cathedralschoolny.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c9:83:55:d9:a0:4d:ad:59:dc:9c:d7:d4:ac:2a:6f:b7:59 was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cathedralschoolny.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c9:83:55:d9:a0:4d:ad:59:dc:9c:d7:d4:ac:2a:6f:b7:59
Serial Number (int): 329908188173053600444686833738368045528921
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3e:7c:c4:11:b8:94:3b:4f:5c:87:57:0a:9b:96:6c:b7:7e:71:4b:fe
Fingerprint (sha256): 72:e0:46:b4:5a:ed:c4:41:fa:f6:5b:a7:fb:d7:ed:de:fc:f7:05:74:02:0c:28:ec:33:65:4c:b8:58:18:27:e6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cathedralschoolny.org

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cathedralschoolny.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.bennie.allenparkschools.com
admin.calmecaacademy.com
admin.cathedralschoolny.org
admin.cornelius.fgsdk12.org
admin.cowantigers.org
admin.csd300.org
admin.dilley.fgsdk12.org
admin.echoshaw.fgsdk12.org
admin.edtechteam.mx
admin.esperanzaschool.org
admin.fernhill.fgsdk12.org
admin.fghs.fgsdk12.org
admin.fgsdk12.org
admin.garvanzaelementary.org
admin.harveyclarke.fgsdk12.org
admin.highschool.mcasd.net
admin.husd4.org
admin.josephgale.fgsdk12.org
admin.kauffmanschool.org
admin.kaumanaelementary.org
admin.lindemann.allenparkschools.com
admin.mcasd.net
admin.mccreery.mcasd.net
admin.missionprep.org
admin.nams.fgsdk12.org
admin.oga.fgsdk12.org
admin.omardblaircharterschool.com
admin.phillyscholars.org
admin.rayne.mcasd.net
admin.ryderschool.org
admin.sendicaeducation.com
admin.tommcall.fgsdk12.org
allenparkschools.com
apcs.allenparkschools.com
aphs.allenparkschools.com
apms.allenparkschools.com
calmecaacademy.com
cathedralschoolny.org
cornelius.fgsdk12.org
cowantigers.org
csd300.org
ddiny.org
dilley.fgsdk12.org
dimensions.org
echoshaw.fgsdk12.org
edtechteam.mx
esperanzaschool.org
fernhill.fgsdk12.org
fghs.fgsdk12.org
fgsdk12.org
garvanzaelementary.org
hamlincharter.org
harveyclarke.fgsdk12.org
highschool.mcasd.net
husd4.org
josephgale.fgsdk12.org
kauffmanschool.org
kaumanaelementary.org
mcasd.net
mccreery.mcasd.net
missionprep.org
nams.fgsdk12.org
oga.fgsdk12.org
omardblaircharterschool.com
phillyscholars.org
rayne.mcasd.net
ryderschool.org
tommcall.fgsdk12.org
web.sendicaeducation.com
www.calmecaacademy.com
www.cathedralschoolny.org
www.cowantigers.org
www.csd300.org
www.ddiny.org
www.dimensions.org
www.edtechteam.mx
www.esperanzaschool.org
www.faithmarietta.org
www.fgsdk12.org
www.garvanzaelementary.org
www.hamlincharter.org
www.husd4.org
www.kauffmanschool.org
www.kaumanaelementary.org
www.mcasd.net
www.missionprep.org
www.omardblaircharterschool.com
www.phillyscholars.org
www.ryderschool.org

Other certificates including the domain name cathedralschoolny.org

(limited to 100 certificates)
admin.allenparkschools.com
admin.calmecaacademy.com
admin.missionprep.org
www.calmecaacademy.com
admin.mckitrick.lskysd.ca
admin.benchmarkbobcats.org
admin.cathedralschoolny.org
www.kaumanaelementary.org
mstmaatroosevelt.org
dimensions.org
fernhill.fgsdk12.org
cra.freeholdtwp.k12.nj.us
admin.aes.acsc.net
www.missionprep.org
www.siths.org
admin.es.lorenaisd.net
admin.omardblaircharterschool.com
cathedralschoolny.org
www.hilohs.k12.hi.us
cathedralschoolny.org
admin.kauffmanschool.org
admin.bcs.lskysd.ca
northregionselpa.org
www.garvanzaelementary.org
admin.acsc.net
admin.hamlincharter.org
admin.chuckey.greenek12.org
admin.dimensions.org
admin.bennie.allenparkschools.com
2.southampton.k12.nj.us
admin.ps17queens.com
www.dcsocal.org
admin.allenparkschools.com
admin.allenparkschools.com
harpethhighccs.net
wclark.k12.in.us
www.avrlacademy.org
admin.calmecaacademy.com
admin.dimensions.org
www.mstmaatroosevelt.org
admin.sherard.coahomak12.org
hubbardhighschool.org
admin.calmecaacademy.com
www.ryderschool.org
hamlincharter.org
admin.bcs.lskysd.ca
2.southampton.k12.nj.us
westcheathamccs.net
www.faithmarietta.org
lskysd.ca
www.stjosaphat.net
pal.ldcsb.ca
admin.calmecaacademy.com
edtechteam.mx
admin.avrlacademy.org
admin.allenparkschools.com
2.southampton.k12.nj.us
www.northregionselpa.org
admin.bcs.lskysd.ca
admin.apcs.allenparkschools.com
www.sunrisewaldorfschool.org
www.ccoe.k12.ca.us
mai.mcdowell.k12.nc.us
admin.allenparkschools.com
admin.bcs.lskysd.ca

Certificate

The complete raw certificate details for cathedralschoolny.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329908188173053600444686833738368045528921
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-20 09:43:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-18 09:43:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cathedralschoolny.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2020 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bennie.allenparkschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.calmecaacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cathedralschoolny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cornelius.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cowantigers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.csd300.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dilley.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.echoshaw.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.edtechteam.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.esperanzaschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fernhill.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fghs.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.garvanzaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.harveyclarke.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.highschool.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.husd4.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.josephgale.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kauffmanschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kaumanaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lindemann.allenparkschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mccreery.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.missionprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nams.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.oga.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.omardblaircharterschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.phillyscholars.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rayne.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ryderschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sendicaeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tommcall.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allenparkschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apcs.allenparkschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aphs.allenparkschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apms.allenparkschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calmecaacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cathedralschoolny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornelius.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cowantigers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csd300.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ddiny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dilley.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dimensions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echoshaw.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edtechteam.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esperanzaschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fernhill.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fghs.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garvanzaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamlincharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harveyclarke.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highschool.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'husd4.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'josephgale.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kauffmanschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaumanaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mccreery.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missionprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nams.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oga.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omardblaircharterschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phillyscholars.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rayne.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryderschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tommcall.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.sendicaeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.calmecaacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cathedralschoolny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cowantigers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csd300.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ddiny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dimensions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edtechteam.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esperanzaschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faithmarietta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garvanzaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hamlincharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.husd4.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kauffmanschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaumanaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missionprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omardblaircharterschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phillyscholars.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ryderschool.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016ad4d70963000004030046304402202a48cf06d37512034d6cb2103a00d6088ba8a85ef1dc2ad44c830b57c91cae3202202d96b12b7d8b05f58be6535cf21bc3b79beba0ec2f3b40416c175d5d9b534c2f007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ad4d70954000004030048304602210094bab4c9a46f2a1a175b7546d33ba759673ecf99bb9fe29a2497f530f6361a550221008d911e9cea08edd9a2e26ce58d41b7c05e0661ded341d24c19700c0ec9f542f4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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