admin.church.faithmarietta.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:56:33:6b:3f:8a:56:ca:2c:e2:3f:55:19:50:f6:2d:b1:40 was issued on by Let's Encrypt.

With 47 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.church.faithmarietta.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:56:33:6b:3f:8a:56:ca:2c:e2:3f:55:19:50:f6:2d:b1:40
Serial Number (int): 290669488842782493316637827786056770892096
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f3:10:1f:b5:96:56:a1:d7:cc:d7:2d:84:87:cc:c4:ac:70:f5:30:99
Fingerprint (sha256): 5c:2f:70:98:ec:f3:19:ff:7e:81:de:38:1d:9e:e6:c7:fb:ae:8f:99:d3:9d:84:d3:52:e9:ec:89:b3:42:8b:eb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate admin.church.faithmarietta.org

47

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.church.faithmarietta.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.church.faithmarietta.org
admin.crawfordschools.org
admin.elportal.ljsd.org
admin.es.crawfordschools.org
admin.faithmarietta.org
admin.hubbardhighschool.org
admin.jordan.ljsd.org
admin.legacy.colegioedlio.org
admin.ljsd.org
admin.longfellow.bcsd.com
admin.macy.ljsd.org
admin.meadowgreen.ljsd.org
admin.ms.crawfordschools.org
admin.olita.ljsd.org
admin.ranchostarbuck.ljsd.org
admin.schmidelementaryschool.org
admin.school.faithmarietta.org
admin.spokanevalleytech.org
admin.valparaisocces.valpo.k12.in.us
admin.valparaisoces.valpo.k12.in.us
admin.valparaisohigh.valpo.k12.in.us
admin.valparaisomes.valpo.k12.in.us
admin.valparaisopes.valpo.k12.in.us
admin.valparaisotjms.valpo.k12.in.us
admin.valpo.k12.in.us
adultschool.portervilleschools.org
avrlacademy.org
cristoreysanjose.org
es.crawfordschools.org
hs.crawfordschools.org
longfellow.bcsd.com
mpusd.k12.ca.us
ms.crawfordschools.org
schmidelementaryschool.org
spokanevalleytech.org
valparaisobfms.valpo.k12.in.us
valparaisofles.valpo.k12.in.us
valparaisohes.valpo.k12.in.us
valparaisones.valpo.k12.in.us
valparaisotjes.valpo.k12.in.us
wnymcs.com
www.jhcommunityschool.org
www.mpusd.k12.ca.us
www.schmidelementaryschool.org
www.spokanevalleytech.org
www.valpo.k12.in.us
www.wnymcs.com

Other certificates including the domain name faithmarietta.org

(limited to 100 certificates)
admin.ljef.ljsd.org
admin.apr298.com
admin.allenparkschools.com
washington.bcsd.com
admin.calmecaacademy.com
admin.gsdacademy.com
admin.missionprep.org
pioneer.bcsd.com
admin.espanol.tecsalvord.org
www.calmecaacademy.com
1.southampton.k12.nj.us
admin.afantis.org
admin.afantis.org
www.kaumanaelementary.org
admin.church.faithmarietta.org
dimensions.org
faithmarietta.org
admin.avrlacademy.org
sierra.bcsd.com
admin.liholiho.org
sequoia.bcsd.com
1.southampton.k12.nj.us
fernhill.fgsdk12.org
www.crawfordschools.org
longfellow.bcsd.com
www.notredameparish.org
ces35.cliftonisd.org
1.southampton.k12.nj.us
www.missionprep.org
2.southampton.k12.nj.us
admin.casaloma.bcsd.com
www.siths.org
faithmarietta.org
admin.omardblaircharterschool.com
faithmarietta.org
116elementary.org
admin.coahomak12.org
adultschool.portervilleschools.org
admin.church.faithmarietta.org
admin.apr298.com
faithmarietta.org
admin.apr298.com
www.hilohs.k12.hi.us
www.eshelmanelementary.com
admin.tamura.fvsd.us
admin.apr298.com
longfellow.bcsd.com
cathedralschoolny.org
church.faithmarietta.org
admin.kauffmanschool.org
grandview.adsb.on.ca
northregionselpa.org
www.garvanzaelementary.org
www.cristoreysanjose.org
116elementary.org
admin.downtown.bcsd.com
admin.hamlincharter.org
admin.dimensions.org
faithmarietta.org
admin.bennie.allenparkschools.com
admin.cato.bcsd.com
faithmarietta.org
debusk.greenek12.org
www.dcsocal.org
admin.allenparkschools.com
faithmarietta.org
admin.mtvernon.bcsd.com
admin.allenparkschools.com
palmlanecharterschool.org
seal.bcsd.com
116elementary.org
admin.calmecaacademy.com
admin.apr298.com
admin.ranchostarbuck.ljsd.org
gsdacademy.com
116elementary.org
admin.dimensions.org
www.ps17queens.com
www.ryderschool.org
admin.compton.bcsd.com
hamlincharter.org
admin.bcsd.com
faithmarietta.org
www.faithmarietta.org
bes.bayfield.k12.co.us
admin.colegioedlio.org
pal.ldcsb.ca
1.southampton.k12.nj.us
admin.apr298.com
116elementary.org
admin.calmecaacademy.com
edtechteam.mx
admin.apr298.com
faithmarietta.org
admin.allenparkschools.com
sunnybraemiddleschool.org
1.southampton.k12.nj.us
admin.mhs.molineschools.org
1.southampton.k12.nj.us
admin.caes.iwcs.k12.va.us

Certificate

The complete raw certificate details for admin.church.faithmarietta.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290669488842782493316637827786056770892096
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-30 05:58:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-28 05:58:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.church.faithmarietta.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1294 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.church.faithmarietta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.crawfordschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.elportal.ljsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.es.crawfordschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.faithmarietta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hubbardhighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jordan.ljsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.legacy.colegioedlio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ljsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.longfellow.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.macy.ljsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.meadowgreen.ljsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ms.crawfordschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.olita.ljsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ranchostarbuck.ljsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.schmidelementaryschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.school.faithmarietta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.spokanevalleytech.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.valparaisocces.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.valparaisoces.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.valparaisohigh.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.valparaisomes.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.valparaisopes.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.valparaisotjms.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adultschool.portervilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avrlacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cristoreysanjose.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.crawfordschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.crawfordschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longfellow.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.crawfordschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schmidelementaryschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spokanevalleytech.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valparaisobfms.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valparaisofles.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valparaisohes.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valparaisones.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valparaisotjes.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wnymcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhcommunityschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mpusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schmidelementaryschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spokanevalleytech.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wnymcs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016589a0c31f0000040300463044022004d01f20af75f81ff3fd44548085fb4f3f7c1351a70cd8377e84948797d94e18022009be4c8e4dc42ccdea4cf3d25a72b5ecb0272bb61fbe64a8c6a5160defb8c282007600a4501269055a15545e6211ab37bc103f62ae5576a45e4b1714453e1b22106a250000016589a0c2cb0000040300473045022045a44301d38dddb0ca6b6e5b8f4e7533db9b5a80d8941cd16b5554c1343b3d69022100b8da527433aede9237cc40ef91c79256063d5f0b82a374d3274b377ab525f9e0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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