www.thrallisd.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:65:db:4f:a4:f1:78:89:23:12:d0:e9:f3:07:9f:91:ae:2b was issued on by Let's Encrypt.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.thrallisd.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:65:db:4f:a4:f1:78:89:23:12:d0:e9:f3:07:9f:91:ae:2b
Serial Number (int): 295996891322270711731678547137663075462699
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e7:ac:58:b1:88:8a:ba:dd:38:b7:4b:73:dd:6a:e2:79:93:aa:a9:38
Fingerprint (sha256): 72:54:e3:30:ad:63:96:55:87:35:e8:ce:c0:aa:3f:a6:1e:6f:6f:41:0e:34:72:e3:cc:b7:05:04:cf:d3:5b:51

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.thrallisd.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.thrallisd.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acc.ausdk12.org
admin.blandfordschool.org
admin.cantonisd.net
admin.hollingworthschool.org
admin.hurleyelemschool.org
admin.sanfernandoms.org
admin.santanahs.org
ams.ausdk12.org
bjms.crystalcityisd.org
blandford.rowlandschools.org
blandfordschool.org
ble.lancasterisd.org
cantonisd.net
cchs.crystalcityisd.org
cf.aceroschools.org
cornell.ausdk12.org
dm.aceroschools.org
ei.brackettisd.net
es.cantonisd.net
es.llanoisd.org
es.woccisd.net
fhs.franklinisd.net
fms.franklinisd.net
hg.aceroschools.org
hollingworth.rowlandschools.org
hollingworthschool.org
hou.lancasterisd.org
hs.brackettisd.net
hs.cantonisd.net
hs.llanoisd.org
hs.rlisd.org
hs.woccisd.net
hurley.rowlandschools.org
hurleyelemschool.org
is.cantonisd.net
jdh.lancasterisd.org
jellick.rowlandschools.org
jh.brackettisd.net
jh.llanoisd.org
jr.cantonisd.net
les.rlisd.org
lhs.lancasterisd.org
lms.lancasterisd.org
lzes.crystalcityisd.org
mac.ausdk12.org
marin.ausdk12.org
ms.rlisd.org
ms.woccisd.net
nelc.woccisd.net
ov.ausdk12.org
pre.lancasterisd.org
ps.llanoisd.org
rhe.lancasterisd.org
rowlandschools.org
rpm.lancasterisd.org
rps.rlisd.org
rre.franklinisd.net
sanfernandoms.org
santana.rowlandschools.org
santanahs.org
sfjh.crystalcityisd.org
stet.co
tes.thrallisd.com
ths.thrallisd.com
tms.thrallisd.com
tres.crystalcityisd.org
wme.lancasterisd.org
www.ausdk12.org
www.blandfordschool.org
www.bmhs-la.org
www.brackettisd.net
www.cantonisd.net
www.cathedralhighschool.org
www.crystalcityisd.org
www.ejeacademies.org
www.franklinisd.net
www.hmps.net
www.hollingworthschool.org
www.hurleyelemschool.org
www.lancasterisd.org
www.llanoisd.org
www.pacificcollegiate.com
www.pacificcollegiate.org
www.rlisd.org
www.rowlandschools.org
www.sanfernandoms.org
www.santanahs.org
www.smacs.net
www.stet.co
www.thrallisd.com
www.westbrookisd.com
www.woccisd.net

Other certificates including the domain name thrallisd.com

(limited to 100 certificates)
www.thrallisd.com
cf.aceroschools.org
acc.ausdk12.org
admin.blandfordschool.org
acc.ausdk12.org
aceroschools.org
acc.ausdk12.org
acc.ausdk12.org
www.brackettisd.net
admin.blandfordschool.org
acc.ausdk12.org
admin.almaacademy.org
acc.ausdk12.org
admin.almaacademy.org
www.ccaisd.net
admin.blandfordschool.org
admin.nyos.org
admin.dm.aceroschools.org
rowlandschools.org
admin.aceroschools.org
cf.aceroschools.org
school.saintbrendan.org
acc.ausdk12.org
admin.almaacademy.org
vin.ldcsb.ca
acc.ausdk12.org
admin.op.aceroschools.org
www.thrallisd.com
www.tcsk12.com
res.rlisd.org
hokulani-elementary.com
acc.ausdk12.org
admin.almaacademy.org
acc.ausdk12.org
admin.dm.aceroschools.org
obh.ealas.org
pes.petroliacisd.org
admin.almaacademy.org
www.okolonaschools.org
thrallisd.com
admin.matherhs.org
admin.aceroschools.org
admin.almaacademy.org
www.brackettisd.net
acc.ausdk12.org
acc.ausdk12.org
www.nyos.org
res.rlisd.org
admin.almaacademy.org
tcsk12.com
ordterrace.mpusd.net
www.jellickschool.org
sec.brackettisd.net
acc.ausdk12.org
acc.ausdk12.org
thrallisd.com
ingeniumschools.net
llanoisd.org
www.lbjechsaustinisd.org
acc.ausdk12.org
admin.almaacademy.org
res.rlisd.org
admin.dudley.centerusd.org
www.matherhs.org
llanoisd.org

Certificate

The complete raw certificate details for www.thrallisd.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295996891322270711731678547137663075462699
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-21 02:08:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-21 02:08:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.thrallisd.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1908 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acc.ausdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.blandfordschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cantonisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hollingworthschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hurleyelemschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sanfernandoms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.santanahs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ams.ausdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bjms.crystalcityisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blandford.rowlandschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blandfordschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ble.lancasterisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cantonisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cchs.crystalcityisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cf.aceroschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornell.ausdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dm.aceroschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ei.brackettisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.cantonisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.llanoisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.woccisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fhs.franklinisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fms.franklinisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hg.aceroschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hollingworth.rowlandschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hollingworthschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hou.lancasterisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.brackettisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.cantonisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.llanoisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.rlisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.woccisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hurley.rowlandschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hurleyelemschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is.cantonisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jdh.lancasterisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jellick.rowlandschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jh.brackettisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jh.llanoisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jr.cantonisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'les.rlisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lhs.lancasterisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lms.lancasterisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lzes.crystalcityisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mac.ausdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marin.ausdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.rlisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.woccisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelc.woccisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ov.ausdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pre.lancasterisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps.llanoisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhe.lancasterisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rowlandschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpm.lancasterisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rps.rlisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rre.franklinisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanfernandoms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santana.rowlandschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santanahs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfjh.crystalcityisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stet.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tes.thrallisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ths.thrallisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.thrallisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tres.crystalcityisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wme.lancasterisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ausdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blandfordschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmhs-la.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brackettisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cantonisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cathedralhighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crystalcityisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ejeacademies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.franklinisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hmps.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hollingworthschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hurleyelemschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lancasterisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.llanoisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pacificcollegiate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pacificcollegiate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rlisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rowlandschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanfernandoms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santanahs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smacs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stet.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thrallisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westbrookisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woccisd.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000167cebc26b80000040300473045022100832ea1b78808279ed6250af3e13c436f1ea4e0ac592e310b3aa0b0ea4e2a709d0220776209af3a11ec6e95ab5f10c93bbf20cb696004c8e03d48da9edca153a14831007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000167cebc26b70000040300483046022100f4858512b67c21312878dfff35f070a5699fd373427c3ba92e58b30c75b46d310221009c2928a362ca46e77e2f036c8f135afbb0169ad746a559be4781f1808c82093c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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