itchome.lpisd.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:54:8e:5b:4d:ee:99:2a:7c:2b:ae:fb:c2:f9:c9:35:08:95 was issued on by Let's Encrypt.

With 77 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=itchome.lpisd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:54:8e:5b:4d:ee:99:2a:7c:2b:ae:fb:c2:f9:c9:35:08:95
Serial Number (int): 290109801071704400321401589767699671877781
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e3:30:4d:78:c8:01:8c:dc:02:11:7e:a9:c1:34:7d:bf:3d:06:11:4b
Fingerprint (sha256): 66:cb:84:d3:11:90:17:73:32:03:f3:eb:7c:a3:c6:67:a7:1b:37:1d:74:f7:f0:dd:4c:e0:1b:57:c1:05:91:06

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate itchome.lpisd.org

77

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for itchome.lpisd.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.antonian.org
admin.bcsdk12.org
admin.bes.bcsdk12.org
admin.bhs.bcsdk12.org
admin.bms.bcsdk12.org
admin.ches.bcsdk12.org
admin.gckats.net
admin.kamiloikielementary.org
admin.osva.org
admin.radfordhs.org
admin.rosebudacademy.com
admin.sebastopolschools.org
admin.stmonicaces.org
admin.stmonicachs.org
admin.waikoloaschool.org
admin.wvhsmustangs.net
antonian.com
antonian.org
bes.bcsdk12.org
bhs.bcsdk12.org
bkr.lpisd.org
bms.bcsdk12.org
brookhaven.sebastopolschools.org
bse.lpisd.org
castle.sebastopolschools.org
ches.bcsdk12.org
cpe.lpisd.org
dwa.lpisd.org
hre.lpisd.org
itchome.lpisd.org
jre.lpisd.org
kamiloikielementary.org
lalc.arrowacademy.org
lpe.lpisd.org
lph.lpisd.org
lphome.lpisd.org
lpj.lpisd.org
lxe.lpisd.org
lxj.lpisd.org
mha.arrowacademy.org
osva.org
parkside.sebastopolschools.org
radfordhs.org
rosebudacademy.com
rze.lpisd.org
sebastopolschools.org
sos.arrowacademy.org
stmonicaces.org
stmonicachs.org
waikoloaschool.org
wvhsmustangs.net
www.antonian.com
www.antonian.org
www.bcsdk12.org
www.berkwood.org
www.blessinggodscreatures.com
www.corpuschristischool.com
www.discoveryk8.org
www.faith-first.org
www.flchurch.org
www.ghcsd.org
www.kamiloikielementary.org
www.lpisd.org
www.osva.org
www.radfordhs.org
www.rogersisd.org
www.rosebudacademy.com
www.sdgva.org
www.sebastopolschools.org
www.stasaints.net
www.stmonicaces.org
www.stmonicachs.org
www.stmonicahs.net
www.sttmschool.org
www.tuliaisd.net
www.waikoloaschool.org
www.wvhsmustangs.net

Other certificates including the domain name lpisd.org

(limited to 100 certificates)
lxj.lpisd.org
*.lpisd.org
admin.adultlearning.sunrisesd.ca
dwa.lpisd.org
adams.cleburne.k12.tx.us
admin.lms.davidson.k12.nc.us
eac.lpisd.org
www.lpisd.org
admin.aristoiclassical.org
www.colingles.edu.mx
lpj.lpisd.org
bse.lpisd.org
admin.aristoiclassical.org
castle.sebastopolschools.org
*.lpisd.org
jre.lpisd.org
www.sebastopolschools.org
sgmission.org
lxj.lpisd.org
lpisd.org
admin.nms.davidson.k12.nc.us
lph.lpisd.org
adams.cleburne.k12.tx.us
bhs.bcsdk12.org
*.lpisd.org
admin.bhs.bcsdk12.org
tac.lpisd.org
cpe.lpisd.org
hre.lpisd.org
*.lpisd.org
lifeschools.net
dwa.lpisd.org
lph.lpisd.org
lpe.lpisd.org
admin.fges.davidson.k12.nc.us
bcsdk12.org
mas.mpusd.net
lpisd.org
lxe.lpisd.org
jre.lpisd.org
brookhaven.sebastopolschools.org
lpe.lpisd.org
admin.adultlearning.sunrisesd.ca
admin.aristoiclassical.org
adams.cleburne.k12.tx.us
eac.lpisd.org
www.watongapublicschools.com
adams.cleburne.k12.tx.us
lpe.lpisd.org
*.lpisd.org
cpe.lpisd.org
itchome.lpisd.org
lph.lpisd.org
admin.aristoiclassical.org
hy.hpisd.org
bkr.lpisd.org
adams.cleburne.k12.tx.us
bkr.lpisd.org
admin.second.exteraschools.org
adams.cleburne.k12.tx.us
adams.cleburne.k12.tx.us
rze.lpisd.org
adams.cleburne.k12.tx.us
lpe.lpisd.org
bcsdk12.org
webmail.lpisd.org
lpisd.org
hac.lpisd.org
adams.cleburne.k12.tx.us
rze.lpisd.org
lxe.lpisd.org
rze.lpisd.org
adams.cleburne.k12.tx.us
adams.cleburne.k12.tx.us
sgmission.org
rosebudacademy.com
hre.lpisd.org
admin.antonian.org
lph.lpisd.org
admin.antonian.org
lgusd.org
hartorah.org
admin.oghs.davidson.k12.nc.us
vmhs.mcisd.net
lxj.lpisd.org
*.lpisd.org
es.glendaleacademy.org
lph.lpisd.org
admin.nes.davidson.k12.nc.us
northside.wisd.org
*.lpisd.org
*.lpisd.org
admin.aristoiclassical.org
lpisd.org
lpj.lpisd.org
*.lpisd.org
admin.highschool.mbgsd.org
castle.sebastopolschools.org
admin.kohalahs.org
hre.lpisd.org

Certificate

The complete raw certificate details for itchome.lpisd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290109801071704400321401589767699671877781
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-02 09:47:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-31 09:47:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'itchome.lpisd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1548 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.antonian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bcsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bes.bcsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bhs.bcsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bms.bcsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ches.bcsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gckats.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kamiloikielementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.osva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.radfordhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rosebudacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sebastopolschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stmonicaces.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stmonicachs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.waikoloaschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wvhsmustangs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antonian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antonian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bes.bcsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhs.bcsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bkr.lpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bms.bcsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brookhaven.sebastopolschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bse.lpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castle.sebastopolschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ches.bcsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpe.lpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dwa.lpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hre.lpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itchome.lpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jre.lpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamiloikielementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lalc.arrowacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpe.lpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lph.lpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lphome.lpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpj.lpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lxe.lpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lxj.lpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mha.arrowacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkside.sebastopolschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radfordhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosebudacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rze.lpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sebastopolschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sos.arrowacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmonicaces.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmonicachs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikoloaschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wvhsmustangs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antonian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antonian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkwood.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blessinggodscreatures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corpuschristischool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discoveryk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faith-first.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kamiloikielementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radfordhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rogersisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosebudacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sdgva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sebastopolschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stasaints.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmonicaces.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmonicachs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmonicahs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sttmschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuliaisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikoloaschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wvhsmustangs.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b17cd923400000403004730450220369fb3ee55e695f9ef0a6e46aff5f0ecbeda6818085feaf2d09eb79a799c85f3022100a405c7c550f18b721cb88a9645117a22597f7f5792bada64aa83319612612f0100760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b17cd9224000004030047304502205bced414fc6242b4c8461f0ee3a091d70242af6ad87c3286a44bb5df20b0e421022100cf9fa7b19bae7c337162cca1a9ef9fdcb8b700de76c70278cd805d383271c054
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00074f45b0bb4aa79377c452f1fa484e983e11a851fce8ae8c62b46fc8168388b2d205ec72a3f4a9d8914da4f1aa2afe309465580b5d6656a46f3e93f21e31c4b361f9a4d6b8807b1be84a2c7573ee1814507ba893485c36846beff91610ee1fb91d14ef9a34a59ef6a2a6df2f30c547bafe4a91a46f39aa8a223fd64e078a587816147117ccf1fcd31884bde0a480724082735991cd34bf4f02e13b1ee6ed5d534279e02a0623360adb929368842ef025c4fc2d61dfd394b7ba517e8bc7dab81fe0e7c82a2257c63099ff1ceffd40fd70afd9d980b40fc4df266c78e6e73edbca4be8f67ea67efd49b958f7c02182ee5a4906d1a5987d891ecf2207d968020082