lacountycharterselpa.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f5:70:be:82:6d:91:e4:58:58:45:29:b4:c7:7c:14:25:03 was issued on by Let's Encrypt.

With 79 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lacountycharterselpa.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f5:70:be:82:6d:91:e4:58:58:45:29:b4:c7:7c:14:25:03
Serial Number (int): 344855900408235965250892607278937787344131
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 37:f0:88:e8:69:18:ba:ff:a0:09:e5:4b:a6:8f:41:f2:7a:0a:0f:b3
Fingerprint (sha256): 73:53:65:b2:21:11:7e:3d:8a:40:3f:67:30:d4:43:60:f0:e6:5d:af:a2:83:3f:55:a2:f5:4b:54:24:ae:0b:8c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lacountycharterselpa.org

79

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lacountycharterselpa.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.arcataschooldistrict.org
admin.bbel.bbrook.org
admin.bbrook.org
admin.bereanchristian.com
admin.bes.lammersvilleschooldistrict.net
admin.cheathamcountyschools.net
admin.cheathamhighccs.net
admin.eastcheathamccs.net
admin.el.madrid.k12.ia.us
admin.fentressboe.com
admin.gageparkhs.org
admin.glenknoll.org
admin.harpethmiddleccs.net
admin.kanoelani.org
admin.nes.mcduffie.k12.ga.us
admin.pegramccs.net
admin.qes.lammersvilleschooldistrict.net
admin.sainte-school.org
admin.westcheathamccs.net
admin.wjh.wintersisd.org
admin.wuhsd.org
aes.lammersvilleschooldistrict.net
afsenyc.org
bbhs.bbrook.org
bereanchristian.com
bereanchristian.org
bronxdalehs.org
central.bpusd.net
deanza.bpusd.net
debusk.greenek12.org
elwin.bpusd.net
forest.riverviewschools.com
foster.bpusd.net
geddes.bpusd.net
glenknoll.org
grandcenterartsacademy.org
healthystartacademy.com
heath.bpusd.net
hes.lammersvilleschooldistrict.net
holland.bpusd.net
incarnatewordhs.org
jones.bpusd.net
kenmore.bpusd.net
lacountycharterselpa.org
lammersvilleschooldistrict.net
lisanorthhigh.org
mhhs.lammersvilleschooldistrict.net
mhs.molineschools.org
msdurham.org
phs.parlierunified.org
pleasantview.bpusd.net
portbarrehigh.slp.k12.la.us
santafe.bpusd.net
sierravistajr.bpusd.net
silverspur.pvpusd.net
southbayadult.org
sre.dcs.edu
sttheresaschoolpalmsprings.org
tracy.bpusd.net
twenty-eight-st.org
vineland.bpusd.net
wolcs.org
www.annaleeelementaryandsteammagnet.org
www.ashlandcityccs.net
www.bereanchristian.com
www.ccprep-academy.org
www.cheathammiddleccs.net
www.estrellitahigh.com
www.friendshaverford.org
www.gageparkhs.org
www.healthystartacademy.com
www.kingstonspringsccs.net
www.lisanorthhigh.org
www.msdurham.org
www.pleasantviewccs.net
www.saltlakespa.org
www.sttheresaschoolpalmsprings.org
www.sycamoremiddleccs.net
www.woodsboro.pylusd.org

Other certificates including the domain name lacountycharterselpa.org

(limited to 100 certificates)
www.cranburyschool.org
admin.bonnerprendie.com
www.phacs.org
admin.estrellitahigh.com
admin.aes.lammersvilleschooldistrict.net
ashlandcityccs.net
lacountycharterselpa.org
admin.aes.lammersvilleschooldistrict.net
lacountycharterselpa.org
admin.hpiam.marquezhs.net
hhs.hattiesburgpsd.com
ljef.ljsd.org
admin.riverviewschools.com
gageparkhs.org
balloustay.com
nphs.bpusd.net
lacountycharterselpa.org
www.colegioangloamericanohgo.edu.mx
admin.aes.lammersvilleschooldistrict.net
admin.jh.iasd.cc
admin.elportal.ljsd.org
admin.arcataschooldistrict.org
admin.arcataschooldistrict.org
colegioangloamericanohgo.edu.mx
admin.denver.lincolncharter.org
admin.aes.lammersvilleschooldistrict.net
sh.iasd.cc
www.lacountycharterselpa.org
www.lincolncharter.org
admin.lincolnton.lincolncharter.org
lincolnton.lincolncharter.org
admin.aes.lammersvilleschooldistrict.net
admin.afsenyc.org
admin.bpusd.net
admin.afsenyc.org
admin.bereanchristian.com
admin.afsenyc.org
admin.aes.lammersvilleschooldistrict.net

Certificate

The complete raw certificate details for lacountycharterselpa.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344855900408235965250892607278937787344131
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-22 01:02:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-21 01:02:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lacountycharterselpa.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1898 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.arcataschooldistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bbel.bbrook.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bbrook.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bereanchristian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bes.lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cheathamcountyschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cheathamhighccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eastcheathamccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.el.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fentressboe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gageparkhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.glenknoll.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.harpethmiddleccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kanoelani.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nes.mcduffie.k12.ga.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pegramccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.qes.lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sainte-school.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.westcheathamccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wjh.wintersisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wuhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aes.lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afsenyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbhs.bbrook.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bereanchristian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bereanchristian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bronxdalehs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'central.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deanza.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'debusk.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elwin.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forest.riverviewschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foster.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geddes.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenknoll.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandcenterartsacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthystartacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heath.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hes.lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holland.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incarnatewordhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jones.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kenmore.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacountycharterselpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lisanorthhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhhs.lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhs.molineschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msdurham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phs.parlierunified.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pleasantview.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portbarrehigh.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santafe.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sierravistajr.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silverspur.pvpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southbayadult.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sre.dcs.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sttheresaschoolpalmsprings.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracy.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twenty-eight-st.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vineland.bpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wolcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.annaleeelementaryandsteammagnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashlandcityccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bereanchristian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccprep-academy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheathammiddleccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.estrellitahigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.friendshaverford.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gageparkhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthystartacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingstonspringsccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lisanorthhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdurham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pleasantviewccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saltlakespa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sttheresaschoolpalmsprings.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sycamoremiddleccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woodsboro.pylusd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f6336000000165ff0365600000040300483046022100d0fbf1319caa437dccd874a07c60815d910c989df9ea1f76a3a70e75d92ed4e6022100bea85ea733bbcfd02b768b3fbe31834efbe152e08180f325c83378fc758d2567007500a4501269055a15545e6211ab37bc103f62ae5576a45e4b1714453e1b22106a2500000165ff0365610000040300463044022033cde961b3287d5ead6b1f078f159bae9e465f89b9276b732c282ce1bf39933002204ebb92b7c65499127c61f0372cf48775a915d184b0f20d134d3299fb69a3a576
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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