goshenfriends.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d9:d6:95:73:f2:9f:2c:e3:e6:e7:90:93:92:7a:85:70:02 was issued on by Let's Encrypt.

With 77 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=goshenfriends.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d9:d6:95:73:f2:9f:2c:e3:e6:e7:90:93:92:7a:85:70:02
Serial Number (int): 335463362212153862331470408183566595092482
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e2:ac:ba:aa:d0:94:40:1e:74:b7:29:23:1b:11:6a:51:ad:ed:22:ec
Fingerprint (sha256): 6a:01:11:00:23:6b:ab:e7:c3:52:93:20:91:a4:09:3a:d2:04:e2:97:90:18:f7:2d:d1:34:b7:75:2c:d4:d0:4a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate goshenfriends.org

77

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for goshenfriends.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

145innovators.com
admin.145innovators.com
admin.ajh.brookhavenschools.org
admin.bes.brookhavenschools.org
admin.bhs.brookhavenschools.org
admin.bpeducationalacademy.org
admin.brookhavenschools.org
admin.btc.brookhavenschools.org
admin.carmarea.org
admin.cocisd.org
admin.des.mcduffie.k12.ga.us
admin.elementary.carmarea.org
admin.equityfellows.org
admin.fernwoodelementary.org
admin.fms.brookhavenschools.org
admin.goshenfriends.org
admin.jhes.jpsb.us
admin.jhhs.jpsb.us
admin.jhms.jpsb.us
admin.jpsb.us
admin.lms.brookhavenschools.org
admin.mcduffie.k12.ga.us
admin.mes.mcduffie.k12.ga.us
admin.middle.carmarea.org
admin.mme.brookhavenschools.org
admin.nes.mcduffie.k12.ga.us
admin.paoli.k12.ok.us
admin.qhs.jpsb.us
admin.seniorhigh.carmarea.org
admin.tes.mcduffie.k12.ga.us
admin.ths.mcduffie.k12.ga.us
admin.tmms.mcduffie.k12.ga.us
admin.vhaelementary.org
admin.whs.jpsb.us
admin.wpaces.org
ajh.brookhavenschools.org
bes.brookhavenschools.org
bhs.brookhavenschools.org
bpeducationalacademy.org
btc.brookhavenschools.org
des.mcduffie.k12.ga.us
elementary.carmarea.org
fernwoodelementary.org
fms.brookhavenschools.org
goshenfriends.org
jhes.jpsb.us
jhhs.jpsb.us
jhms.jpsb.us
jpsb.us
lms.brookhavenschools.org
mcduffie.k12.ga.us
mes.mcduffie.k12.ga.us
middle.carmarea.org
mme.brookhavenschools.org
nalaatsi.comoxvalleyschools.ca
nes.mcduffie.k12.ga.us
paoli.k12.ok.us
qhs.jpsb.us
seniorhigh.carmarea.org
tes.mcduffie.k12.ga.us
ths.mcduffie.k12.ga.us
tmms.mcduffie.k12.ga.us
vhaelementary.org
whs.jpsb.us
wpaces.org
www.145innovators.com
www.bpeducationalacademy.org
www.brookhavenschools.org
www.carmarea.org
www.equityfellows.org
www.fernwoodelementary.org
www.goshenfriends.org
www.jpsb.us
www.mcduffie.k12.ga.us
www.paoli.k12.ok.us
www.vhaelementary.org
www.wpaces.org

Other certificates including the domain name goshenfriends.org

(limited to 100 certificates)
www.uainstitute.org
145innovators.com
piu.ldcsb.ca
goshenfriends.org
goshenfriends.org
admin.goshenfriends.org
nalaatsi.comoxvalleyschools.ca
admin.uainstitute.org
145innovators.com
www.vicischools.k12.ok.us
ined.comoxvalleyschools.ca

Certificate

The complete raw certificate details for goshenfriends.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335463362212153862331470408183566595092482
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-20 01:05:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-19 01:05:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'goshenfriends.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1853 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '145innovators.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.145innovators.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ajh.brookhavenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bes.brookhavenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bhs.brookhavenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bpeducationalacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.brookhavenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.btc.brookhavenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.carmarea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cocisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.des.mcduffie.k12.ga.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.elementary.carmarea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.equityfellows.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fernwoodelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fms.brookhavenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.goshenfriends.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jhes.jpsb.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jhhs.jpsb.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jhms.jpsb.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jpsb.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lms.brookhavenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mcduffie.k12.ga.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mes.mcduffie.k12.ga.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.middle.carmarea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mme.brookhavenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nes.mcduffie.k12.ga.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.paoli.k12.ok.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.qhs.jpsb.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.seniorhigh.carmarea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tes.mcduffie.k12.ga.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ths.mcduffie.k12.ga.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tmms.mcduffie.k12.ga.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.vhaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.whs.jpsb.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wpaces.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajh.brookhavenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bes.brookhavenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhs.brookhavenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bpeducationalacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btc.brookhavenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'des.mcduffie.k12.ga.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elementary.carmarea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fernwoodelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fms.brookhavenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goshenfriends.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhes.jpsb.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhhs.jpsb.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhms.jpsb.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jpsb.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lms.brookhavenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcduffie.k12.ga.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mes.mcduffie.k12.ga.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'middle.carmarea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mme.brookhavenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nalaatsi.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nes.mcduffie.k12.ga.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paoli.k12.ok.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qhs.jpsb.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seniorhigh.carmarea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tes.mcduffie.k12.ga.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ths.mcduffie.k12.ga.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmms.mcduffie.k12.ga.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vhaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whs.jpsb.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpaces.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.145innovators.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bpeducationalacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brookhavenschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carmarea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equityfellows.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fernwoodelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goshenfriends.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jpsb.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcduffie.k12.ga.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paoli.k12.ok.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vhaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wpaces.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d4c6a59c20000040300483046022100f2741cb54a8dcdec7863723fd50e1819b3244943757340dff8687fe909d014b3022100cb15fc3d93c249266bf5dcce5384ce014b8d3834b7393cd1c8341204c51c03bf007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d4c6a57ef00000403004730450221009350a44f59a6e8ec9f4d6741fdfffb3b7efb4237a90a37ff2d9e1f885ab0f9eb0220625e196d40efbca06db9031195fe36ab13a733552652d2e5ab98fd7d432b06bf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003327f3a5a3168d628b6f950b8d8cbd6f2904c31c5c0486cf8a88c8b1db1c5204ee567a01793af9e355cc83adee6a5e1445eb2cc0cb0967061799ccdf768d464b779600a9940d86ed0997f1722234583cb2e1e3efbcc7735d7a54f0ab1e1e6b94f4698519728c7af3b90454e0917b857dc3dfce655e7988a47376bde924b4ebdee3b677710544d77f674fd55c2b3a401a0fcff73c6984bd334b7c615930665adcb948dae56e5be7be3857cd3a35dee301c4fe1af8490a80395b42cc4cfc21ea68d55ff9139b5f5ebc51a1ad7591bbf048a499dc4b9529c207c2e4782f0b959eeb5040e1f1a1e18a2a926f9619fe4ece5aba6316594b1b81883d79835b2895fd88