www.windhamraymondschools.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:98:79:e2:46:d9:ac:85:33:98:ea:b7:ec:41:4d:27:c9:9a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.windhamraymondschools.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:98:79:e2:46:d9:ac:85:33:98:ea:b7:ec:41:4d:27:c9:9a
Serial Number (int): 313221789050857966051667127387545187895706
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 31:a3:df:cd:f4:fb:ca:8f:2b:5d:c4:c1:be:e9:2b:65:8c:49:f7:82
Fingerprint (sha256): 65:b0:94:4f:5a:89:ab:28:b1:fa:df:18:cd:66:3f:f3:96:ab:bc:af:59:25:f1:bb:16:e6:86:e2:be:e0:de:6b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.windhamraymondschools.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.windhamraymondschools.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

academy.ndasla.org
admin.academy.ndasla.org
admin.alessandrohighschool.org
admin.bishopconatyloretto.org
admin.blackwellhornets.org
admin.cen.sville.us
admin.cham.sville.us
admin.ches.pgsd.ms
admin.cms.pgsd.ms
admin.concordiahigh.com
admin.cpes.pgsd.ms
admin.edhs.org
admin.ees.pgsd.ms
admin.ges.pgsd.ms
admin.ghs.pgsd.ms
admin.gil.sville.us
admin.gms.pgsd.ms
admin.hjh.sville.us
admin.hook.sville.us
admin.jces.pgsd.ms
admin.jes.pgsd.ms
admin.les.pgsd.ms
admin.lloydehs.org
admin.mbes.pgsd.ms
admin.miracostahigh.org
admin.oc.pgsd.ms
admin.ofarrellschool.org
admin.orangeglenhigh.org
admin.petroliacisd.org
admin.rocklinacademy.com
admin.shs.sville.us
admin.sjva.net
admin.stanthonydallas.org
alessandrohighschool.org
bishopconatyloretto.org
blackwellhornets.org
cen.sville.us
centinelavalleyaltschools.org
cham.sville.us
ches.pgsd.ms
cms.pgsd.ms
cnes.pgsd.ms
cpes.pgsd.ms
edhs.org
ees.pgsd.ms
franklin.loomis-usd.k12.ca.us
ges.pgsd.ms
ghs.pgsd.ms
gil.sville.us
gms.pgsd.ms
hjh.sville.us
hook.sville.us
jces.pgsd.ms
jes.pgsd.ms
les.pgsd.ms
lloydehs.org
loomisgrammar.loomis-usd.k12.ca.us
mbes.pgsd.ms
miracostahigh.org
oc.pgsd.ms
ofarrellschool.org
ophir.loomis-usd.k12.ca.us
orangeglenhigh.org
penryn.loomis-usd.k12.ca.us
petroliacisd.org
petroliaisd.org
phs.petroliacisd.org
pjh.petroliaisd.org
placer.loomis-usd.k12.ca.us
powers.loomis-usd.k12.ca.us
rocklinacademy.com
shs.sville.us
sjva.net
stanthonydallas.org
sville.us
windhamraymondschools.org
www.alessandrohighschool.org
www.bishopconatyloretto.org
www.blackwellhornets.org
www.centinelavalleyaltschools.org
www.concordiahigh.com
www.edhs.org
www.lloydehs.org
www.loomis-usd.k12.ca.us
www.materdei.org
www.miracostahigh.org
www.ofarrellschool.org
www.orangeglenhigh.org
www.petroliacisd.org
www.petroliaisd.org
www.redhillschool.org
www.rocklinacademy.com
www.rocklinacademy.org
www.rsu14.org
www.sjva.net
www.stanthonydallas.org
www.sville.us
www.varnett.com
www.varnett.org
www.windhamraymondschools.org

Other certificates including the domain name windhamraymondschools.org

(limited to 100 certificates)
wps.windhamraymondschools.org
admin.dm.aceroschools.org
ex2010.ad.wsd.windham.k12.me.us
www.cfn.edu.mx
ex2010.ad.wsd.windham.k12.me.us
www.windham.k12.me.us
admin.wjh.wintersisd.org
www.windham.k12.me.us
admin.alamo.otsegops.org
ic.windhamraymondschools.org
academy.ndasla.org
admin.wcms.mpusd.net
admin.pas.pusdschools.net
admin.alamo.otsegops.org
owa.windhamraymondschools.org
admin.jsms.rsu14.org
www.windham.k12.me.us
admin.wjh.wintersisd.org
admin.cathedralchapelschool.org
eastprimary.kiskiarea.org
admin.res.rsu14.org
academy.ndasla.org
admin.hg.aceroschools.org
admin.aspiraacademy.org
admin.alamo.otsegops.org
admin.lng.otsegops.org
ic.windhamraymondschools.org
admin.op.aceroschools.org
windhamraymondschools.org
admin.whs.rsu14.org
www.rsu14.org
www.otsegops.org
ex2010.ad.wsd.windham.k12.me.us
www.windhamraymondschools.org
admin.alamo.otsegops.org
ohs.otsegops.org
shs.smithvilleisd.org
admin.athletics.rsu14.org
mailgateway.rsu14.org
admin.echs.woccisd.net
ex2010.ad.wsd.windham.k12.me.us
admin.gaines.pusdschools.net
shs.mpusd.net
admin.alamo.otsegops.org
northprimary.kiskiarea.org
admin.alamo.otsegops.org
admin.athletics.rsu14.org
admin.phs.pusdschools.net
acsaregionxv.org
laicharter.org
bchs.ppsb.org
admin.aspiraacademy.org
admin.stfinnbarr.org
acsaregionxv.org
jsms.rsu14.org
acsaregionxv.org
admin.alamo.otsegops.org
admin.rsu14.org
admin.res.rsu14.org
ic.windhamraymondschools.org
www.windham.k12.me.us
owa.windhamraymondschools.org
admin.dm.aceroschools.org
admin.aspiraacademy.org
admin.alamo.otsegops.org
jsms.rsu14.org
www.windham.k12.me.us
merida.mis.edu.mx
aac.woccisd.net
aac.woccisd.net
www.otsegops.org
ic.windhamraymondschools.org
echs.lavegaisd.org
aac.woccisd.net
admin.alamo.otsegops.org
admin.whs.rsu14.org
lng.otsegops.org
echs.lavegaisd.org
ex2010.ad.wsd.windham.k12.me.us
ic.windhamraymondschools.org

Certificate

The complete raw certificate details for www.windhamraymondschools.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313221789050857966051667127387545187895706
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-13 01:51:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-11 01:51:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.windhamraymondschools.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2070 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academy.ndasla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.academy.ndasla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.alessandrohighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bishopconatyloretto.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.blackwellhornets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cen.sville.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cham.sville.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ches.pgsd.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cms.pgsd.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.concordiahigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cpes.pgsd.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.edhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ees.pgsd.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ges.pgsd.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ghs.pgsd.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gil.sville.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gms.pgsd.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hjh.sville.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hook.sville.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jces.pgsd.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jes.pgsd.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.les.pgsd.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lloydehs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mbes.pgsd.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.miracostahigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.oc.pgsd.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ofarrellschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.orangeglenhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.petroliacisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rocklinacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.shs.sville.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sjva.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stanthonydallas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alessandrohighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bishopconatyloretto.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackwellhornets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cen.sville.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centinelavalleyaltschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cham.sville.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ches.pgsd.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.pgsd.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnes.pgsd.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpes.pgsd.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ees.pgsd.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franklin.loomis-usd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ges.pgsd.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghs.pgsd.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gil.sville.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gms.pgsd.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hjh.sville.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hook.sville.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jces.pgsd.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jes.pgsd.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'les.pgsd.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lloydehs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loomisgrammar.loomis-usd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbes.pgsd.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miracostahigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oc.pgsd.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofarrellschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ophir.loomis-usd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orangeglenhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penryn.loomis-usd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petroliacisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petroliaisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phs.petroliacisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pjh.petroliaisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placer.loomis-usd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powers.loomis-usd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocklinacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shs.sville.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjva.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanthonydallas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sville.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windhamraymondschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alessandrohighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bishopconatyloretto.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blackwellhornets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centinelavalleyaltschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.concordiahigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lloydehs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loomis-usd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.materdei.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miracostahigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ofarrellschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orangeglenhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.petroliacisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.petroliaisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redhillschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocklinacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocklinacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rsu14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjva.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanthonydallas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sville.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.varnett.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.varnett.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.windhamraymondschools.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000163f70e57c10000040300483046022100c7f44bcd57cc1491e9907b79f9cc49b976ea655f611c4af16948c5c8badb3e0d022100be970b3321ed82ac46b0fea8a8ccd399058bf6a0feabd35888cd503cdeed7a70007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000163f70e57d80000040300473045022100ad5dc2f7c08b0d7a3fe8bca712a2f7f73afcf3869086b9ad6d5170b08da02fe40220748d49b99a177ba2992671f657104e151cf03db52f0f831dcdb94bc16de559df
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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