nes.norris.k12.ca.us

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b3:ce:54:9c:62:91:4f:df:23:b8:4a:bc:66:a0:63:b0:89 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nes.norris.k12.ca.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b3:ce:54:9c:62:91:4f:df:23:b8:4a:bc:66:a0:63:b0:89
Serial Number (int): 322521661766061764476523711220713240375433
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 02:fa:ea:6a:7e:09:dc:d6:e0:9b:81:93:24:f7:d8:96:92:75:c9:75
Fingerprint (sha256): 74:05:8f:8d:17:34:7b:e0:55:01:61:32:ab:fa:6d:56:66:e7:41:92:15:3e:8e:9b:75:c3:f4:a0:a2:a6:67:08

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nes.norris.k12.ca.us

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nes.norris.k12.ca.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.adultschool.uusd.net
admin.avalon.solake.org
admin.bayschoolsf.org
admin.bes.wclark.k12.in.us
admin.bhs.wclark.k12.in.us
admin.calpella.uusd.net
admin.eaglepeak.uusd.net
admin.elementary.stjosephhillacademy.com
admin.elmwood.solake.org
admin.fhs.frankfortschools.org
admin.fms.frankfortschools.org
admin.frankzeek.uusd.net
admin.hes.wclark.k12.in.us
admin.highschool.stjosephhillacademy.com
admin.koepsell.solake.org
admin.nes.norris.k12.ca.us
admin.nms.norris.k12.ca.us
admin.nokomis.uusd.net
admin.norris.k12.ca.us
admin.oakmanor.uusd.net
admin.ode.norris.k12.ca.us
admin.olgchawaii.org
admin.pomolita.uusd.net
admin.pusdatsa.org
admin.schs.wclark.k12.in.us
admin.scms.wclark.k12.in.us
admin.scps.wclark.k12.in.us
admin.sjbschool-sa.com
admin.slhs.solake.org
admin.slms.solake.org
admin.solake.org
admin.southvalley.uusd.net
admin.stjosephhillacademy.com
admin.uisa.uusd.net
admin.ukiahhigh.uusd.net
admin.ves.norris.k12.ca.us
admin.wbe.norris.k12.ca.us
admin.wcec.wclark.k12.in.us
admin.wclark.k12.in.us
admin.yokayo.uusd.net
adultschool.uusd.net
avalon.solake.org
bayschoolsf.org
bes.wclark.k12.in.us
bhs.wclark.k12.in.us
caldwellisd.net
calpella.uusd.net
carnegieshermanoaks.org
eaglepeak.uusd.net
elementary.stjosephhillacademy.com
elmwood.solake.org
es.caldwellisd.net
fhs.frankfortschools.org
fms.frankfortschools.org
frankzeek.uusd.net
fvhs.com
gracehudson.uusd.net
hes.wclark.k12.in.us
highschool.stjosephhillacademy.com
hs.caldwellisd.net
is.caldwellisd.net
koepsell.solake.org
ms.caldwellisd.net
nes.norris.k12.ca.us
nms.norris.k12.ca.us
nokomis.uusd.net
norris.k12.ca.us
oakmanor.uusd.net
ode.norris.k12.ca.us
olgchawaii.org
pomolita.uusd.net
pusdatsa.org
sces.wclark.k12.in.us
schs.wclark.k12.in.us
scms.wclark.k12.in.us
scps.wclark.k12.in.us
slhs.solake.org
slms.solake.org
solake.org
southvalley.uusd.net
stjosephhillacademy.com
uisa.uusd.net
ukiahhigh.uusd.net
ves.norris.k12.ca.us
wbe.norris.k12.ca.us
wcec.wclark.k12.in.us
www.baker.k12.or.us
www.bayschoolsf.org
www.caldwellisd.net
www.carnegieshermanoaks.org
www.d75.lake.k12.il.us
www.fvhs.com
www.norris.k12.ca.us
www.olgchawaii.org
www.pusdatsa.org
www.solake.org
www.stjosephhillacademy.com
www.ukiahhigh.uusd.net
yokayo.uusd.net

Other certificates including the domain name norris.k12.ca.us

(limited to 100 certificates)
*.norris.k12.ca.us
admin.ninth.frenship.net
admin.adultschool.uusd.net
admin.aeropuerto.ipefh.edu.mx
help.norris.k12.ca.us
schoolforthedeaf.wvsdb2.state.k12.wv.us
admin.aeropuerto.ipefh.edu.mx
*.norris.k12.ca.us
help.norris.k12.ca.us
*.norris.k12.ca.us
norris.k12.ca.us
admin.adultschool.uusd.net
admin.adultschool.uusd.net
www.bpbraves.net
norris.k12.ca.us
help.norris.k12.ca.us
wclark.k12.in.us
*.norris.k12.ca.us
phs.pusdatsa.org
help.norris.k12.ca.us
help.norris.k12.ca.us
admin.aeropuerto.ipefh.edu.mx
preschool.castaicusd.com
admin.frenship.net
admin.adultschool.uusd.net
hyer.hpisd.org
burkett.montourschools.com
admin.stemk12.org
nms.norris.k12.ca.us
admin.aeropuerto.ipefh.edu.mx
norris.k12.ca.us
admin.aeropuerto.ipefh.edu.mx
admin.multisensoryschool.wvsdb2.state.k12.wv.us
admin.aeropuerto.ipefh.edu.mx
*.norris.k12.ca.us
help.norris.k12.ca.us
help.norris.k12.ca.us
help.norris.k12.ca.us
admin.bennett.frenship.net
koepsell.solake.org
admin.adultschool.uusd.net
*.norris.k12.ca.us
fhs.frankfortschools.org
nes.norris.k12.ca.us
admin.cfn.edu.mx
help.norris.k12.ca.us
help.norris.k12.ca.us
wbe.norris.k12.ca.us
norris.k12.ca.us
norris.k12.ca.us
ode.norris.k12.ca.us
admin.bennett.frenship.net
elementary.stjosephhillacademy.com
www.norris.k12.ca.us
norris.k12.ca.us
help.norris.k12.ca.us
admin.adultschool.uusd.net
admin.aeropuerto.ipefh.edu.mx
*.norris.k12.ca.us
admin.adultschool.uusd.net
help.norris.k12.ca.us
admin.adultschool.uusd.net
admin.adultschool.uusd.net
norris.k12.ca.us
*.norris.k12.ca.us
www.pusdatsa.org
admin.bennett.frenship.net
www.loyola-nyc.org
admin.bennett.frenship.net
admin.adultschool.uusd.net
norris.k12.ca.us
admin.adultschool.uusd.net
*.norris.k12.ca.us
*.norris.k12.ca.us
dietz.crandall-isd.net
*.norris.k12.ca.us
admin.adultschool.uusd.net
ode.norris.k12.ca.us
admin.adultschool.uusd.net
admin.aeropuerto.ipefh.edu.mx
nes.norris.k12.ca.us
help.norris.k12.ca.us
admin.hhs.wclark.k12.in.us
metepec.ipefh.edu.mx
*.norris.k12.ca.us
*.norris.k12.ca.us
www.ukiahhigh.uusd.net
uusd.net
admin.adultschool.uusd.net
ves.norris.k12.ca.us
norris.k12.ca.us
norris.k12.ca.us
help.norris.k12.ca.us
southprimary.kiskiarea.com
www.carnegieshermanoaks.org

Certificate

The complete raw certificate details for nes.norris.k12.ca.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322521661766061764476523711220713240375433
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-20 09:44:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-19 09:44:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nes.norris.k12.ca.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2314 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.adultschool.uusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.avalon.solake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bayschoolsf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bes.wclark.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bhs.wclark.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.calpella.uusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eaglepeak.uusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.elementary.stjosephhillacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.elmwood.solake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fhs.frankfortschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fms.frankfortschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.frankzeek.uusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hes.wclark.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.highschool.stjosephhillacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.koepsell.solake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nes.norris.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nms.norris.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nokomis.uusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.norris.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.oakmanor.uusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ode.norris.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.olgchawaii.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pomolita.uusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pusdatsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.schs.wclark.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.scms.wclark.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.scps.wclark.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sjbschool-sa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.slhs.solake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.slms.solake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.solake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.southvalley.uusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stjosephhillacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.uisa.uusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ukiahhigh.uusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ves.norris.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wbe.norris.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wcec.wclark.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wclark.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.yokayo.uusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adultschool.uusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avalon.solake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayschoolsf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bes.wclark.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhs.wclark.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caldwellisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calpella.uusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carnegieshermanoaks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eaglepeak.uusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elementary.stjosephhillacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elmwood.solake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.caldwellisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fhs.frankfortschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fms.frankfortschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frankzeek.uusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fvhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gracehudson.uusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hes.wclark.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highschool.stjosephhillacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.caldwellisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is.caldwellisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koepsell.solake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.caldwellisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nes.norris.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nms.norris.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nokomis.uusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norris.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oakmanor.uusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ode.norris.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olgchawaii.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pomolita.uusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pusdatsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sces.wclark.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schs.wclark.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scms.wclark.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scps.wclark.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slhs.solake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slms.solake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southvalley.uusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephhillacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uisa.uusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukiahhigh.uusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ves.norris.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wbe.norris.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcec.wclark.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baker.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayschoolsf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caldwellisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carnegieshermanoaks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.d75.lake.k12.il.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fvhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norris.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olgchawaii.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pusdatsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephhillacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ukiahhigh.uusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yokayo.uusd.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a3a58d22b000004030047304502206f9fd7dc9bcdb5f7ed7331175170abc90f6587ca9ede393ec7c2f7d9ca3d3be8022100908688aee5795723e226f8f79708cee8629f3cd7413903b732f4a76cd21ebdd1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a3a58d0b2000004030047304502203a2546fea0d042cf5f7e85675928f4937446525227889d5c1b74e24bb9414a0c022100def0ed019dd615ae2dacea834d8d55f2c8a93ef11eb69b2819195a368514e757
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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