www.ascensionoakpark.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d4:51:42:fb:33:5d:30:d8:ca:be:99:a7:d6:b1:ee:de:29 was issued on by Let's Encrypt.

With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ascensionoakpark.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d4:51:42:fb:33:5d:30:d8:ca:be:99:a7:d6:b1:ee:de:29
Serial Number (int): 333584734836725223641356427685207777140265
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cf:f5:0f:7f:4b:09:fe:ef:25:34:b9:ac:c3:9d:f1:ad:c7:ee:bf:c3
Fingerprint (sha256): 5e:9b:88:2e:a9:3e:20:2f:fa:e3:44:d4:fc:10:f7:a0:9d:0e:79:2e:cb:d5:b6:27:64:7d:ce:39:96:47:48:9d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ascensionoakpark.com

72

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ascensionoakpark.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.ascensionoakpark.com
admin.bridges.fmsd.org
admin.cca.fmsd.org
admin.colegiolospinos.edu.mx
admin.dahl.fmsd.org
admin.fmsd.org
admin.franklin.fmsd.org
admin.goldenoakmontessori.org
admin.hellyer.fmsd.org
admin.kennedy.fmsd.org
admin.lairon.fmsd.org
admin.lknc.org
admin.losarboles.fmsd.org
admin.mckinley.fmsd.org
admin.meadows.fmsd.org
admin.nstaracademy.org
admin.olmbulldogs.com
admin.olmcath.org
admin.pcschools.org
admin.ramblewood.fmsd.org
admin.santee.fmsd.org
admin.school.ascensionoakpark.com
admin.senahigh.com
admin.shirakawa.fmsd.org
admin.stonegate.fmsd.org
admin.sylvandale.fmsd.org
admin.watervlietps.org
admin.windmillsprings.fmsd.org
ascensionoakpark.com
bridges.fmsd.org
cca.fmsd.org
colegiolospinos.edu.mx
dahl.fmsd.org
franklin.fmsd.org
goldenoakmontessori.org
hellyer.fmsd.org
kennedy.fmsd.org
lairon.fmsd.org
lknc.org
losarboles.fmsd.org
mckinley.fmsd.org
meadows.fmsd.org
mhs.mtsd-vt.org
mms.mtsd-vt.org
nstaracademy.org
olmbulldogs.com
olmcath.org
pcschools.org
ramblewood.fmsd.org
santee.fmsd.org
shirakawa.fmsd.org
stonegate.fmsd.org
sylvandale.fmsd.org
tekoacharterschool.org
watervlietps.org
windmillsprings.fmsd.org
www.ascensionoakpark.com
www.colegiolospinos.edu.mx
www.fmsd.org
www.goldenoakmontessori.org
www.lknc.org
www.mtsd-vt.org
www.nstaracademy.org
www.olmbulldogs.com
www.olmcath.org
www.pcschools.org
www.senahigh.com
www.tekoacharterschool.org
www.watervlietps.org
zhs.zcs.k12.in.us
zms.zcs.k12.in.us
zwm.zcs.k12.in.us

Other certificates including the domain name ascensionoakpark.com

(limited to 100 certificates)
ascensionoakpark.com
admin.ascensionoakpark.com
ascensionoakpark.com
ascensionoakpark.com
admin.ascensionoakpark.com
admin.bme.zcs.k12.in.us
ascensionoakpark.com
ascensionoakpark.com
www.lacpacademy.org
ascensionoakpark.com
ascensionoakpark.com
admin.mes.mtsd-vt.org
school.ascensionoakpark.com
admin.ascensionoakpark.com
admin.ascensionoakpark.com
lacpacademy.org
admin.ascensionoakpark.com
school.ascensionoakpark.com
admin.ascensionoakpark.com
ascensionoakpark.com
www.ascensionoakpark.com
www.ascensionoakpark.com
admin.school.ascensionoakpark.com
ascensionoakpark.com
dev601.ascensionoakpark.com
admin.ascensionoakpark.com
ascensionoakpark.com
ascensionoakpark.com
admin.ascensionoakpark.com
school.ascensionoakpark.com
ascensionoakpark.com
admin.ascensionoakpark.com
admin.ascensionoakpark.com
ascensionoakpark.com
ascensionoakpark.com
admin.tekoacharterschool.org
ascensionoakpark.com
ascensionoakpark.com
www.ascensionoakpark.com
school.ascensionoakpark.com

Certificate

The complete raw certificate details for www.ascensionoakpark.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQbTHb+2z7
rfYVCl+ph5m8FJJOEgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5pV3R4RBg
n18RTHnTD9fS27JxyeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGrmQF3Z/h2
e6StagubO+pVwFzG8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK7wAhJO8e
l2z375LDd2VIwrdWQP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlWZ1AdjOKf
RiY0ckFuu/DYkuvkNKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5Tu7zbek/
MR/JMR9nceWyZ2Mund+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzwWzBvTD8F
7q6ckUbIgpeo7stn7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuaivjW/P+Tm
64XjXNjP9F1W8+5tlcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ4Iudx/o3
Q4E2w6Aud9PYyV05pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/h0omUmCI
DiQVG30eHhb3OIP3bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUnohkUi6ik
D4me6o58sq/IQVmyem1M/E0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333584734836725223641356427685207777140265
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-02 01:07:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-30 01:07:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ascensionoakpark.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1543 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ascensionoakpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bridges.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cca.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.colegiolospinos.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dahl.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.franklin.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.goldenoakmontessori.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hellyer.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kennedy.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lairon.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lknc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.losarboles.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mckinley.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.meadows.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nstaracademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.olmbulldogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.olmcath.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pcschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ramblewood.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.santee.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.school.ascensionoakpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.senahigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.shirakawa.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stonegate.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sylvandale.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.watervlietps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.windmillsprings.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ascensionoakpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridges.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cca.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colegiolospinos.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dahl.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franklin.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldenoakmontessori.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellyer.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kennedy.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lairon.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lknc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losarboles.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mckinley.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meadows.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhs.mtsd-vt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.mtsd-vt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nstaracademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olmbulldogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olmcath.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramblewood.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santee.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shirakawa.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stonegate.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sylvandale.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tekoacharterschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watervlietps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windmillsprings.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ascensionoakpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegiolospinos.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldenoakmontessori.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lknc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtsd-vt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nstaracademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olmbulldogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olmcath.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.senahigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tekoacharterschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.watervlietps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhs.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zms.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zwm.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016bb0704e450000040300483046022100dacf826dc508a6b25f3f468cdf7633dc720ecc667509acf5fe2aacd037539ae3022100cdb92f8c6b6c1e9bdae208e5e26aa98fa89ff2eb0ac115e6fe4a643d7097ea48007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016bb0704e600000040300483046022100b5d6840b4fd64ed6c3241ae7fd4656fc5a295b1c671f4371999b473af81ab3fb0221009dae0fbdace2bf39d41c07d7e6550dc3662c5194d63817857ce3b838c13deda5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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