admin.ges.dover.k12.nh.us

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:47:7b:56:dc:84:74:f4:5e:5f:6e:76:32:33:fd:cd:e7:a0 was issued on by Let's Encrypt.

With 58 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.ges.dover.k12.nh.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:47:7b:56:dc:84:74:f4:5e:5f:6e:76:32:33:fd:cd:e7:a0
Serial Number (int): 285660851900303175433267015035925476272032
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 06:4b:49:8c:e1:c2:38:fe:94:46:79:c2:60:cf:81:7e:c8:b0:66:92
Fingerprint (sha256): 65:7b:d6:b5:b9:b8:f3:b1:f4:a1:4c:db:3c:b6:a0:2f:da:25:b9:b3:69:e6:c7:78:72:bc:e2:77:81:bf:f6:70

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate admin.ges.dover.k12.nh.us

58

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.ges.dover.k12.nh.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.atc.mayfield.kyschools.us
admin.blhs.lex3.org
admin.cecvac.com
admin.ctc.dover.k12.nh.us
admin.edison.westfieldnjk12.org
admin.es.hoganprep.net
admin.franklin.westfieldnjk12.org
admin.ges.dover.k12.nh.us
admin.hoganprep.net
admin.hs.hoganprep.net
admin.hsap.mtpcsd.org
admin.jacksoncoschools.com
admin.jchs.jacksoncoschools.com
admin.jcms.jacksoncoschools.com
admin.jefferson.westfieldnjk12.org
admin.jhs.ballingerisd.net
admin.lincoln.westfieldnjk12.org
admin.mayfield.kyschools.us
admin.mckinley.westfieldnjk12.org
admin.ms.hoganprep.net
admin.pac.sboe.org
admin.rapk3.richardallenschools.com
admin.roosevelt.westfieldnjk12.org
admin.saintpiusx.com
admin.tamaques.westfieldnjk12.org
admin.washington.westfieldnjk12.org
admin.whs.westfieldnjk12.org
admin.wilson.westfieldnjk12.org
admin.wps.dover.k12.nh.us
cecvac.com
cse.cscisd.net
cshs.cscisd.net
ctc.dover.k12.nh.us
dbs.jacksoncoschools.com
dms.dover.k12.nh.us
dover.k12.nh.us
edison.westfieldnjk12.org
es.hoganprep.net
fmis.anacondaschools.org
ges.dover.k12.nh.us
ges.jacksoncoschools.com
hoganprep.net
hs.hoganprep.net
jacksoncoschools.com
jchs.jacksoncoschools.com
lwa-arts.org
ms.hoganprep.net
olneycharter.org
rapk3.richardallenschools.com
roosevelt.westfieldnjk12.org
tbjelc.henderson.kyschools.us
tcms.todd.kyschools.us
www.dhs.dover.k12.nh.us
www.dover.k12.nh.us
www.jacksoncoschools.com
www.olneycharter.org
www.richardallenschools.com
www.tuffree.org

Other certificates including the domain name dover.k12.nh.us

(limited to 100 certificates)
athletics.godleyisd.net
acsa17.com
admin.agl.sbcisd.net
admin.dover.k12.nh.us
dkies.org
bce.slvusd.org
admin.bellamy.dover.k12.nh.us
jacksoncoschools.com
ges.dover.k12.nh.us
www.goodshepherdschool.us
sacredheartacademyhempstead.org
webadmin.br.elanco.org
admin.dekalbbands.com
www.leavittms.net
www.parrottacademy.org
cp.athenscityschools.net
admin.proctor.cv.k12.ca.us
jacksoncoschools.com
ylms.org
admin.crps.coltsneckschools.org
admin.union.kyschools.us
admin.marquettecatholic.org
admin.lisanorth.lisaacademy.org
gradebooks.dover.k12.nh.us
admin.rowlettacademy.org
www.dms.dover.k12.nh.us
ctc.dover.k12.nh.us
www.dhs.dover.k12.nh.us
mtpcsd.org
www.collegeachievecentral.org
www.hirschhs.org
firstodessaacademy.com
admin.collegeachievecentral.org
admin.chabot.cv.k12.ca.us
www.panoramacityelementary.org
www.rowlettacademy.org
mail.dover.k12.nh.us
admin.uachs.org
admin.ahs.alcoaschools.net
admin.dover.k12.nh.us
gradebooks.dover.k12.nh.us
admin.wps.dover.k12.nh.us
chs.comalisd.org
www.ellwood.k12.pa.us
admin.magnoliaheights.com
dms.dover.k12.nh.us
cses.comalisd.org
gradebooks.dover.k12.nh.us
anacondaschools.org
admin.fuesd.org
camden.cuhsd.org
admin.independent.cv.k12.ca.us
www.junctioncity.k12.or.us
tpes.comalisd.org
www.btaallday.org
mail.dover.k12.nh.us
mes150.org
gradebooks.dover.k12.nh.us
admin.gctech.edu
gradebooks.dover.k12.nh.us
admin.bhs.ballingerisd.net
admin.jchs.jacksoncoschools.com
harlanfalcons.org
dover.k12.nh.us
admin.dkies.org
admin.evanshs.ccboe.net
admin.decaturclassical.org
www.lisaacademy.org
admin.creekside.cv.k12.ca.us
admin.todd.kyschools.us
admin.cvlcc.org
canyon.cv.k12.ca.us
admin.compton.bcsd.com
cdc.inglewoodusd.com
mvms.comalisd.org
*.dover.k12.nh.us
raak6.richardallenschools.com
admin.dms.dover.k12.nh.us
admin.hills.bcsd.com
tbjelc.henderson.kyschools.us
ebjshs.ebps.net
gradebooks.dover.k12.nh.us
admin.cdms.coltsneckschools.org
www.anacondaschools.org
admin.dover.k12.nh.us
www.crsd.k12.pa.us
www.glendorahigh.net
webadmin.nh.elanco.org
admin.bellamy.dover.k12.nh.us
www.dkies.org
admin.wps.dover.k12.nh.us
www.leavittms.net
admin.bce.slvusd.org
mountalverniaacademy.com
cumbresbogota.edu.co
acsa17.com
www.jonescollegeprep.org
www.bce.slvusd.org
admin.jcles.org
mhs.mayfield.kyschools.us

Certificate

The complete raw certificate details for admin.ges.dover.k12.nh.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQbTHb+2z7
rfYVCl+ph5m8FJJOEgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5pV3R4RBg
n18RTHnTD9fS27JxyeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGrmQF3Z/h2
e6StagubO+pVwFzG8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK7wAhJO8e
l2z375LDd2VIwrdWQP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlWZ1AdjOKf
RiY0ckFuu/DYkuvkNKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5Tu7zbek/
MR/JMR9nceWyZ2Mund+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzwWzBvTD8F
7q6ckUbIgpeo7stn7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuaivjW/P+Tm
64XjXNjP9F1W8+5tlcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ4Iudx/o3
Q4E2w6Aud9PYyV05pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/h0omUmCI
DiQVG30eHhb3OIP3bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUnohkUi6ik
D4me6o58sq/IQVmyem1M/E0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285660851900303175433267015035925476272032
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-06 10:00:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-05 10:00:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.ges.dover.k12.nh.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1483 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.atc.mayfield.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.blhs.lex3.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cecvac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ctc.dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.edison.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.es.hoganprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.franklin.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ges.dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hoganprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hs.hoganprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hsap.mtpcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jacksoncoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jchs.jacksoncoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jcms.jacksoncoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jefferson.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jhs.ballingerisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lincoln.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mayfield.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mckinley.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ms.hoganprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pac.sboe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rapk3.richardallenschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.roosevelt.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.saintpiusx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tamaques.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.washington.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.whs.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wilson.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wps.dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cecvac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cse.cscisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cshs.cscisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctc.dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbs.jacksoncoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dms.dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edison.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.hoganprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmis.anacondaschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ges.dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ges.jacksoncoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoganprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.hoganprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacksoncoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jchs.jacksoncoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lwa-arts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.hoganprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olneycharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapk3.richardallenschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roosevelt.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbjelc.henderson.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcms.todd.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dhs.dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jacksoncoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olneycharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richardallenschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuffree.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169f24ea75c0000040300473045022100e163693465a760b2ea578ded3737b1ad34f62644c2284d7974f5d7b836a6dead022011e3a5e4e7a3e05b27aa79c79d417b827bd2de1b954b6f6c5969ff83e972600c007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169f24ea9d2000004030046304402203be5ab8c12ec5fa890b1d90a7742b6841dbc00d1725033083e269b1279e2336b02200bdf133929557fe0787f022796e5d4977c2b189fb9e74e50b7f9d6865eaee6b1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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