grupocedva.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:da:05:5d:cd:d5:51:a6:97:68:7f:81:a3:fe:48:57:11:4b was issued on by Let's Encrypt.

With 79 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=grupocedva.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:da:05:5d:cd:d5:51:a6:97:68:7f:81:a3:fe:48:57:11:4b
Serial Number (int): 335525546982426930339838649196814123077963
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6c:50:ab:92:50:1d:46:0a:ce:9d:33:13:b2:88:b2:0d:2a:c3:6a:3c
Fingerprint (sha256): 67:77:09:41:39:b0:d3:63:ae:13:eb:6d:e8:00:b2:5d:6a:9f:1b:1b:7b:f1:64:e1:f7:ac:6f:46:e0:85:81:fe

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate grupocedva.com

79

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for grupocedva.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aak8.org
admin.aak8.org
admin.arroyo.spusd.net
admin.blytheelementaryschool.wearecms.com
admin.clearcreekelementaryschool.wearecms.com
admin.cp.aak8.org
admin.elementary.plsd.k12.pa.us
admin.grade.warrentonschools.com
admin.grupocedva.com
admin.high.warrentonschools.com
admin.highschool.plsd.k12.pa.us
admin.hillside93.org
admin.kes.roaneschools.com
admin.kp.aak8.org
admin.lm.aak8.org
admin.marengo.spusd.net
admin.mb.aak8.org
admin.mec.roaneschools.com
admin.memphiseast.com
admin.mes.roaneschools.com
admin.mhs.roaneschools.com
admin.mms.roaneschools.com
admin.monterey.spusd.net
admin.mtes.roaneschools.com
admin.osms.roaneschools.com
admin.plsd.k12.pa.us
admin.prep.warrentonschools.com
admin.rchs.roaneschools.com
admin.rhs.roaneschools.com
admin.rms.roaneschools.com
admin.rves.roaneschools.com
admin.spms.spusd.net
admin.spusd.net
admin.warrentonschools.com
ardreykellhighschool.wearecms.com
arroyo.spusd.net
bes.roaneschools.com
cms.roaneschools.com
cp.aak8.org
dses.roaneschools.com
elementary.plsd.k12.pa.us
grade.warrentonschools.com
grupocedva.com
hhs.roaneschools.com
high.warrentonschools.com
highschool.plsd.k12.pa.us
hillside93.org
hms.roaneschools.com
kes.roaneschools.com
kp.aak8.org
lm.aak8.org
marengo.spusd.net
mb.aak8.org
mec.roaneschools.com
memphiseast.com
mes.roaneschools.com
mhs.roaneschools.com
mms.roaneschools.com
monterey.spusd.net
mtes.roaneschools.com
oshs.roaneschools.com
osms.roaneschools.com
plsd.k12.pa.us
prep.warrentonschools.com
rchs.roaneschools.com
rhs.roaneschools.com
rms.roaneschools.com
rves.roaneschools.com
spms.spusd.net
spusd.net
warrentonschools.com
www.aak8.org
www.arroyo.spusd.net
www.grupocedva.com
www.hillside93.org
www.memphiseast.com
www.plsd.k12.pa.us
www.spusd.net
www.warrentonschools.com

Other certificates including the domain name grupocedva.com

(limited to 100 certificates)
custom27.pwahosting.com
prep.warrentonschools.com
custom27.pwahosting.com
www.bluehazeelementaryschool.wsisd.com
custom27.pwahosting.com
grupocedva.com
admin.aceroschools.org
grupocedva.com
custom27.pwahosting.com
sre.dcs.edu
custom27.pwahosting.com
aak8.org
admin.grupocedva.com
grupocedva.com
aak8.org
admin.ramaroadelementaryschool.wearecms.com
admin.scs.ealas.org
custom27.pwahosting.com
aak8.org
aceroschools.org
aak8.org
memphiseast.com
admin.memphiseast.com
admin.asgl-lausd.org
aak8.org
admin.pinecrestmexico.com
aak8.org
www.grupocedva.com
admin.aceroschools.org
sussexcountycatholicschools.org
admin.mynhas.org
admin.aceroschools.org
custom27.pwahosting.com
admin.grupocedva.com
grupocedva.com
admin.highschool.mbgsd.org
admin.cf.aceroschools.org
aak8.org
custom27.pwahosting.com
admin.aceroschools.org
admin.swe.davidson.k12.nc.us
admin.bms.davidson.k12.nc.us
custom27.pwahosting.com
grupocedva.com
admin.aceroschools.org
admin.bes.roaneschools.com
aak8.org
admin.res.davidson.k12.nc.us
grupocedva.com
admin.oshs.roaneschools.com
aak8.org
admin.aceroschools.org
admin.sycamoreprep.org
admin.kindergartenacademy.mbgsd.org
aak8.org
alamo.otsegops.org
admin.aceroschools.org
admin.clearcreekelementaryschool.wearecms.com
custom27.pwahosting.com
admin.carmelmiddleschool.wearecms.com
sphs.spusd.net
admin.aimschools.org
grupocedva.com
aak8.org
aak8.org
www.arroyo.spusd.net
www.memphiseast.com
custom27.pwahosting.com
aak8.org

Certificate

The complete raw certificate details for grupocedva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335525546982426930339838649196814123077963
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-16 09:55:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-15 09:55:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'grupocedva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1837 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aak8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.aak8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.arroyo.spusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.blytheelementaryschool.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.clearcreekelementaryschool.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cp.aak8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.elementary.plsd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.grade.warrentonschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.grupocedva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.high.warrentonschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.highschool.plsd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hillside93.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kes.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kp.aak8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lm.aak8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.marengo.spusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mb.aak8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mec.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.memphiseast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mes.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mhs.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mms.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.monterey.spusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mtes.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.osms.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.plsd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.prep.warrentonschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rchs.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rhs.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rms.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rves.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.spms.spusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.spusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.warrentonschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ardreykellhighschool.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arroyo.spusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bes.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.aak8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dses.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elementary.plsd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grade.warrentonschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupocedva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhs.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'high.warrentonschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highschool.plsd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillside93.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hms.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kes.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kp.aak8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm.aak8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marengo.spusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mb.aak8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mec.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memphiseast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mes.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhs.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monterey.spusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtes.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oshs.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osms.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plsd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prep.warrentonschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rchs.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhs.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rms.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rves.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spms.spusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warrentonschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aak8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arroyo.spusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grupocedva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hillside93.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.memphiseast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plsd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warrentonschools.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a25c98de3000004030046304402207624c46b91609466c957847a822b1d743d818e5374307f0e13003b5d508b31dc02200d8185a6fbcc044b8fa40c4316f4848cdb3e5e5188a4dbae6688cc244762cdd6007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a25c98f450000040300483046022100e9b0942f39464439eda7295bcc2bab8404d43958c854c4bea6afe41f12e59796022100fd6348493dc32f82dd486789ecce4abb4df40c2033a9a94557081fce0e8f8354
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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