admin.alms.hermiston.k12.or.us

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4f:3b:cb:15:a7:f8:75:b6:73:73:ea:2b:62:a3:49:a6:5e was issued on by Let's Encrypt.

With 52 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.alms.hermiston.k12.or.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4f:3b:cb:15:a7:f8:75:b6:73:73:ea:2b:62:a3:49:a6:5e
Serial Number (int): 288298643709287070564912448558603935786590
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b8:c6:73:03:98:68:63:86:30:f5:bb:de:f2:0e:a9:47:68:72:86:62
Fingerprint (sha256): 5a:8d:8d:0c:fe:a9:ec:c4:d7:e0:68:3a:af:1e:be:2b:1a:a7:f0:08:79:af:de:be:fb:39:da:b2:80:39:1c:8f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate admin.alms.hermiston.k12.or.us

52

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.alms.hermiston.k12.or.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.alms.hermiston.k12.or.us
admin.crammiddleschool.org
admin.dves.hermiston.k12.or.us
admin.fcwestms.coloradoearlycolleges.org
admin.gsdacademy.com
admin.hermiston.k12.or.us
admin.hhes.hermiston.k12.or.us
admin.hhs.hermiston.k12.or.us
admin.highschoolforartsandbusiness.org
admin.notredameparish.org
admin.rhes.hermiston.k12.or.us
admin.saltfork.org
admin.ses.hermiston.k12.or.us
admin.sjboces.org
admin.sms.hermiston.k12.or.us
admin.steinerschool.org
admin.wpes.hermiston.k12.or.us
alms.hermiston.k12.or.us
coloradosprings.coloradoearlycolleges.org
crammiddleschool.org
dves.hermiston.k12.or.us
fcwestms.coloradoearlycolleges.org
fortcollins.coloradoearlycolleges.org
fortcollinsms.coloradoearlycolleges.org
gsdacademy.com
hermiston.k12.or.us
hhes.hermiston.k12.or.us
hhs.hermiston.k12.or.us
high.saltfork.org
highschoolforartsandbusiness.org
juniorhigh.saltfork.org
north.saltfork.org
notredameparish.org
parker.coloradoearlycolleges.org
plummerpanthers.org
rhes.hermiston.k12.or.us
saltfork.org
ses.hermiston.k12.or.us
sjboces.org
sms.hermiston.k12.or.us
south.saltfork.org
steinerschool.org
wpes.hermiston.k12.or.us
www.crammiddleschool.org
www.fortcollins.coloradoearlycolleges.org
www.gsdacademy.com
www.hermiston.k12.or.us
www.highschoolforartsandbusiness.org
www.notredameparish.org
www.saltfork.org
www.sjboces.org
www.steinerschool.org

Other certificates including the domain name hermiston.k12.or.us

(limited to 100 certificates)
coloradosprings.coloradoearlycolleges.org
admin.alms.hermiston.k12.or.us
hhs.hermiston.k12.or.us
hhs.hermiston.k12.or.us
hermiston.k12.or.us
admin-cuajimalpa.peterson.com.mx
www.plummerpanthers.org
washington.bcsd.com
mydocuments.hermiston.k12.or.us
hermiston.k12.or.us
*.hermiston.k12.or.us
admin.gsdacademy.com
windsorms.coloradoearlycolleges.org
admin.arundel.scsdk8.org
powerschool.hermiston.k12.or.us
pioneer.bcsd.com
*.hermiston.k12.or.us
hermiston.k12.or.us
*.hermiston.k12.or.us
powerschool.hermiston.k12.or.us
*.hermiston.k12.or.us
*.hermiston.k12.or.us
hhes.hermiston.k12.or.us
*.hermiston.k12.or.us
im.hermiston.k12.or.us
share.hermiston.k12.or.us
admin.eim-education.com
sierra.bcsd.com
*.hermiston.k12.or.us
sequoia.bcsd.com
longfellow.bcsd.com
hermiston.k12.or.us
*.hermiston.k12.or.us
sequoia.bcsd.com
conference.hermiston.k12.or.us
autodiscover.hermiston.k12.or.us
admin.casaloma.bcsd.com
*.hermiston.k12.or.us
*.hermiston.k12.or.us
*.hermiston.k12.or.us
*.hermiston.k12.or.us
admin.alms.hermiston.k12.or.us
admin.alms.hermiston.k12.or.us
plummerpanthers.org
*.hermiston.k12.or.us
*.hermiston.k12.or.us
students.hermiston.k12.or.us
sms.hermiston.k12.or.us
autodiscover.hermiston.k12.or.us
*.hermiston.k12.or.us
*.hermiston.k12.or.us
hermiston.k12.or.us
admin.coloradoearlycolleges.org
admin.kes.rcschools.net
admin.alms.hermiston.k12.or.us
admin.alms.hermiston.k12.or.us
*.hermiston.k12.or.us
students.hermiston.k12.or.us
sm.hermiston.k12.or.us
admin.downtown.bcsd.com
hermiston.k12.or.us
admin.cato.bcsd.com
admin.mtvernon.bcsd.com
*.hermiston.k12.or.us
*.hermiston.k12.or.us
admin.alms.hermiston.k12.or.us
admin.alms.hermiston.k12.or.us
share.hermiston.k12.or.us
admin.alms.hermiston.k12.or.us
seal.bcsd.com
*.hermiston.k12.or.us
chat.hermiston.k12.or.us
mail.hermiston.k12.or.us
gsdacademy.com
hermiston.k12.or.us
*.hermiston.k12.or.us
hermiston.k12.or.us
admin.compton.bcsd.com
admin.bcsd.com
admin.alms.hermiston.k12.or.us
wpes.hermiston.k12.or.us
*.hermiston.k12.or.us
fcwestms.coloradoearlycolleges.org
alms.hermiston.k12.or.us
mydocuments.hermiston.k12.or.us
*.hermiston.k12.or.us
admin.arroyo.scsdk8.org
admin-tlalpan.peterson.com.mx
admin.central.scsdk8.org
hermiston.k12.or.us
lyncpool.hermiston.k12.or.us
*.hermiston.k12.or.us
www.hermistoneducationfoundation.org
*.hermiston.k12.or.us
sip.hermiston.k12.or.us
admin.gsdacademy.com
*.hermiston.k12.or.us
admin.bcsd.com
ces.csd400.org
*.hermiston.k12.or.us

Certificate

The complete raw certificate details for admin.alms.hermiston.k12.or.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288298643709287070564912448558603935786590
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-25 10:02:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-24 10:02:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.alms.hermiston.k12.or.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1405 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.alms.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.crammiddleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dves.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fcwestms.coloradoearlycolleges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gsdacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hhes.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hhs.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.highschoolforartsandbusiness.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.notredameparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rhes.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.saltfork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ses.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sjboces.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sms.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.steinerschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wpes.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alms.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradosprings.coloradoearlycolleges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crammiddleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dves.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcwestms.coloradoearlycolleges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortcollins.coloradoearlycolleges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortcollinsms.coloradoearlycolleges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsdacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhes.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhs.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'high.saltfork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highschoolforartsandbusiness.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juniorhigh.saltfork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'north.saltfork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notredameparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parker.coloradoearlycolleges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plummerpanthers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhes.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saltfork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ses.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjboces.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'south.saltfork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steinerschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpes.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crammiddleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fortcollins.coloradoearlycolleges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gsdacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highschoolforartsandbusiness.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notredameparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saltfork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjboces.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steinerschool.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a542931a70000040300463044022018a282257887f891f561ba9346ab09dc125e2ea163f603c5616558270aec25bc02203e81b4b34d960ae5d42eb091726af4bcf9ddaded5589f75fadb2e18a4e73620e00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a542931990000040300473045022011c879a38aefc341bdf8aef5867e9e02f1e3daa161920fa6703ee9c32a520713022100d5e75e280bd7fa39ec0bf703d5d61d0851eed789b1aad3e01c6caef2a0c4c062
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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