www.richardallenschools.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c9:79:97:14:39:65:7c:e7:2e:2b:f8:27:67:b0:4d:61:16 was issued on by Let's Encrypt.

With 53 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.richardallenschools.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c9:79:97:14:39:65:7c:e7:2e:2b:f8:27:67:b0:4d:61:16
Serial Number (int): 329895234580900590996461703244301760028950
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a3:2e:64:a6:34:74:b8:6e:fd:f5:d7:7c:b2:07:2c:2a:6c:bb:3b:48
Fingerprint (sha256): 6d:46:b0:d8:05:fd:4c:88:fb:29:9a:bc:29:f2:db:0b:9a:83:04:e2:70:d1:e9:c2:bd:9e:fb:d6:09:7a:09:9d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.richardallenschools.com

53

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.richardallenschools.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.atc.mayfield.kyschools.us
admin.blhs.lex3.org
admin.cecvac.com
admin.ctc.dover.k12.nh.us
admin.edison.westfieldnjk12.org
admin.es.hoganprep.net
admin.franklin.westfieldnjk12.org
admin.hoganprep.net
admin.hs.hoganprep.net
admin.hsap.mtpcsd.org
admin.jacksoncoschools.com
admin.jchs.jacksoncoschools.com
admin.jcms.jacksoncoschools.com
admin.jefferson.westfieldnjk12.org
admin.jhs.ballingerisd.net
admin.lincoln.westfieldnjk12.org
admin.mayfield.kyschools.us
admin.mckinley.westfieldnjk12.org
admin.ms.hoganprep.net
admin.pac.sboe.org
admin.rapk3.richardallenschools.com
admin.roosevelt.westfieldnjk12.org
admin.saintpiusx.com
admin.tamaques.westfieldnjk12.org
admin.washington.westfieldnjk12.org
admin.whs.westfieldnjk12.org
admin.wilson.westfieldnjk12.org
cecvac.com
cse.cscisd.net
cshs.cscisd.net
ctc.dover.k12.nh.us
dbs.jacksoncoschools.com
dms.dover.k12.nh.us
dover.k12.nh.us
edison.westfieldnjk12.org
es.hoganprep.net
fmis.anacondaschools.org
ges.dover.k12.nh.us
ges.jacksoncoschools.com
hoganprep.net
hs.hoganprep.net
jacksoncoschools.com
jchs.jacksoncoschools.com
lwa-arts.org
ms.hoganprep.net
olneycharter.org
rapk3.richardallenschools.com
roosevelt.westfieldnjk12.org
www.dhs.dover.k12.nh.us
www.dover.k12.nh.us
www.olneycharter.org
www.richardallenschools.com
www.tuffree.org

Other certificates including the domain name richardallenschools.com

(limited to 100 certificates)
admin.raak6.richardallenschools.com
admin.dover.k12.nh.us
gutierrez.hcisd.org
admin.rap48.richardallenschools.com
ges.dover.k12.nh.us
webadmin.br.elanco.org
gfes.comalisd.org
admin.rowlettacademies.org
jacksoncoschools.com
admin.lincoln.mtpcsd.org
cres.coltsneckschools.org
admin.bowie.hcisd.org
www.msd120.org
fremont.bcsd.com
admin.nichols.bcsd.com
dms.dover.k12.nh.us
admin.cv.k12.ca.us
cses.comalisd.org
bhs.ballingerisd.net
www.alarqamislamicschool.org
admin.harlanfalcons.org
richardallenschools.com
tpes.comalisd.org
svms.comalisd.org
admin.cano.hcisd.org
admin.crma5.org
admin.jchs.jacksoncoschools.com
iies.icefps.org
admin.milam.hcisd.org
admin.cve.cv.k12.ca.us
richardallenschools.com
admin.creekside.cv.k12.ca.us
admin.todd.kyschools.us
canyon.cv.k12.ca.us
admin.vannoy.cv.k12.ca.us
admin.compton.bcsd.com
admin.evergreen.bcsd.com
www.armenianpreschool.org
raak6.richardallenschools.com
admin.holyfam.org
admin.hills.bcsd.com
tbjelc.henderson.kyschools.us
crockett.hcisd.org
admin.longfellow.bcsd.com
admin.bonham.hcisd.org
sle.slvusd.org
phcsd.org
www.anacondaschools.org
www.msdathletics.com
ballingerisd.net
www.crsd.k12.pa.us
chs.comalisd.org
collegeachievecentralcharterschool.org
admin.wps.dover.k12.nh.us
admin.cornerstone.pvpusd.net
kpe.mpsdnow.org
admin.redwood.cv.k12.ca.us
www.bce.slvusd.org
richardallenschools.com
admin.gutierrez.hcisd.org
admin.fairfield1.org
admin.olneycharter.org
admin.saintpiusx.com
cecvac.com
admin.vanallen.mtpcsd.org
admin.lunadabay.pvpusd.net
cses.comalisd.org
admin.cve.cv.k12.ca.us
admin.proctor.cv.k12.ca.us
admin.alma.cv.k12.ca.us
dvms.comalisd.org
glendora.k12.ca.us
academy.comalisd.org
cdc.comalisd.org
svhs.comalisd.org
advantageacademyenroll.com
webadmin.elanco.org
admin.austin.hcisd.org
newgulf.bolingisd.net
richardallenschools.com
admin.newpathways.hcisd.org
ghctk12.com
admin.thorner.bcsd.com
rapk3.richardallenschools.com
nc.athenscityschools.net
www.swprep.org
lincoln.anacondaschools.org
admin.bhs.ballingerisd.net
richardallenschools.com
harding.bcsd.com
admin.jhs.ballingerisd.net
ajshs.anacondaschools.org
admin.olacapuchins.org
admin.chabot.cv.k12.ca.us
admin.echs.hcisd.org
webadmin.gsms.elanco.org
www.magnoliaheights.com
admin.anacondaschools.org
mvms.comalisd.org
proctor.cv.k12.ca.us

Certificate

The complete raw certificate details for www.richardallenschools.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329895234580900590996461703244301760028950
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-01 16:45:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-30 16:45:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.richardallenschools.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1348 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.atc.mayfield.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.blhs.lex3.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cecvac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ctc.dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.edison.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.es.hoganprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.franklin.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hoganprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hs.hoganprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hsap.mtpcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jacksoncoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jchs.jacksoncoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jcms.jacksoncoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jefferson.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jhs.ballingerisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lincoln.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mayfield.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mckinley.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ms.hoganprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pac.sboe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rapk3.richardallenschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.roosevelt.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.saintpiusx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tamaques.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.washington.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.whs.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wilson.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cecvac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cse.cscisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cshs.cscisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctc.dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbs.jacksoncoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dms.dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edison.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.hoganprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmis.anacondaschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ges.dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ges.jacksoncoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoganprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.hoganprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacksoncoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jchs.jacksoncoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lwa-arts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.hoganprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olneycharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapk3.richardallenschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roosevelt.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dhs.dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olneycharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richardallenschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuffree.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169da01f8780000040300473045022100d8cbfdfdf2d3d1e23e24cdf85e8f7fa968b02fcd1d78ac24b307d4430217e2c602202cc20817dc0ca704f998b9934ed9f66947b54431635508cf92c059bf1f3b930e00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169da01f8fe0000040300483046022100e2cbb0a9e63e775e773f48b2a53443959d62c0456f0c19c5bc1964a0ae584aab022100f771001de9a3ab8cdc7a86ef7f390dd50cc5ea49a2944a658d58679c724cc254
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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