admin.bennett.frenship.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f8:28:dd:97:16:14:49:20:00:7a:48:56:1f:db:90:e8:62 was issued on by Let's Encrypt.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.bennett.frenship.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f8:28:dd:97:16:14:49:20:00:7a:48:56:1f:db:90:e8:62
Serial Number (int): 345781204473503759540232505724368059426914
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2d:11:3e:19:bb:7f:06:ef:27:59:e8:09:6a:a4:d8:07:11:df:2c:02
Fingerprint (sha256): 70:d2:4b:f0:08:c2:11:93:87:02:9c:5c:90:4a:7a:78:6d:dc:e5:74:7e:74:9c:19:82:d2:9b:42:13:a0:b6:70

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate admin.bennett.frenship.net

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.bennett.frenship.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.bennett.frenship.net
admin.castaicusd.com
admin.ces.castaicusd.com
admin.cfn.edu.mx
admin.charter.ncsd.school
admin.cms.castaicusd.com
admin.colegiobosquereal.edu.mx
admin.colegioterranova.edu.mx
admin.csx211.org
admin.deercreek.ncsd.school
admin.fhs.frenship.net
admin.fms.frenship.net
admin.gilbertacademy.org
admin.gilmore.ucboe.us
admin.hms.frenship.net
admin.legacy.frenship.net
admin.los.castaicusd.com
admin.ncsd.school
admin.newnasa.org
admin.nhs.castaicusd.com
admin.nr.frenship.net
admin.or.frenship.net
admin.pams.pusdatsa.org
admin.pes.pusdatsa.org
admin.phs.pusdatsa.org
admin.preschool.castaicusd.com
admin.rec.frenship.net
admin.sevenhills.ncsd.school
admin.tvms.frenship.net
admin.usd205.com
admin.wb.frenship.net
admin.ww.frenship.net
bennett.frenship.net
castaicusd.com
ces.castaicusd.com
charter.ncsd.school
cms.castaicusd.com
colegiobosquereal.edu.mx
colegioterranova.edu.mx
csx211.org
cv.frenship.net
deercreek.ncsd.school
dietz.crandall-isd.net
elementary.montourschools.com
faa.pamlico.k12.nc.us
fhs.frenship.net
fms.frenship.net
gilbertacademy.org
gilmore.ucboe.us
hms.frenship.net
hy.hpisd.org
hyer.hpisd.org
legacy.frenship.net
los.castaicusd.com
ncsd.school
nes.norris.k12.ca.us
newnasa.org
nhs.castaicusd.com
nms.norris.k12.ca.us
norris.k12.ca.us
nr.frenship.net
ode.norris.k12.ca.us
or.frenship.net
pamlico.k12.nc.us
pams.pusdatsa.org
pchs.pamlico.k12.nc.us
pcms.pamlico.k12.nc.us
pcps.pamlico.k12.nc.us
pes.pusdatsa.org
phs.pusdatsa.org
preschool.castaicusd.com
rec.frenship.net
schoolforthedeaf.wvsdb2.state.k12.wv.us
sevenhills.ncsd.school
stemhigh.org
stemk12.org
tvms.frenship.net
uh.frenship.net
ves.norris.k12.ca.us
vvhs.info
wb.frenship.net
wbe.norris.k12.ca.us
ww.frenship.net
www.bpbraves.net
www.bradleyschools.org
www.castaicusd.com
www.colegiobosquereal.edu.mx
www.colegioterranova.edu.mx
www.csx211.org
www.gilbertacademy.org
www.loyola-nyc.org
www.ncsd.school
www.newnasa.org
www.norris.k12.ca.us
www.stemhigh.org
www.stemk12.org
www.usd205.com

Other certificates including the domain name frenship.net

(limited to 100 certificates)
ninth.frenship.net
admin.ninth.frenship.net
admin.adulted.mvusd.net
www.bluehazeelementaryschool.wsisd.com
admin.aceroschools.org
admin.adulted.mvusd.net
admin.aeropuerto.ipefh.edu.mx
admin.or.frenship.net
schoolforthedeaf.wvsdb2.state.k12.wv.us
admin.aeropuerto.ipefh.edu.mx
admin.adulted.mvusd.net
www.bpbraves.net
admin.adulted.mvusd.net
nr.frenship.net
wb.frenship.net
frenship.net
admin.elementary.marsk12.org
admin.scs.ealas.org
legacy.frenship.net
phs.pusdatsa.org
tvms.frenship.net
admin.aeropuerto.ipefh.edu.mx
preschool.castaicusd.com
admin.frenship.net
admin.asgl-lausd.org
admin.chaparralhills.mvusd.net
rec.frenship.net
hyer.hpisd.org
burkett.montourschools.com
frenship.net
or.frenship.net
admin.pinecrestmexico.com
admin.bennett.frenship.net
admin.stemk12.org
frenship.net
admin.aeropuerto.ipefh.edu.mx
admin.aeropuerto.ipefh.edu.mx
admin.multisensoryschool.wvsdb2.state.k12.wv.us
admin.aceroschools.org
admin.nr.frenship.net
admin.adulted.mvusd.net
admin.tvms.frenship.net
sussexcountycatholicschools.org
admin.aceroschools.org
admin.aeropuerto.ipefh.edu.mx
www.montourschools.com
fhs.frenship.net
admin.grupocedva.com
frenship.net
admin.adulted.mvusd.net
frenship.net
admin.cf.aceroschools.org
ivm.edu.mx
tvms.frenship.net
admin.bennett.frenship.net
admin.bennett.frenship.net
admin.cfn.edu.mx
admin.hms.frenship.net
admin.bennett.frenship.net
fhs.frenship.net
legacy.frenship.net
admin.adulted.mvusd.net
admin.ninth.frenship.net
admin.aceroschools.org
admin.bennett.frenship.net
admin.bennett.frenship.net
ww.frenship.net
rec.frenship.net
ninth.frenship.net
frenship.net
admin.aceroschools.org
fhs.frenship.net
bennett.frenship.net
admin.aeropuerto.ipefh.edu.mx
cv.frenship.net
admin.aceroschools.org
frenship.net
admin.sycamoreprep.org
admin.kindergartenacademy.mbgsd.org
admin.ww.frenship.net
fms.frenship.net
uh.frenship.net
admin.schoolforthedeaf.wvsdb2.state.k12.wv.us
admin.bennett.frenship.net
admin.bennett.frenship.net
admin.tvms.frenship.net
admin.wb.frenship.net
www.loyola-nyc.org
admin.bennett.frenship.net
fhs.frenship.net
admin.wb.frenship.net
frenship.net
alamo.otsegops.org
admin.aceroschools.org
rec.frenship.net
va.davidson.k12.nc.us
admin.bennett.frenship.net
admin.adulted.mvusd.net
dietz.crandall-isd.net
ramona.mvusd.net

Certificate

The complete raw certificate details for admin.bennett.frenship.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345781204473503759540232505724368059426914
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-19 16:43:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-17 16:43:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.bennett.frenship.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2096 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bennett.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.castaicusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ces.castaicusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cfn.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.charter.ncsd.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cms.castaicusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.colegiobosquereal.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.colegioterranova.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.csx211.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.deercreek.ncsd.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fhs.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fms.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gilbertacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gilmore.ucboe.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hms.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.legacy.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.los.castaicusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ncsd.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.newnasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nhs.castaicusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nr.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.or.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pams.pusdatsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pes.pusdatsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.phs.pusdatsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.preschool.castaicusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rec.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sevenhills.ncsd.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tvms.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.usd205.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wb.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ww.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bennett.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castaicusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ces.castaicusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charter.ncsd.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.castaicusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colegiobosquereal.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colegioterranova.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csx211.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cv.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deercreek.ncsd.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dietz.crandall-isd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elementary.montourschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faa.pamlico.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fhs.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fms.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gilbertacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gilmore.ucboe.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hms.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hy.hpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyer.hpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'los.castaicusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncsd.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nes.norris.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newnasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhs.castaicusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nms.norris.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norris.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nr.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ode.norris.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'or.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pamlico.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pams.pusdatsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pchs.pamlico.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcms.pamlico.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcps.pamlico.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pes.pusdatsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phs.pusdatsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preschool.castaicusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rec.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolforthedeaf.wvsdb2.state.k12.wv.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sevenhills.ncsd.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvms.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uh.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ves.norris.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vvhs.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wb.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wbe.norris.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bpbraves.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.castaicusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegiobosquereal.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegioterranova.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csx211.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gilbertacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loyola-nyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncsd.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newnasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norris.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usd205.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001668d6cc316000004030046304402202b14339c5404228cd74a6d3565dd015260a64566dde2e0936ec2579de7fd34bd02205e69f67364fce7f92323c6c459776bd731d1c3433a9245165dd353a3b9796a81007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001668d6cc3a700000403004730450220458260deeb6f6d1d6192a486d148651bb0f0d99de43687cd7a851f1cdeac6420022100a9b4699d0fb6490438ececd68770fb1d8d88bb22e4907138bc47bddd19f81c65
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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