www.wearedace.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cd:e4:d4:d6:9f:48:98:d4:ff:9e:f6:cd:63:92:8e:cf:e1 was issued on by Let's Encrypt.

With 78 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.wearedace.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cd:e4:d4:d6:9f:48:98:d4:ff:9e:f6:cd:63:92:8e:cf:e1
Serial Number (int): 331398912117101495856857096852434714546145
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5e:56:0c:2e:ee:7c:0b:fe:d7:f4:35:55:6a:a2:62:b9:54:ee:bf:0f
Fingerprint (sha256): 73:ff:97:c6:1d:19:87:3b:55:cc:f0:3b:10:14:1b:7b:1b:73:5b:f4:2a:6b:04:46:d2:76:14:7d:c4:7c:32:51

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.wearedace.org

78

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.wearedace.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.bicschools.net
admin.colegiogreenhills.com
admin.ecscrusaders.com
admin.jackierobinsonelementary.org
airport.comoxvalleyschools.ca
allsaints.htcsd.ca
arden.comoxvalleyschools.ca
aspen.comoxvalleyschools.ca
barker.mvsd.ca
brooklyn.comoxvalleyschools.ca
christtheking.htcsd.ca
colegiogreenhills.com
courtenay.comoxvalleyschools.ca
cps.sd53.bc.ca
cumberland.comoxvalleyschools.ca
denman.comoxvalleyschools.ca
drcss.mvsd.ca
ecscrusaders.com
ethelbert.mvsd.ca
fatimaschoolwilton.com
fatimaschoolwilton.org
glacierview.comoxvalleyschools.ca
glh.mvsd.ca
gpci.mvsd.ca
gpes.mvsd.ca
gpvanier.comoxvalleyschools.ca
graduatenorth.ca
grandview.mvsd.ca
hes.mvsd.ca
highland.comoxvalleyschools.ca
hornbyisland.comoxvalleyschools.ca
htcsd.ca
huband.comoxvalleyschools.ca
indigenoused.comoxvalleyschools.ca
indigenouseducation.comoxvalleyschools.ca
isp.mvsd.ca
jackierobinsonelementary.org
macneill.mvsd.ca
mms.mvsd.ca
nelsondiocese.org
ochre.mvsd.ca
oes.sd53.bc.ca
okf.sd53.bc.ca
ose.sd53.bc.ca
oss.sd53.bc.ca
phoenix.htcsd.ca
ranchitoelementary.org
res.mvsd.ca
robinsonelementary.org
sacredheart.htcsd.ca
sess.sd53.bc.ca
smithjackson.mvsd.ca
soss.sd53.bc.ca
stagnes.htcsd.ca
stmargaret.htcsd.ca
stmary.htcsd.ca
stmichael.htcsd.ca
ten.sd53.bc.ca
vanier.htcsd.ca
wci.mvsd.ca
wes.mvsd.ca
whitmore.mvsd.ca
www.bicschools.net
www.colegiogreenhills.com
www.ecscrusaders.com
www.fatimaschoolwilton.com
www.fatimaschoolwilton.org
www.graduatenorth.ca
www.htcsd.ca
www.jackierobinsonelementary.org
www.mvsd.ca
www.nelsondiocese.org
www.nlsd113.ca
www.ranchitoelementary.org
www.robinsonelementary.org
www.sd53.bc.ca
www.wearedace.org
youlearn.sd53.bc.ca

Other certificates including the domain name wearedace.org

(limited to 100 certificates)
admin.bicschools.net
sni174466.cloudflaressl.com
careerprograms.comoxvalleyschools.ca
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
admin.bicschools.net
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
wearedace.org
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
printshop.comoxvalleyschools.ca
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
comoxvalleyschools.ca
sni174466.cloudflaressl.com
wearedace.org
sni174466.cloudflaressl.com
elem.bicschools.net
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
wearedace.org
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
www.wexford.edu.mx
sni174466.cloudflaressl.com
admin.wearedace.org
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
wearedace.org
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
www.wearedace.org
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com
sni174466.cloudflaressl.com

Certificate

The complete raw certificate details for www.wearedace.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIM/jCCC+agAwIBAgISA83k1NafSJjU/572zWOSjs/hMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMjYwMTQ4MDlaFw0y
MDAxMjQwMTQ4MDlaMBwxGjAYBgNVBAMTEXd3dy53ZWFyZWRhY2Uub3JnMIICIjAN
BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQbTHb+2z7rfYVCl+p
h5m8FJJOEgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5pV3R4RBgn18RTHnT
D9fS27JxyeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGrmQF3Z/h2e6Stagub
O+pVwFzG8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK7wAhJO8el2z375LD
d2VIwrdWQP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlWZ1AdjOKfRiY0ckFu
u/DYkuvkNKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5Tu7zbek/MR/JMR9n
ceWyZ2Mund+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzwWzBvTD8F7q6ckUbI
gpeo7stn7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuaivjW/P+Tm64XjXNjP
9F1W8+5tlcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ4Iudx/o3Q4E2w6Au
d9PYyV05pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/h0omUmCIDiQVG30e
Hhb3OIP3bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUnohkUi6ikD4me6o58
sq/IQVmyem1M/E0CAwEAAaOCCQowggkGMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
L2vITWwsLjLyACD/LU1sWvxuurswHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl
7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5p
bnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p
bnQteDMubGV0c2VuY3J5cHQub3JnLzCCBr8GA1UdEQSCBrYwggayghRhZG1pbi5i
aWNzY2hvb2xzLm5ldIIbYWRtaW4uY29sZWdpb2dyZWVuaGlsbHMuY29tghZhZG1p
bi5lY3NjcnVzYWRlcnMuY29tgiJhZG1pbi5qYWNraWVyb2JpbnNvbmVsZW1lbnRh
cnkub3Jngh1haXJwb3J0LmNvbW94dmFsbGV5c2Nob29scy5jYYISYWxsc2FpbnRz
Lmh0Y3NkLmNhghthcmRlbi5jb21veHZhbGxleXNjaG9vbHMuY2GCG2FzcGVuLmNv
bW94dmFsbGV5c2Nob29scy5jYYIOYmFya2VyLm12c2QuY2GCHmJyb29rbHluLmNv
bW94dmFsbGV5c2Nob29scy5jYYIWY2hyaXN0dGhla2luZy5odGNzZC5jYYIVY29s
ZWdpb2dyZWVuaGlsbHMuY29tgh9jb3VydGVuYXkuY29tb3h2YWxsZXlzY2hvb2xz
LmNhgg5jcHMuc2Q1My5iYy5jYYIgY3VtYmVybGFuZC5jb21veHZhbGxleXNjaG9v
bHMuY2GCHGRlbm1hbi5jb21veHZhbGxleXNjaG9vbHMuY2GCDWRyY3NzLm12c2Qu
Y2GCEGVjc2NydXNhZGVycy5jb22CEWV0aGVsYmVydC5tdnNkLmNhghZmYXRpbWFz
Y2hvb2x3aWx0b24uY29tghZmYXRpbWFzY2hvb2x3aWx0b24ub3JngiFnbGFjaWVy
dmlldy5jb21veHZhbGxleXNjaG9vbHMuY2GCC2dsaC5tdnNkLmNhggxncGNpLm12
c2QuY2GCDGdwZXMubXZzZC5jYYIeZ3B2YW5pZXIuY29tb3h2YWxsZXlzY2hvb2xz
LmNhghBncmFkdWF0ZW5vcnRoLmNhghFncmFuZHZpZXcubXZzZC5jYYILaGVzLm12
c2QuY2GCHmhpZ2hsYW5kLmNvbW94dmFsbGV5c2Nob29scy5jYYIiaG9ybmJ5aXNs
YW5kLmNvbW94dmFsbGV5c2Nob29scy5jYYIIaHRjc2QuY2GCHGh1YmFuZC5jb21v
eHZhbGxleXNjaG9vbHMuY2GCImluZGlnZW5vdXNlZC5jb21veHZhbGxleXNjaG9v
bHMuY2GCKWluZGlnZW5vdXNlZHVjYXRpb24uY29tb3h2YWxsZXlzY2hvb2xzLmNh
ggtpc3AubXZzZC5jYYIcamFja2llcm9iaW5zb25lbGVtZW50YXJ5Lm9yZ4IQbWFj
bmVpbGwubXZzZC5jYYILbW1zLm12c2QuY2GCEW5lbHNvbmRpb2Nlc2Uub3Jngg1v
Y2hyZS5tdnNkLmNhgg5vZXMuc2Q1My5iYy5jYYIOb2tmLnNkNTMuYmMuY2GCDm9z
ZS5zZDUzLmJjLmNhgg5vc3Muc2Q1My5iYy5jYYIQcGhvZW5peC5odGNzZC5jYYIW
cmFuY2hpdG9lbGVtZW50YXJ5Lm9yZ4ILcmVzLm12c2QuY2GCFnJvYmluc29uZWxl
bWVudGFyeS5vcmeCFHNhY3JlZGhlYXJ0Lmh0Y3NkLmNhgg9zZXNzLnNkNTMuYmMu
Y2GCFHNtaXRoamFja3Nvbi5tdnNkLmNhgg9zb3NzLnNkNTMuYmMuY2GCEHN0YWdu
ZXMuaHRjc2QuY2GCE3N0bWFyZ2FyZXQuaHRjc2QuY2GCD3N0bWFyeS5odGNzZC5j
YYISc3RtaWNoYWVsLmh0Y3NkLmNhgg50ZW4uc2Q1My5iYy5jYYIPdmFuaWVyLmh0
Y3NkLmNhggt3Y2kubXZzZC5jYYILd2VzLm12c2QuY2GCEHdoaXRtb3JlLm12c2Qu
Y2GCEnd3dy5iaWNzY2hvb2xzLm5ldIIZd3d3LmNvbGVnaW9ncmVlbmhpbGxzLmNv
bYIUd3d3LmVjc2NydXNhZGVycy5jb22CGnd3dy5mYXRpbWFzY2hvb2x3aWx0b24u
Y29tghp3d3cuZmF0aW1hc2Nob29sd2lsdG9uLm9yZ4IUd3d3LmdyYWR1YXRlbm9y
dGguY2GCDHd3dy5odGNzZC5jYYIgd3d3LmphY2tpZXJvYmluc29uZWxlbWVudGFy
eS5vcmeCC3d3dy5tdnNkLmNhghV3d3cubmVsc29uZGlvY2VzZS5vcmeCDnd3dy5u
bHNkMTEzLmNhghp3d3cucmFuY2hpdG9lbGVtZW50YXJ5Lm9yZ4Iad3d3LnJvYmlu
c29uZWxlbWVudGFyeS5vcmeCDnd3dy5zZDUzLmJjLmNhghF3d3cud2VhcmVkYWNl
Lm9yZ4ITeW91bGVhcm4uc2Q1My5iYy5jYTBMBgNVHSAERTBDMAgGBmeBDAECATA3
BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNy
eXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2APCVpFnyANGCQBAtL5OI
jq1L/h1H45nh0DSmsKiqjrJzAAABbgX2yWcAAAQDAEcwRQIgMDKwG/as+p+R/F4V
f7sHCWapw4O2/zFh2ZPvnzFPl9sCIQDxMLIaoEfR8QVWB2///SgIE1rVlGdHMV7b
1CyAOJF/wQB1ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABbgX2
yYEAAAQDAEYwRAIgdZgXojnpYJs0OVukQzJZmICHzhZRQ2cBJujq1/J9UNYCIFCD
ccI55ca95+rjowzYXgFGMPZlxiXDtP0BZGsj0vHQMA0GCSqGSIb3DQEBCwUAA4IB
AQBHnaN4YaCtnBo8WsJDth/uUbfBmDBqh+/P5gX4PKJOgsg8J3YtCUalgHtTVM2h
XBF00gfbyFfCwExAk2cbEGmFozEjNsTmat1Q5OpOD+0Zcf0BFTFm1zLDz0eg7Ti7
vFDSQAyVVvmKQCiBfZluq0nYzE+lD6ySmrL8Sx5O0doH1LVwwUo9ynwlAkO/1Y//
GbXsbXulAUoC2eDR3hB3JHgXcnQ/Ees4pEXp/fNGdxcmDfcODsN4DLJfF8K62goL
3BF3NPUljlGWhTuCOLre3z+w967d1Nz4pJv7RHc0xNMkF/hZSYfQLDzTini+xXSf
zBNOlY2mcEZEuKSJSwGGkJur
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331398912117101495856857096852434714546145
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 01:48:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-24 01:48:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.wearedace.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1718 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bicschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.colegiogreenhills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ecscrusaders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jackierobinsonelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airport.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allsaints.htcsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arden.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspen.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barker.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brooklyn.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christtheking.htcsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colegiogreenhills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courtenay.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cps.sd53.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cumberland.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denman.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drcss.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecscrusaders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethelbert.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatimaschoolwilton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatimaschoolwilton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glacierview.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glh.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpci.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpes.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpvanier.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graduatenorth.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandview.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hes.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highland.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hornbyisland.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'htcsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huband.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indigenoused.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indigenouseducation.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isp.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jackierobinsonelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macneill.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsondiocese.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ochre.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oes.sd53.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okf.sd53.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ose.sd53.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oss.sd53.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phoenix.htcsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranchitoelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'res.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robinsonelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheart.htcsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sess.sd53.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smithjackson.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soss.sd53.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagnes.htcsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmargaret.htcsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmary.htcsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmichael.htcsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ten.sd53.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vanier.htcsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wci.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wes.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitmore.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bicschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegiogreenhills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecscrusaders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fatimaschoolwilton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fatimaschoolwilton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.graduatenorth.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.htcsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jackierobinsonelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsondiocese.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nlsd113.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ranchitoelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robinsonelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sd53.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wearedace.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youlearn.sd53.bc.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e05f6c967000004030047304502203032b01bf6acfa9f91fc5e157fbb070966a9c383b6ff3161d993ef9f314f97db022100f130b21aa047d1f10556076ffffd2808135ad5946747315edbd42c8038917fc1007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e05f6c98100000403004630440220759817a239e9609b34395ba4433259988087ce165143670126e8ead7f27d50d60220508371c239e5c6bde7eae3a30cd85e014630f665c625c3b4fd01646b23d2f1d0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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