acecharterhigh.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:57:34:68:e3:06:58:7d:c1:25:5c:6c:0d:82:52:d1:a5:4e was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=acecharterhigh.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:57:34:68:e3:06:58:7d:c1:25:5c:6c:0d:82:52:d1:a5:4e
Serial Number (int): 291011088176666225221362077386567702390094
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d5:49:8a:16:b0:f0:b6:4b:91:fb:44:87:bc:d4:b5:d7:5f:e6:67:df
Fingerprint (sha256): 74:de:03:c0:ed:fe:e9:e7:7b:f1:98:84:d0:77:1f:bd:36:dd:a7:63:63:be:65:78:ab:e3:82:f0:9e:16:8c:2a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate acecharterhigh.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acecharterhigh.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acecharterhigh.com
admin.acecharterhigh.org
admin.archbishopryan.com
admin.beatty.bpsd.k12.ca.us
admin.centerstreetschool.org
admin.chesterfieldcoordinating.org
admin.eaaschool.org
admin.flacsnyc.com
admin.francisclassicalschool.org
admin.nellieschildcare.com
admin.newdesignscharter.com
admin.stmaryhsnj.org
admin.waiakeaelementary.org
admin.wattslearningcenter.org
admin.westfieldfriends.org
admin.westportschools.org
ae.chesterfieldschools.org
archbishopryan.com
baileystationes.colliervilleschools.org
centerstreetschool.org
chesterfieldcoordinating.org
church.stfrancisxavier.com
colliervillees.colliervilleschools.org
colliervillehs.colliervilleschools.org
colliervillems.colliervilleschools.org
crosswindes.colliervilleschools.org
ea.gonzalesisd.net
eaaschool.com
eaaschool.net
eaaschool.org
flacs.flacsnyc.com
flacs2.flacsnyc.com
flacs2nyc.com
flacs3.flacsnyc.com
flacsnyc.com
francisclassicalschool.org
ge.gonzalesisd.net
gis.gonzalesisd.net
gisd.gonzalesisd.net
hancock.ellsworthschools.org
hs.gonzalesisd.net
it.chesterfieldschools.org
jh.gonzalesisd.net
jis.jarrellisd.org
legacy.frenship.us
lms.lifeschools.net
na.gonzalesisd.net
nellieschildcare.com
network.flacsnyc.com
newdesignscharter.com
newdesignscharter.org
pc.jeffersondavis.org
ro7.lifeschools.net
schillingfarmsms.colliervilleschools.org
sphs.spusd.net
stmaryhsnj.org
stmaryshsnj.org
stmarysoftheassumptionhs.org
stvfschool.org
sycamorees.colliervilleschools.org
taraoakses.colliervilleschools.org
waiakeaelementary.org
wattslearningcenter.org
westfieldfriends.org
westportschools.org
www.acecharterhigh.com
www.acecharterhigh.org
www.archbishopryan.com
www.avadult.org
www.centerstreetschool.org
www.chesterfieldcoordinating.org
www.colliervilleschools.org
www.ctkjesuit.org
www.eaaschool.com
www.eaaschool.net
www.eaaschool.org
www.ellsworthschools.org
www.fentoncharter.net
www.flacs2nyc.com
www.flacsnyc.com
www.francisclassicalschool.org
www.nellieschildcare.com
www.newdesignscharter.com
www.newdesignscharter.org
www.resurrectionrams.org
www.saintlouishawaii.org
www.sphstigers.org
www.stanastasiaparish.org
www.stanastasiaschool.org
www.stanthonyhighschool.org
www.stbrendansf.com
www.stmaryhsnj.org
www.stmaryshsnj.org
www.stmarysoftheassumptionhs.org
www.utmcs.org
www.waiakeaelementary.org
www.wattslearningcenter.org
www.westportschools.org
www.whitehouseisd.org

Other certificates including the domain name acecharterhigh.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for acecharterhigh.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291011088176666225221362077386567702390094
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-09 02:04:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-10 02:04:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acecharterhigh.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2452 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acecharterhigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.acecharterhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.archbishopryan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.beatty.bpsd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.centerstreetschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.chesterfieldcoordinating.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eaaschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.flacsnyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.francisclassicalschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nellieschildcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.newdesignscharter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stmaryhsnj.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.waiakeaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wattslearningcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.westfieldfriends.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.westportschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ae.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archbishopryan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baileystationes.colliervilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centerstreetschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chesterfieldcoordinating.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'church.stfrancisxavier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colliervillees.colliervilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colliervillehs.colliervilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colliervillems.colliervilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crosswindes.colliervilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ea.gonzalesisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eaaschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eaaschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eaaschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flacs.flacsnyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flacs2.flacsnyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flacs2nyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flacs3.flacsnyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flacsnyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'francisclassicalschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ge.gonzalesisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gis.gonzalesisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gisd.gonzalesisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hancock.ellsworthschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.gonzalesisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jh.gonzalesisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jis.jarrellisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.frenship.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lms.lifeschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na.gonzalesisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nellieschildcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'network.flacsnyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newdesignscharter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newdesignscharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pc.jeffersondavis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ro7.lifeschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schillingfarmsms.colliervilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sphs.spusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryhsnj.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryshsnj.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysoftheassumptionhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stvfschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sycamorees.colliervilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taraoakses.colliervilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waiakeaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wattslearningcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westfieldfriends.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westportschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acecharterhigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acecharterhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.archbishopryan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avadult.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centerstreetschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chesterfieldcoordinating.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colliervilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctkjesuit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eaaschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eaaschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eaaschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ellsworthschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fentoncharter.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flacs2nyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flacsnyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.francisclassicalschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nellieschildcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newdesignscharter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newdesignscharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resurrectionrams.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintlouishawaii.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sphstigers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanastasiaparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanastasiaschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanthonyhighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbrendansf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryhsnj.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryshsnj.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysoftheassumptionhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.utmcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waiakeaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wattslearningcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westportschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whitehouseisd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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