:c1:a0:04:88 was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=acrma12.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:17:df:dc:46:f4:63:4b:49:28:ca:27:df:f1:c1:a0:04:88
Serial Number (int): 269460913821962312441256542340469435139208
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ab:1c:ba:7d:6c:a5:b3:14:39:07:c0:dc:1f:4f:a3:45:26:f1:45:ee
Fingerprint (sha256): 56:c4:93:39:db:44:a1:90:79:20:4a:4e:39:55:83:b0:db:5c:35:02:47:0a:f9:ab:27:76:7f:0e:ce:97:8e:41

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate acrma12.org

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acrma12.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acrma12.org
admin.apaches.k12.in.us
admin.arisehighschool.org
admin.baker5j.org
admin.bhs.baker5j.org
admin.bms.baker5j.org
admin.brooklyn.baker5j.org
admin.carnegieriverside.org
admin.carnegieschools.org
admin.carnegiewhittier.org
admin.cisdtx.net
admin.cristoreymiami.org
admin.eaglecap.baker5j.org
admin.elpasocatholicschools.org
admin.es.cisdtx.net
admin.ghs.lghs.k12.ca.us
admin.hac1.org
admin.haines.baker5j.org
admin.hs.cisdtx.net
admin.hs.shisd.net
admin.is.shisd.net
admin.jh.shisd.net
admin.keating.baker5j.org
admin.lgas.lghs.k12.ca.us
admin.lghs.k12.ca.us
admin.lghs.lghs.k12.ca.us
admin.ms.cisdtx.net
admin.ojn.apaches.k12.in.us
admin.ps.shisd.net
admin.sbi.baker5j.org
admin.shisd.net
admin.sjwschool.net
admin.springerschools.com
admin.theleadershipacademytyler.com
admin.unioncity.k12.ok.us
admin.vallecitok12.com
admin.whs.apaches.k12.in.us
admin.wms.apaches.k12.in.us
arisehighschool.org
baker5j.org
bhs.baker5j.org
bms.baker5j.org
brooklyn.baker5j.org
carnegieriverside.org
carnegieschools.org
carnegiewhittier.org
cisdtx.net
cristoreymiami.org
eaglecap.baker5j.org
elpasocatholicschools.org
es.cisdtx.net
ghs.lghs.k12.ca.us
hac1.org
haines.baker5j.org
hs.cisdtx.net
hs.shisd.net
is.shisd.net
jh.shisd.net
keating.baker5j.org
lgas.lghs.k12.ca.us
lghs.lghs.k12.ca.us
ms.cisdtx.net
ojn.apaches.k12.in.us
ps.shisd.net
sbi.baker5j.org
shisd.net
sjwschool.net
springerschools.com
theleadershipacademytyler.com
unioncity.k12.ok.us
usd458.net
vallecitok12.com
whs.apaches.k12.in.us
wms.apaches.k12.in.us
www.acrma12.org
www.apaches.k12.in.us
www.arisehighschool.org
www.baker5j.org
www.carnegieriverside.org
www.carnegieschools.org
www.carnegiewhittier.org
www.cisdtx.net
www.cristoreymiami.org
www.elpasocatholicschools.org
www.hac1.org
www.lghs.k12.ca.us
www.pcrpanthers.net
www.shisd.net
www.sjwschool.net
www.springerschools.com
www.theleadershipacademytyler.com
www.unioncity.k12.ok.us
www.usd458.net
www.vallecitok12.com

Other certificates including the domain name acrma12.org

(limited to 100 certificates)
acrma12.org
acrma12.org
vallecitok12.com
acrma12.org
acrma12.org
acrma12.org
acrma12.org
www.sjwschool.net
acrma12.org
acrma12.org
admin.bhs.baker5j.org
acrma12.org
acrma12.org
www.psusd.k12.az.us
acrma12.org
westwhittier.whittiercity.net
bluffdale.summitacademyschools.org
acrma12.org
acrma12.org
acrma12.org
acrma12.org
ps.shisd.net
acrma12.org
acrma12.org
primarycenter.marsk12.org
acrma12.org
acrma12.org
www.springerschools.com
www.vallecitok12.com
www.georgegervinprepacademy.org
acrma12.org
sbi.baker5j.org
acrma12.org
acrma12.org
acrma12.org
admin.whittiercity.net
acrma12.org
acrma12.org
www.unioncity.k12.ok.us
acrma12.org
acrma12.org

Certificate

The complete raw certificate details for acrma12.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQbTHb+2z7
rfYVCl+ph5m8FJJOEgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5pV3R4RBg
n18RTHnTD9fS27JxyeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGrmQF3Z/h2
e6StagubO+pVwFzG8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK7wAhJO8e
l2z375LDd2VIwrdWQP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlWZ1AdjOKf
RiY0ckFuu/DYkuvkNKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5Tu7zbek/
MR/JMR9nceWyZ2Mund+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzwWzBvTD8F
7q6ckUbIgpeo7stn7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuaivjW/P+Tm
64XjXNjP9F1W8+5tlcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ4Iudx/o3
Q4E2w6Aud9PYyV05pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/h0omUmCI
DiQVG30eHhb3OIP3bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUnohkUi6ik
D4me6o58sq/IQVmyem1M/E0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269460913821962312441256542340469435139208
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-08 10:37:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-08 10:37:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acrma12.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2037 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acrma12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.apaches.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.arisehighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bhs.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bms.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.brooklyn.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.carnegieriverside.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.carnegieschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.carnegiewhittier.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cisdtx.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cristoreymiami.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eaglecap.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.elpasocatholicschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.es.cisdtx.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ghs.lghs.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hac1.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.haines.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hs.cisdtx.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hs.shisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.is.shisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jh.shisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.keating.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lgas.lghs.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lghs.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lghs.lghs.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ms.cisdtx.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ojn.apaches.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ps.shisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sbi.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.shisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sjwschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.springerschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.theleadershipacademytyler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.unioncity.k12.ok.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.vallecitok12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.whs.apaches.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wms.apaches.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arisehighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhs.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bms.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brooklyn.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carnegieriverside.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carnegieschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carnegiewhittier.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cisdtx.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cristoreymiami.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eaglecap.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elpasocatholicschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.cisdtx.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghs.lghs.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hac1.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haines.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.cisdtx.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.shisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is.shisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jh.shisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keating.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgas.lghs.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lghs.lghs.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.cisdtx.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ojn.apaches.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps.shisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbi.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjwschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'springerschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theleadershipacademytyler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unioncity.k12.ok.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usd458.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vallecitok12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whs.apaches.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wms.apaches.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acrma12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apaches.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arisehighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carnegieriverside.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carnegieschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carnegiewhittier.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cisdtx.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cristoreymiami.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elpasocatholicschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hac1.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lghs.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcrpanthers.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjwschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.springerschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theleadershipacademytyler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unioncity.k12.ok.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usd458.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vallecitok12.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170249780090000040300473045022100d6baef998850f64b86e5d95e997619006b4766f7222fd55f650258ed018db62802200986fb8decce7b0476e81033ddcb0cc707e04ea278c626e1d1ed45ffa6da039200760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170249780400000040300473045022100d82787507d328007ef5bef51049854f05586eb1e3d6c207aa997506d499c6ca602201234aad360c7a594d721d3ce2266663539f13e5ce7df50dfb97c7322abb65d38
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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