admin.bhs.ballingerisd.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:aa:0c:a8:bd:2c:93:9e:03:be:e7:9e:cd:32:87:f6:d9:41 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.bhs.ballingerisd.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:aa:0c:a8:bd:2c:93:9e:03:be:e7:9e:cd:32:87:f6:d9:41
Serial Number (int): 319201687050569071135367069221263573965121
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 20:58:17:0b:95:41:b1:c6:ff:14:19:65:29:4a:6b:88:61:fc:a0:00
Fingerprint (sha256): 5c:09:eb:7d:ee:65:97:4e:70:e3:b0:90:7e:4a:7d:da:6d:44:1c:b4:1e:74:0b:be:71:f7:57:f3:5f:7c:5f:7c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate admin.bhs.ballingerisd.net

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.bhs.ballingerisd.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abchandler.henderson.kyschools.us
admin.atc.mayfield.kyschools.us
admin.bellamy.dover.k12.nh.us
admin.bhs.ballingerisd.net
admin.blhs.lex3.org
admin.cecvac.com
admin.clarendon.sboe.org
admin.cscisd.net
admin.cse.cscisd.net
admin.cshs.cscisd.net
admin.csi.cscisd.net
admin.csjh.cscisd.net
admin.ctc.dover.k12.nh.us
admin.dbs.jacksoncoschools.com
admin.dms.dover.k12.nh.us
admin.dover.k12.nh.us
admin.edison.westfieldnjk12.org
admin.es.hoganprep.net
admin.franklin.westfieldnjk12.org
admin.ges.dover.k12.nh.us
admin.ges.jacksoncoschools.com
admin.hoganprep.net
admin.hs.hoganprep.net
admin.hsap.mtpcsd.org
admin.huber.sboe.org
admin.jacksoncoschools.com
admin.jchs.jacksoncoschools.com
admin.jcms.jacksoncoschools.com
admin.jefferson.westfieldnjk12.org
admin.jhs.ballingerisd.net
admin.lincoln.westfieldnjk12.org
admin.mayfield.kyschools.us
admin.mckinley.westfieldnjk12.org
admin.mes.mayfield.kyschools.us
admin.mms.mayfield.kyschools.us
admin.ms.hoganprep.net
admin.ntes.todd.kyschools.us
admin.olneycharter.org
admin.pac.sboe.org
admin.raak6.richardallenschools.com
admin.rapk3.richardallenschools.com
admin.roosevelt.westfieldnjk12.org
admin.saintpiusx.com
admin.sboe.org
admin.shs.sboe.org
admin.sms.sboe.org
admin.stes.todd.kyschools.us
admin.tamaques.westfieldnjk12.org
admin.tcms.todd.kyschools.us
admin.todd.kyschools.us
admin.tuffree.org
admin.union.kyschools.us
admin.washington.westfieldnjk12.org
admin.whs.westfieldnjk12.org
admin.wilson.westfieldnjk12.org
admin.wps.dover.k12.nh.us
atc.mayfield.kyschools.us
bellamy.dover.k12.nh.us
bendgate.henderson.kyschools.us
cecvac.com
clarendon.sboe.org
cse.cscisd.net
cshs.cscisd.net
ctc.dover.k12.nh.us
dbs.jacksoncoschools.com
dms.dover.k12.nh.us
dover.k12.nh.us
edison.westfieldnjk12.org
es.hoganprep.net
fmis.anacondaschools.org
ges.dover.k12.nh.us
ges.jacksoncoschools.com
hoganprep.net
hs.hoganprep.net
huber.sboe.org
jacksoncoschools.com
jchs.jacksoncoschools.com
lwa-arts.org
ms.hoganprep.net
olneycharter.org
rapk3.richardallenschools.com
roosevelt.westfieldnjk12.org
shs.sboe.org
sms.sboe.org
tbjelc.henderson.kyschools.us
tcms.todd.kyschools.us
www.ctc.dover.k12.nh.us
www.dhs.dover.k12.nh.us
www.dms.dover.k12.nh.us
www.dover.k12.nh.us
www.henderson.kyschools.us
www.hss.dover.k12.nh.us
www.jacksoncoschools.com
www.lwa-arts.org
www.mayfield.kyschools.us
www.olneycharter.org
www.richardallenschools.com
www.saintpiusx.com
www.sboe.org
www.tuffree.org

Other certificates including the domain name ballingerisd.net

(limited to 100 certificates)
athletics.godleyisd.net
admin.dover.k12.nh.us
dkies.org
www.hoganprep.net
www.kipling.edu.mx
ges.dover.k12.nh.us
admin.eceap.gsd.wednet.edu
bes.gobearsgo.net
gfes.comalisd.org
www.comalisd.org
cp.athenscityschools.net
jres.comalisd.org
admin.rowlettacademies.org
jacksoncoschools.com
ylms.org
admin.union.kyschools.us
filewave.ballingerisd.net
mtpcsd.org
*.ballingerisd.net
dms.dover.k12.nh.us
bhs.ballingerisd.net
www.alarqamislamicschool.org
svms.comalisd.org
admin.bhs.ballingerisd.net
admin.crma5.org
admin.jchs.jacksoncoschools.com
*.ballingerisd.net
cscisd.net
admin.dkies.org
admin.todd.kyschools.us
tbjelc.henderson.kyschools.us
sle.slvusd.org
www.msdathletics.com
ballingerisd.net
chs.comalisd.org
admin.wps.dover.k12.nh.us
admin.cornerstone.pvpusd.net
kpe.mpsdnow.org
1fairfield.org
mhs.mayfield.kyschools.us
*.ballingerisd.net
admin.olneycharter.org
admin.bes.ballingerisd.net
admin.eastview.gcschools.net
admin.saintpiusx.com
cecvac.com
admin.lunadabay.pvpusd.net
cses.comalisd.org
www.todd.kyschools.us
glendora.k12.ca.us
acrma5.org
mes.mayfield.kyschools.us
academy.comalisd.org
cdc.comalisd.org
svhs.comalisd.org
www.whitesburgchristianacademy.org
admin.bhs.ballingerisd.net
admin.jhs.ballingerisd.net
ajshs.anacondaschools.org
acrma5.org
admin.ges.dover.k12.nh.us
bes.ballingerisd.net
salem.mtpcsd.org
admin.pac.sboe.org
ballingerisd.net
hoganprep.net
admin.williampenn.bcsd.com
www.richardallenschools.com
admin.bles.lex3.org
admin.bhs.ballingerisd.net
admin.rapk3.richardallenschools.com
admin.bellamy.dover.k12.nh.us
admin.mes.mayfield.kyschools.us
www.union.kyschools.us
filewave.ballingerisd.net
admin.elkridge.whiteriver.wednet.edu
hs.cscisd.net
pantojacharter.org
admin.brhs.bordentown.k12.nj.us
monessenschooldistrict.com
admin.ctc.dover.k12.nh.us
admin.jacksoncoschools.com
admin.athletics.godleyisd.net
cdc.comalisd.org
hs.hoganprep.net
www.nestleavecharter.com
lunadabay.pvpusd.net
acrma5.org
gres.comalisd.org
cv.k12.ca.us
admin.cshs.cscisd.net
chms.comalisd.org
admin.mes.mayfield.kyschools.us
hles.comalisd.org
admin.athenscityschools.net
ses.comalisd.org
www.ballingerisd.net
bbes.comalisd.org
elc.whiteriver.wednet.edu
www.comalisd.org

Certificate

The complete raw certificate details for admin.bhs.ballingerisd.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319201687050569071135367069221263573965121
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-05 09:56:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-03 09:56:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.bhs.ballingerisd.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2521 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abchandler.henderson.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.atc.mayfield.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bellamy.dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bhs.ballingerisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.blhs.lex3.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cecvac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.clarendon.sboe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cscisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cse.cscisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cshs.cscisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.csi.cscisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.csjh.cscisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ctc.dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dbs.jacksoncoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dms.dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.edison.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.es.hoganprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.franklin.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ges.dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ges.jacksoncoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hoganprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hs.hoganprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hsap.mtpcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.huber.sboe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jacksoncoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jchs.jacksoncoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jcms.jacksoncoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jefferson.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jhs.ballingerisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lincoln.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mayfield.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mckinley.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mes.mayfield.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mms.mayfield.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ms.hoganprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ntes.todd.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.olneycharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pac.sboe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.raak6.richardallenschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rapk3.richardallenschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.roosevelt.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.saintpiusx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sboe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.shs.sboe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sms.sboe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stes.todd.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tamaques.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tcms.todd.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.todd.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tuffree.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.union.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.washington.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.whs.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wilson.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wps.dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atc.mayfield.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellamy.dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bendgate.henderson.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cecvac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clarendon.sboe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cse.cscisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cshs.cscisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctc.dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbs.jacksoncoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dms.dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edison.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.hoganprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmis.anacondaschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ges.dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ges.jacksoncoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoganprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.hoganprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huber.sboe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacksoncoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jchs.jacksoncoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lwa-arts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.hoganprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olneycharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapk3.richardallenschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roosevelt.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shs.sboe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms.sboe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbjelc.henderson.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcms.todd.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctc.dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dhs.dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dms.dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.henderson.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hss.dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jacksoncoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lwa-arts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mayfield.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olneycharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richardallenschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintpiusx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sboe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuffree.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b274843f2000004030046304402207896680830f4f08119a874ffbe37007ef0e2bb341ff9dbd5026bcdf5a85ead160220008dda679465f1aaf2c682874784e0bc7ff584de0d4286b43e32887fe979d5a300760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b274843dc000004030047304502205c277494c94de4581a2458127a9684458a162adb5fccf8a7c363c2ea1dc67518022100c1c6b25e260647fe0c47df62a6d71d6adad0a978c47bb89ab2664909e5bd9470
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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