www.exteraschools.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:56:23:75:42:0b:74:3b:71:cc:7d:58:bf:da:8c:98:2b:41 was issued on by Let's Encrypt.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.exteraschools.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:56:23:75:42:0b:74:3b:71:cc:7d:58:bf:da:8c:98:2b:41
Serial Number (int): 290648273168612884181935455582356065758017
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4e:5e:71:f7:59:72:ac:e3:1d:85:3e:5a:2c:cf:ac:8e:69:38:b5:57
Fingerprint (sha256): 70:a5:f5:e2:d0:18:da:c7:6d:eb:8f:96:5a:2b:54:c2:44:ac:a1:18:65:62:53:ed:fd:67:a9:87:40:98:09:45

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.exteraschools.org

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.exteraschools.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.adulteducation.pleasantonusd.net
admin.assumptionschool-sl.org
admin.breed.exteraschools.org
admin.carlossantanaarts.org
admin.chamlian.org
admin.cottageschool.org
admin.eastman.exteraschools.org
admin.exteraschools.org
admin.holyangelsarcadia.net
admin.hsmp.org
admin.ichspride.org
admin.lorena.exteraschools.org
admin.ranchopicojuniorhigh.org
admin.res.rfisd.net
admin.rfisd.net
admin.rhs.rfisd.net
admin.rms.rfisd.net
admin.saintpaulcatholic.org
admin.second.exteraschools.org
admin.shaeagles.org
admin.trinitystelementary.com
admin.wardhigh.org
adulteducation.pleasantonusd.net
alisal.pleasantonusd.net
amador.pleasantonusd.net
assumptionschool-sl.org
barrington.nclusd.k12.ca.us
bonita.nclusd.k12.ca.us
breed.exteraschools.org
carlossantanaarts.org
chamlian.org
donlon.pleasantonusd.net
eastman.exteraschools.org
edlioschooldistrict.org
elem.cumberlandacademy.com
es.rockdaleisd.net
fairlands.pleasantonusd.net
harvest.pleasantonusd.net
hearst.pleasantonusd.net
holyangelsarcadia.net
hs.cumberlandacademy.com
hs.rockdaleisd.net
hsmp.org
hunt.nclusd.k12.ca.us
ichspride.org
is.rockdaleisd.net
jh.rockdaleisd.net
lorena.exteraschools.org
lydiksen.pleasantonusd.net
mohr.pleasantonusd.net
ms.cumberlandacademy.com
orestimba.nclusd.k12.ca.us
pleasantonmiddle.pleasantonusd.net
ranchopicojuniorhigh.com
ranchopicojuniorhigh.net
ranchopicojuniorhigh.org
res.rfisd.net
rfisd.net
rhs.rfisd.net
rms.rfisd.net
saintpaulcatholic.org
second.exteraschools.org
shaeagles.org
smmschool.net
valleyview.pleasantonusd.net
vintagehills.pleasantonusd.net
vonrenner.nclusd.k12.ca.us
walnutgrove.pleasantonusd.net
wardhigh.org
www.assumptionschool-sl.org
www.bgh4.k12.wy.us
www.carlossantanaarts.org
www.chamlian.org
www.cumberlandacademy.com
www.exteraschools.org
www.glcps.org
www.holyangelsarcadia.net
www.hsmp.org
www.ichspride.org
www.lusd.k12.ca.us
www.pleasantonusd.net
www.ranchopicojuniorhigh.com
www.ranchopicojuniorhigh.net
www.ranchopicojuniorhigh.org
www.rfisd.net
www.rockdaleisd.net
www.saintpaulcatholic.org
www.shaeagles.org
www.smmschool.net
www.trinitystelementary.com
www.wardhigh.org
yolo.nclusd.k12.ca.us

Other certificates including the domain name exteraschools.org

(limited to 100 certificates)
admin.breed.exteraschools.org
admin.benchmarkbobcats.org
parish.sangabrielmissionchurch.org
adams.cleburne.k12.tx.us
0-3.texasdhhresources.org
second.exteraschools.org
admin.adulteducation.pleasantonusd.net
www.oahornets.org
admin.newbernmiddle.gocats.org
admin.wjh.wintersisd.org
admin.lorena.exteraschools.org
jsms.rsu14.org
admin.wcms.mpusd.net
admin.adulteducation.pleasantonusd.net
admin.almadinah-school.com
admin.jsms.rsu14.org
admin.athlosbrooklynpark.org
admin.garvyschool.org
admin.second.exteraschools.org
www.rebsamen.mx
admin.breed.exteraschools.org
adams.cleburne.k12.tx.us
bhs.bcsdk12.org
admin.bme.manorisd.net
0-3.texasdhhresources.org
www.christrpv.com
admin.wjh.wintersisd.org
admin.cathedralchapelschool.org
eastprimary.kiskiarea.org
admin.angelocatholicschool.com
abchandler.henderson.kyschools.us
www.gorman.esc14.net
breed.exteraschools.org
abchandler.henderson.kyschools.us
admin.second.exteraschools.org
admin.adulteducation.pleasantonusd.net
daycare.eastlandisd.net
admin.exteraschools.org
northwesthigh.slp.k12.la.us
abchandler.henderson.kyschools.us
lorena.exteraschools.org
www.trinitystelementary.com
abchandler.henderson.kyschools.us
exteraschools.org
exteraschools.org
0-3.texasdhhresources.org
abchandler.henderson.kyschools.us
www.lusd.k12.ca.us
preescolar.semperaltius.edu.mx
admin.breed.exteraschools.org
admin.whs.rsu14.org
admin.breed.exteraschools.org
aac.woccisd.net
www.rsu14.org
exteraschools.org
www.otsegops.org
0-3.texasdhhresources.org
exteraschools.org
admin.exteraschools.org
www.garvyschool.org
breed.exteraschools.org
admin.hsmp.org
adams.cleburne.k12.tx.us
admin.angelocatholicschool.com
admin.breed.exteraschools.org
admin.athlosbrooklynpark.org
admin.breed.exteraschools.org
admin.athlosbrooklynpark.org
ohs.otsegops.org
www.exteraschools.org
southeast.varnett.org
wclark.k12.in.us
exteraschools.org
admin.angelocatholicschool.com
admin.second.exteraschools.org
www.monroe.k12.tn.us
admin.athletics.rsu14.org
adams.cleburne.k12.tx.us
mps.monroe.k12.tn.us
adams.cleburne.k12.tx.us
admin.echs.woccisd.net
ees.elkincityschools.org
0-3.texasdhhresources.org
admin.angelocatholicschool.com
turner.wisd.org
0-3.texasdhhresources.org
adams.cleburne.k12.tx.us
admin.athlosbrooklynpark.org
second.exteraschools.org
exteraschools.org
northprimary.kiskiarea.org
web.euroamericanosur.edu.mx
admin.almadinah-school.com
admin.breed.exteraschools.org
admin.res.rfisd.net
admin.keppel.pusdschools.net
0-3.texasdhhresources.org
northside.wisd.org
admin.athlosbrooklynpark.org
bps.bayfield.k12.co.us

Certificate

The complete raw certificate details for www.exteraschools.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIO8DCCDdigAwIBAgISA1YjdUILdDtxzH1Yv9qMmCtBMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MzAwOTM4MTJaFw0x
OTA5MjgwOTM4MTJaMCAxHjAcBgNVBAMTFXd3dy5leHRlcmFzY2hvb2xzLm9yZzCC
AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK2shenuZt6MUG0x2/ts+632
FQpfqYeZvBSSThIBLbBZ4fODBV4SJe7hDrakpTCrEdtnc3DQLStRuaVd0eEQYJ9f
EUx50w/X0tuyccnsn5V33VF+1cOGhq8jH/DBPmRoaGkD9F2Ad1wxq5kBd2f4dnuk
rWoLmzvqVcBcxvFQwHZ2obFK2x66Unn4ms4soYXj5C980IPzpmkJCu8AISTvHpds
9++Sw3dlSMK3VkD9iY1fPdmHfrSGTpwJNo8g5b9zGFylxopQcq0JVmdQHYzin0Ym
NHJBbrvw2JLr5DSptn981Gr8N7JQro2Vh5CB2TaWjbcX7K6SLVCKuU7u823pPzEf
yTEfZ3HlsmdjLp3fkm4Hy3/esD4VQWq67KdRzUfiJKMra+TzDUQc8Fswb0w/Be6u
nJFGyIKXqO7LZ+29CDVz2IDU+8xV/1DQnFo/mmifirvDCleBBBLmor41vz/k5uuF
41zYz/RdVvPubZXCYCYRlMhMpQlLQEaoT6I1M0J64dYlEjETSNpYieCLncf6N0OB
NsOgLnfT2MldOaRYDHUi2DURkE8kEUmkm0Nx5n2Yv6UIxclKIYgO/4dKJlJgiA4k
FRt9Hh4W9ziD92yYrF2SuKhK5+WQ5inVIDQtxkvssK0wAWI9DfhFJ6IZFIuopA+J
nuqOfLKvyEFZsnptTPxNAgMBAAGjggr4MIIK9DAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O
BBYEFC9ryE1sLC4y8gAg/y1NbFr8brq7MB8GA1UdIwQYMBaAFKhKamMEfd265tE5
t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29j
c3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2Nl
cnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wggitBgNVHREEggikMIIIoIImYWRt
aW4uYWR1bHRlZHVjYXRpb24ucGxlYXNhbnRvbnVzZC5uZXSCHWFkbWluLmFzc3Vt
cHRpb25zY2hvb2wtc2wub3Jngh1hZG1pbi5icmVlZC5leHRlcmFzY2hvb2xzLm9y
Z4IbYWRtaW4uY2FybG9zc2FudGFuYWFydHMub3JnghJhZG1pbi5jaGFtbGlhbi5v
cmeCF2FkbWluLmNvdHRhZ2VzY2hvb2wub3Jngh9hZG1pbi5lYXN0bWFuLmV4dGVy
YXNjaG9vbHMub3JnghdhZG1pbi5leHRlcmFzY2hvb2xzLm9yZ4IbYWRtaW4uaG9s
eWFuZ2Vsc2FyY2FkaWEubmV0gg5hZG1pbi5oc21wLm9yZ4ITYWRtaW4uaWNoc3By
aWRlLm9yZ4IeYWRtaW4ubG9yZW5hLmV4dGVyYXNjaG9vbHMub3Jngh5hZG1pbi5y
YW5jaG9waWNvanVuaW9yaGlnaC5vcmeCE2FkbWluLnJlcy5yZmlzZC5uZXSCD2Fk
bWluLnJmaXNkLm5ldIITYWRtaW4ucmhzLnJmaXNkLm5ldIITYWRtaW4ucm1zLnJm
aXNkLm5ldIIbYWRtaW4uc2FpbnRwYXVsY2F0aG9saWMub3Jngh5hZG1pbi5zZWNv
bmQuZXh0ZXJhc2Nob29scy5vcmeCE2FkbWluLnNoYWVhZ2xlcy5vcmeCHWFkbWlu
LnRyaW5pdHlzdGVsZW1lbnRhcnkuY29tghJhZG1pbi53YXJkaGlnaC5vcmeCIGFk
dWx0ZWR1Y2F0aW9uLnBsZWFzYW50b251c2QubmV0ghhhbGlzYWwucGxlYXNhbnRv
bnVzZC5uZXSCGGFtYWRvci5wbGVhc2FudG9udXNkLm5ldIIXYXNzdW1wdGlvbnNj
aG9vbC1zbC5vcmeCG2JhcnJpbmd0b24ubmNsdXNkLmsxMi5jYS51c4IXYm9uaXRh
Lm5jbHVzZC5rMTIuY2EudXOCF2JyZWVkLmV4dGVyYXNjaG9vbHMub3JnghVjYXJs
b3NzYW50YW5hYXJ0cy5vcmeCDGNoYW1saWFuLm9yZ4IYZG9ubG9uLnBsZWFzYW50
b251c2QubmV0ghllYXN0bWFuLmV4dGVyYXNjaG9vbHMub3JnghdlZGxpb3NjaG9v
bGRpc3RyaWN0Lm9yZ4IaZWxlbS5jdW1iZXJsYW5kYWNhZGVteS5jb22CEmVzLnJv
Y2tkYWxlaXNkLm5ldIIbZmFpcmxhbmRzLnBsZWFzYW50b251c2QubmV0ghloYXJ2
ZXN0LnBsZWFzYW50b251c2QubmV0ghhoZWFyc3QucGxlYXNhbnRvbnVzZC5uZXSC
FWhvbHlhbmdlbHNhcmNhZGlhLm5ldIIYaHMuY3VtYmVybGFuZGFjYWRlbXkuY29t
ghJocy5yb2NrZGFsZWlzZC5uZXSCCGhzbXAub3JnghVodW50Lm5jbHVzZC5rMTIu
Y2EudXOCDWljaHNwcmlkZS5vcmeCEmlzLnJvY2tkYWxlaXNkLm5ldIISamgucm9j
a2RhbGVpc2QubmV0ghhsb3JlbmEuZXh0ZXJhc2Nob29scy5vcmeCGmx5ZGlrc2Vu
LnBsZWFzYW50b251c2QubmV0ghZtb2hyLnBsZWFzYW50b251c2QubmV0ghhtcy5j
dW1iZXJsYW5kYWNhZGVteS5jb22CGm9yZXN0aW1iYS5uY2x1c2QuazEyLmNhLnVz
giJwbGVhc2FudG9ubWlkZGxlLnBsZWFzYW50b251c2QubmV0ghhyYW5jaG9waWNv
anVuaW9yaGlnaC5jb22CGHJhbmNob3BpY29qdW5pb3JoaWdoLm5ldIIYcmFuY2hv
cGljb2p1bmlvcmhpZ2gub3Jngg1yZXMucmZpc2QubmV0gglyZmlzZC5uZXSCDXJo
cy5yZmlzZC5uZXSCDXJtcy5yZmlzZC5uZXSCFXNhaW50cGF1bGNhdGhvbGljLm9y
Z4IYc2Vjb25kLmV4dGVyYXNjaG9vbHMub3Jngg1zaGFlYWdsZXMub3Jngg1zbW1z
Y2hvb2wubmV0ghx2YWxsZXl2aWV3LnBsZWFzYW50b251c2QubmV0gh52aW50YWdl
aGlsbHMucGxlYXNhbnRvbnVzZC5uZXSCGnZvbnJlbm5lci5uY2x1c2QuazEyLmNh
LnVzgh13YWxudXRncm92ZS5wbGVhc2FudG9udXNkLm5ldIIMd2FyZGhpZ2gub3Jn
ght3d3cuYXNzdW1wdGlvbnNjaG9vbC1zbC5vcmeCEnd3dy5iZ2g0LmsxMi53eS51
c4IZd3d3LmNhcmxvc3NhbnRhbmFhcnRzLm9yZ4IQd3d3LmNoYW1saWFuLm9yZ4IZ
d3d3LmN1bWJlcmxhbmRhY2FkZW15LmNvbYIVd3d3LmV4dGVyYXNjaG9vbHMub3Jn
gg13d3cuZ2xjcHMub3Jnghl3d3cuaG9seWFuZ2Vsc2FyY2FkaWEubmV0ggx3d3cu
aHNtcC5vcmeCEXd3dy5pY2hzcHJpZGUub3JnghJ3d3cubHVzZC5rMTIuY2EudXOC
FXd3dy5wbGVhc2FudG9udXNkLm5ldIIcd3d3LnJhbmNob3BpY29qdW5pb3JoaWdo
LmNvbYIcd3d3LnJhbmNob3BpY29qdW5pb3JoaWdoLm5ldIIcd3d3LnJhbmNob3Bp
Y29qdW5pb3JoaWdoLm9yZ4INd3d3LnJmaXNkLm5ldIITd3d3LnJvY2tkYWxlaXNk
Lm5ldIIZd3d3LnNhaW50cGF1bGNhdGhvbGljLm9yZ4IRd3d3LnNoYWVhZ2xlcy5v
cmeCEXd3dy5zbW1zY2hvb2wubmV0ght3d3cudHJpbml0eXN0ZWxlbWVudGFyeS5j
b22CEHd3dy53YXJkaGlnaC5vcmeCFXlvbG8ubmNsdXNkLmsxMi5jYS51czBMBgNV
HSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpo
dHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA
7wB2AOJpS64m6OlACeiGG7Y7g9Q+5/50iPukjyiTAZ3d8dv+AAABa6f2t3oAAAQD
AEcwRQIgTbA0zqDpm+gREUWRZ+ghxgWzKZVpMYiaxEgdNFtguEECIQCbIgPqxhGK
Ky4bLkoF+gScI8FfwBUhAkxpz1Z0vN1KmgB1AGPy283oO8wszwtyhCdXazOkjWF3
j711pjixx2hUS9iNAAABa6f2t58AAAQDAEYwRAIgLQWCeKuDhfhj6ZvcsgcaUgNR
OX1zId36ncl2SLHkGqcCIDTDRP14rhpr5pPoSMc2p5r2wZ4EAqGWjX0KBXLkdC+1
MA0GCSqGSIb3DQEBCwUAA4IBAQCP8FKqqMDWeLQgpi0pEhYJncOPWFV906fcsBqZ
lZOVSKOm71DLAtSJ72rcVP00qKIJPqYKBUfiUUKdyUez1nG1dzaCUF/+kzer1wC9
zdAIa3DAqka1irHgGw+aJw81+XqFdGJeaX4HulqGsRzD9Rp3CHmyXKccPQTtAAFg
Br9h6Gjd0PY5Pu7xjrN5kbgVRY4YR1os/vCs+RnbOIi6s8jx3D0IHN/w0J+UhehG
oeBAeWO3tBDPSuhGGmNW6U3xNbp3vBHH8aTuVKr/WKsQNxuJmZAFXZtr5+52dLB8
1eFiAXac0GL043PSQXMDhH5s8/Xt8fMm9WKbRPXnPp6IQZcW
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290648273168612884181935455582356065758017
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-30 09:38:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-28 09:38:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.exteraschools.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2212 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.adulteducation.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.assumptionschool-sl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.breed.exteraschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.carlossantanaarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.chamlian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cottageschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eastman.exteraschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.exteraschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.holyangelsarcadia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hsmp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ichspride.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lorena.exteraschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ranchopicojuniorhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.res.rfisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rfisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rhs.rfisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rms.rfisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.saintpaulcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.second.exteraschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.shaeagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.trinitystelementary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wardhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adulteducation.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alisal.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amador.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assumptionschool-sl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barrington.nclusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonita.nclusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breed.exteraschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carlossantanaarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chamlian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donlon.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastman.exteraschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edlioschooldistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elem.cumberlandacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.rockdaleisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fairlands.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harvest.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearst.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyangelsarcadia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.cumberlandacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.rockdaleisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsmp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hunt.nclusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ichspride.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is.rockdaleisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jh.rockdaleisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lorena.exteraschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lydiksen.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mohr.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.cumberlandacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orestimba.nclusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pleasantonmiddle.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranchopicojuniorhigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranchopicojuniorhigh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranchopicojuniorhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'res.rfisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rfisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhs.rfisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rms.rfisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintpaulcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'second.exteraschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaeagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smmschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valleyview.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vintagehills.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vonrenner.nclusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walnutgrove.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wardhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assumptionschool-sl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bgh4.k12.wy.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carlossantanaarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chamlian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cumberlandacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exteraschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glcps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyangelsarcadia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsmp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ichspride.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ranchopicojuniorhigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ranchopicojuniorhigh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ranchopicojuniorhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rfisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rockdaleisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintpaulcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shaeagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smmschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trinitystelementary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wardhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yolo.nclusd.k12.ca.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016ba7f6b77a000004030047304502204db034cea0e99be81111459167e821c605b329956931889ac4481d345b60b8410221009b2203eac6118a2b2e1b2e4a05fa049c23c15fc01521024c69cf5674bcdd4a9a00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016ba7f6b79f000004030046304402202d058278ab8385f863e99bdcb2071a520351397d7321ddfa9dc97648b1e41aa7022034c344fd78ae1a6be693e848c736a79af6c19e0402a1968d7d0a0572e4742fb5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008ff052aaa8c0d678b420a62d291216099dc38f58557dd3a7dcb01a9995939548a3a6ef50cb02d489ef6adc54fd34a8a2093ea60a0547e251429dc947b3d671b5773682505ffe9337abd700bdcdd0086b70c0aa46b58ab1e01b0f9a270f35f97a8574625e697e07ba5a86b11cc3f51a770879b25ca71c3d04ed00016006bf61e868ddd0f6393eeef18eb37991b815458e18475a2cfef0acf919db3888bab3c8f1dc3d081cdff0d09f9485e846a1e0407963b7b410cf4ae8461a6356e94df135ba77bc11c7f1a4ee54aaff58ab10371b899990055d9b6be7ee7674b07cd5e16201769cd062f4e373d2417303847e6cf3f5edf1f326f5629b44f5e73e9e88419716