newhorizon.bviu.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2e:e4:8e:9c:e7:b6:ec:a9:b6:20:a0:95:bf:36:7f:6d:21 was issued on by Let's Encrypt.

With 71 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=newhorizon.bviu.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2e:e4:8e:9c:e7:b6:ec:a9:b6:20:a0:95:bf:36:7f:6d:21
Serial Number (int): 277293651145250998113908405834594138418465
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 18:a2:0f:97:8f:0b:fd:4c:e7:42:cf:bb:8a:cc:ca:b7:46:2f:ef:71
Fingerprint (sha256): 59:b2:7b:31:a4:b4:a6:23:ad:0e:13:2c:ef:54:14:61:0c:79:25:a7:09:7d:65:0c:06:2d:e0:ad:e3:6d:ed:28

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate newhorizon.bviu.org

71

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for newhorizon.bviu.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin-wms.slzusd.org
admin.adulted.naugatuck.k12.ct.us
admin.andrewave.naugatuck.k12.ct.us
admin.bviu.org
admin.cityhill.naugatuck.k12.ct.us
admin.crossst.naugatuck.k12.ct.us
admin.ecc.naugatuck.k12.ct.us
admin.escalonusd.org
admin.hillside.naugatuck.k12.ct.us
admin.hopbrook.naugatuck.k12.ct.us
admin.maplehill.naugatuck.k12.ct.us
admin.morrishs.org
admin.naugatuck.k12.ct.us
admin.newhorizon.bviu.org
admin.nhs.naugatuck.k12.ct.us
admin.salem.naugatuck.k12.ct.us
admin.slzusd.org
admin.western.naugatuck.k12.ct.us
adult.slzusd.org
adulted.naugatuck.k12.ct.us
ahs.slzusd.org
andrewave.naugatuck.k12.ct.us
arroyo.slzusd.org
bay.slzusd.org
bms.slzusd.org
bohannon.slzusd.org
cityhill.naugatuck.k12.ct.us
col.slzusd.org
colonial.slzusd.org
colonialacres.slzusd.org
cor.slzusd.org
corvallis.slzusd.org
crossst.naugatuck.k12.ct.us
day.slzusd.org
dayton.slzusd.org
del.slzusd.org
delrey.slzusd.org
eastbayarts.slzusd.org
eba.slzusd.org
ecc.naugatuck.k12.ct.us
edendale.slzusd.org
ems.slzusd.org
escalonusd.org
gra.slzusd.org
grant.slzusd.org
hes.slzusd.org
hesperian.slzusd.org
hil.slzusd.org
hillside.naugatuck.k12.ct.us
hillside.slzusd.org
hopbrook.naugatuck.k12.ct.us
lor.slzusd.org
lorenzomanor.slzusd.org
maplehill.naugatuck.k12.ct.us
morrishs.org
naugatuck.k12.ct.us
newhorizon.bviu.org
nhs.naugatuck.k12.ct.us
rhs.slzusd.org
royalsunset.slzusd.org
salem.naugatuck.k12.ct.us
sanlorenzo.slzusd.org
slz.slzusd.org
slzhs.slzusd.org
western.naugatuck.k12.ct.us
www.andrewave.naugatuck.k12.ct.us
www.bviu.org
www.escalonusd.org
www.morrishs.org
www.naugatuck.k12.ct.us
www.slzusd.org

Other certificates including the domain name bviu.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for newhorizon.bviu.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277293651145250998113908405834594138418465
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-02 01:16:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-30 01:16:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'newhorizon.bviu.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1655 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-wms.slzusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.adulted.naugatuck.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.andrewave.naugatuck.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bviu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cityhill.naugatuck.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.crossst.naugatuck.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ecc.naugatuck.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.escalonusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hillside.naugatuck.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hopbrook.naugatuck.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.maplehill.naugatuck.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.morrishs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.naugatuck.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.newhorizon.bviu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nhs.naugatuck.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.salem.naugatuck.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.slzusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.western.naugatuck.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adult.slzusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adulted.naugatuck.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahs.slzusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrewave.naugatuck.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arroyo.slzusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bay.slzusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bms.slzusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bohannon.slzusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityhill.naugatuck.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'col.slzusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colonial.slzusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colonialacres.slzusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cor.slzusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corvallis.slzusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crossst.naugatuck.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'day.slzusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dayton.slzusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.slzusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delrey.slzusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastbayarts.slzusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eba.slzusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecc.naugatuck.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edendale.slzusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ems.slzusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escalonusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gra.slzusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grant.slzusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hes.slzusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hesperian.slzusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hil.slzusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillside.naugatuck.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillside.slzusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hopbrook.naugatuck.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lor.slzusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lorenzomanor.slzusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maplehill.naugatuck.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morrishs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naugatuck.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newhorizon.bviu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhs.naugatuck.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhs.slzusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalsunset.slzusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salem.naugatuck.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanlorenzo.slzusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slz.slzusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slzhs.slzusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'western.naugatuck.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andrewave.naugatuck.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bviu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.escalonusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morrishs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naugatuck.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slzusd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016bb0785b0d0000040300483046022100ce9d86c9b49a8d80d5ff597e5791420b0140860cba8c52d78142cf4c76b38a67022100a8f3e27a63a243adf4e6b369b7330bccc55f1b418c8ad34e53c820a75ad5a1b6007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016bb0785b01000004030046304402201102e86c86741490d74f3ed8277531b35af221bf2135024ae01b351d7da97edb0220441b853b3195243e9b0ae7e71465be7e014387f794c03427ce32a5ad76b5375f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0045c7e37c3c3fce0048120095b660d5170bd993e5331a8725556fa454b9e282d02f3d1d0376cda570a235042afd5c71622d5c2e630d6be8fc8990f56079d2fd1ada5a4a9a4b5d6ae697dbf22a06dcfb0a1bc1924554ec8f3ff24a47b39d770be82fe52225be3e11477e46e718169d7224211d94ca76d36762045b2de79052e3bcc74c0539d0180d89672f0de132db4a482a4a9f3d52bd93d7c28f86c9299ddad6f771dcdebbf3776844df7797718c90a3cad7669f351242a821009a5b7717a2ca81d9ff3b973dc2c85d76ac9d5eca02e4916738da09238638234a6aab4f561bbf5adf27eb1fe39d7d921d0f0dce4ba8a7c6c6d65b5bfa1d9f37c3e624c0f02417