admin.aquinashs.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fe:4a:45:01:b0:5c:92:27:60:4a:08:0d:1d:27:31:3e:1f was issued on by Let's Encrypt.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.aquinashs.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fe:4a:45:01:b0:5c:92:27:60:4a:08:0d:1d:27:31:3e:1f
Serial Number (int): 347867300167625647853454035235737510690335
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 11:22:64:3f:28:03:27:dd:75:c2:88:d4:ab:29:1a:a9:57:cb:6c:5b
Fingerprint (sha256): 6b:c3:75:8b:2d:a6:99:49:46:19:be:50:0b:4b:fc:ba:50:d2:2e:8f:89:f1:18:66:93:6c:9f:35:d5:16:3b:80

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate admin.aquinashs.net

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.aquinashs.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.aquinashs.net
admin.artsinactioncharter.org
admin.athletics.aquinashs.net
admin.balloustay.com
admin.bitely.garvey.k12.ca.us
admin.carbonvalleyacademy.org
admin.ccs.coloma.org
admin.ces.coloma.org
admin.chs.coloma.org
admin.cis.coloma.org
admin.cjh.coloma.org
admin.clanyc.org
admin.dewey.garvey.k12.ca.us
admin.emerson.garvey.k12.ca.us
admin.garvey.k12.ca.us
admin.garveyint.garvey.k12.ca.us
admin.hillcrest.garvey.k12.ca.us
admin.indianola.k12.ok.us
admin.kellycollegeprep.org
admin.mvista.garvey.k12.ca.us
admin.olgscott.net
admin.pac.aquinashs.net
admin.prospectridgeacademy.org
admin.rice.garvey.k12.ca.us
admin.sanchez.garvey.k12.ca.us
admin.st.louisschool.org
admin.stlouisschool.org
admin.templeint.garvey.k12.ca.us
admin.validatingaffirmingschools.org
admin.waldorfatlanta.org
admin.willard.garvey.k12.ca.us
artsinactioncharter.org
athletics.aquinashs.net
balloustay.com
bitely.garvey.k12.ca.us
carbonvalleyacademy.org
ccs.coloma.org
ces.coloma.org
chs.coloma.org
cis.coloma.org
cjh.coloma.org
clanyc.org
coloma.org
dewey.garvey.k12.ca.us
dougherty.k12.ga.us
durangoathletics.durangoschools.org
emerson.garvey.k12.ca.us
garveyint.garvey.k12.ca.us
hillcrest.garvey.k12.ca.us
indianola.k12.ok.us
jcchs.org
kellycollegeprep.org
mvista.garvey.k12.ca.us
pac.aquinashs.net
peterson.mx
rice.garvey.k12.ca.us
sanchez.garvey.k12.ca.us
saspasadena.org
spencemanagementgroup.com
st.louisschool.org
templeint.garvey.k12.ca.us
validatingaffirmingschools.org
willard.garvey.k12.ca.us
www.aquinashs.net
www.artsinactioncharter.org
www.balloustay.com
www.carbonvalleyacademy.org
www.ccs.coloma.org
www.clanyc.org
www.coloma.org
www.garvey.k12.ca.us
www.gesd.us
www.indianola.k12.ok.us
www.jcchs.org
www.kellycollegeprep.org
www.olgscott.net
www.peterson.mx
www.prospectridgeacademy.org
www.pvphs.com
www.richland.k12.mo.us
www.saspasadena.org
www.st.louisschool.org
www.stlouisschool.org
www.validatingaffirmingschools.org
www.waldorfatlanta.org

Other certificates including the domain name aquinashs.net

(limited to 100 certificates)
mail.sbdiocese.org
scalefundercert.net
admin.amschool.edu.sv
admin.amschool.edu.sv
scalefundercert.net
scalefundercert.net
mail.sbdiocese.org
scalefundercert.net
admin.ces.coloma.org
scalefundercert.net
admin.amschool.edu.sv
scalefundercert.net
admin.amschool.edu.sv
athletics.aquinashs.net
mail.sbdiocese.org
mail.sbdiocese.org
admin.arete.prsd.us
www.aquinashs.net
admin.amschool.edu.sv
admin.artsinactioncharter.org
scalefundercert.net
scalefundercert.net
scalefundercert.net
mis.edu.mx
admin.stggcs.org
admin.pride.lindenusd.com
www.bhswca.com
www.clanyc.org
admin.amschool.edu.sv
athletics.aquinashs.net
scalefundercert.net
scalefundercert.net
scalefundercert.net
scalefundercert.net
scalefundercert.net
scalefundercert.net
lvmhs.lucernevalleyunified.org
scalefundercert.net
mail.sbdiocese.org
admin.amschool.edu.sv
scalefundercert.net
admin.amschool.edu.sv
mail.sbdiocese.org
mail.sbdiocese.org
acsaregionxv.org
admin.aquinashs.net
admin.bitely.garvey.k12.ca.us
scalefundercert.net
scalefundercert.net
scalefundercert.net
scalefundercert.net
scalefundercert.net
www.carbonvalleyacademy.org
scalefundercert.net
scalefundercert.net
peterson.mx
es.notredameacademy.org
vs.aceroschools.org
scalefundercert.net
mail.sbdiocese.org
aceroschools.org
admin.artsinactioncharter.org
scalefundercert.net
www.somonauk.net
mail.sbdiocese.org
mail.sbdiocese.org
mail.sbdiocese.org
sfunder6cert.net
www.st.louisschool.org
scalefundercert.net
admin.cove.prioritycharterschools.org
admin.amschool.edu.sv
scalefundercert.net
mail.sbdiocese.org
admin.sfxcatholicschool.org
scalefundercert.net
scalefundercert.net
mail.sbdiocese.org
scalefundercert.net
workstudyicacristorey.org
scalefundercert.net
en-merida.mis.edu.mx
scalefundercert.net
admin.cfn.edu.mx
pac.aquinashs.net
mail.sbdiocese.org
admin.eagles.lucernevalleyunified.org
mail.sbdiocese.org
admin.amschool.edu.sv
scalefundercert.net
admin.amschool.edu.sv
admin.family.mypagosaschools.com
admin.amschool.edu.sv
scalefundercert.net
admin.socialjusticemclc.org
claytonvalley.org
admin.aquinashs.net
scalefundercert.net
mail.sbdiocese.org
spencemanagementgroup.com

Certificate

The complete raw certificate details for admin.aquinashs.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 347867300167625647853454035235737510690335
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-29 09:47:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-27 09:47:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.aquinashs.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2034 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.aquinashs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.artsinactioncharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.athletics.aquinashs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.balloustay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bitely.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.carbonvalleyacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ccs.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ces.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.chs.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cis.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cjh.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.clanyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dewey.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.emerson.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.garveyint.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hillcrest.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.indianola.k12.ok.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kellycollegeprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mvista.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.olgscott.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pac.aquinashs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.prospectridgeacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rice.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sanchez.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.st.louisschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stlouisschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.templeint.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.validatingaffirmingschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.waldorfatlanta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.willard.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artsinactioncharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athletics.aquinashs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balloustay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitely.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carbonvalleyacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccs.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ces.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chs.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cis.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cjh.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clanyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dewey.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dougherty.k12.ga.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'durangoathletics.durangoschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emerson.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garveyint.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillcrest.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indianola.k12.ok.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcchs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kellycollegeprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvista.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pac.aquinashs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peterson.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rice.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanchez.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saspasadena.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spencemanagementgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st.louisschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'templeint.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'validatingaffirmingschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willard.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aquinashs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artsinactioncharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.balloustay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carbonvalleyacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccs.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clanyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gesd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indianola.k12.ok.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jcchs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kellycollegeprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olgscott.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peterson.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prospectridgeacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pvphs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richland.k12.mo.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saspasadena.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st.louisschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stlouisschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.validatingaffirmingschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waldorfatlanta.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e1721007b0000040300473045022100cac91ad948d5f9ce8e6be04ceb443d4fa00c48dbbc49776f3c7705ec5ee33570022009b4402cb4651bc2e458db67e0cafff265ee951b0c1ff4b90927b82ee307f207007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e172100710000040300463044022040ce1d211bbdf6f102521b9f11500d4831511af51db453f57c0941feee8823e802202d8db495e03946585196f291a6ab09f0844994fdca5f152f29bdbc9941696bdb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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