admin.bcs.lskysd.ca

Issued by R3

About this certificate

This digital certificate with serial number 03:ef:dd:2a:6a:db:aa:7c:f2:b0:3a:1d:b5:20:ae:45:21:60 was issued on by Let's Encrypt.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.bcs.lskysd.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ef:dd:2a:6a:db:aa:7c:f2:b0:3a:1d:b5:20:ae:45:21:60
Serial Number (int): 342958323120260706660526088585861524693344
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b0:cf:e8:a5:06:36:7b:7c:fa:e6:7a:bc:3a:3a:19:3b:2a:c2:27:ba
Fingerprint (sha256): 77:0a:c7:eb:6f:68:6c:6e:d8:46:41:ce:85:f4:31:15:61:e5:c4:43:a8:a2:d7:3e:f3:a6:70:6e:ae:54:56:67

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate admin.bcs.lskysd.ca

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.bcs.lskysd.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.bcs.lskysd.ca
admin.bready.lskysd.ca
admin.calmecaacademy.com
admin.cando.lskysd.ca
admin.cathedralschoolny.org
admin.ckcs.lskysd.ca
admin.connaught.lskysd.ca
admin.cornelius.fgsdk12.org
admin.csd300.org
admin.dilley.fgsdk12.org
admin.echoshaw.fgsdk12.org
admin.fernhill.fgsdk12.org
admin.fghs.fgsdk12.org
admin.fgsdk12.org
admin.garvanzaelementary.org
admin.hafford.lskysd.ca
admin.hamlincharter.org
admin.harveyclarke.fgsdk12.org
admin.hces.lskysd.ca
admin.heritage.lskysd.ca
admin.highschool.mcasd.net
admin.husd4.org
admin.josephgale.fgsdk12.org
admin.kauffmanschool.org
admin.kaumanaelementary.org
admin.kcs.lskysd.ca
admin.lawrence.lskysd.ca
admin.leoville.lskysd.ca
admin.lskysd.ca
admin.luseland.lskysd.ca
admin.macklin.lskysd.ca
admin.maymont.lskysd.ca
admin.mcasd.net
admin.mccreery.mcasd.net
admin.mckitrick.lskysd.ca
admin.missionprep.org
admin.nams.fgsdk12.org
admin.oga.fgsdk12.org
admin.omardblaircharterschool.com
admin.phillyscholars.org
admin.rayne.mcasd.net
admin.ryderschool.org
admin.sendicaeducation.com
admin.siths.org
admin.tommcall.fgsdk12.org
calmecaacademy.com
cathedralschoolny.org
cornelius.fgsdk12.org
csd300.org
ddiny.org
dilley.fgsdk12.org
echoshaw.fgsdk12.org
fernhill.fgsdk12.org
fghs.fgsdk12.org
fgsdk12.org
garvanzaelementary.org
hamlincharter.org
harveyclarke.fgsdk12.org
highschool.mcasd.net
husd4.org
josephgale.fgsdk12.org
kauffmanschool.org
kaumanaelementary.org
lskysd.ca
mcasd.net
mccreery.mcasd.net
missionprep.org
nams.fgsdk12.org
northregionselpa.org
oga.fgsdk12.org
omardblaircharterschool.com
phillyscholars.org
rayne.mcasd.net
ryderschool.org
siths.org
tommcall.fgsdk12.org
web.sendicaeducation.com
www.calmecaacademy.com
www.cathedralschoolny.org
www.csd300.org
www.ddiny.org
www.fgsdk12.org
www.garvanzaelementary.org
www.hamlincharter.org
www.husd4.org
www.kauffmanschool.org
www.kaumanaelementary.org
www.mcasd.net
www.missionprep.org
www.northregionselpa.org
www.omardblaircharterschool.com
www.phillyscholars.org
www.ryderschool.org
www.siths.org
www.sunrisewaldorfschool.org

Other certificates including the domain name lskysd.ca

(limited to 100 certificates)
helpdesk.lskysd.ca
*.lskysd.ca
artsalive.lskysd.ca
artsalive.lskysd.ca
P-CAMNE.IGLOODIGITALWORKPLACES.CA
mil.ldcsb.ca
admin.mckitrick.lskysd.ca
www.stgregsschool.org
webservices.lskysd.ca
P-CAMNE.IGLOODIGITALWORKPLACES.CA
ckcs.lskysd.ca
admin.bands.dekalbcentral.net
*.lskysd.ca
*.lskysd.ca
owa.lskysd.ca
mail.staff.lskysd.ca
P-CAMNE.IGLOODIGITALWORKPLACES.CA
shs.lskysd.ca
artsalive.lskysd.ca
admin.bcs.lskysd.ca
*.lskysd.ca
admin.bands.dekalbcentral.net
www.lskysd.ca
webservices.lskysd.ca
webservices.lskysd.ca
artsalive.lskysd.ca
fallbrookhs.org
P-CAMNE.IGLOODIGITALWORKPLACES.CA
admin.ups.lskysd.ca
P-CAMNE.IGLOODIGITALWORKPLACES.CA
mail.staff.lskysd.ca
mail.staff.lskysd.ca
*.lskysd.ca
sis.lskysd.ca
admin.bcs.lskysd.ca
lskysd.ca
webservices.lskysd.ca
artsalive.lskysd.ca
ckcs.lskysd.ca
www.northregionselpa.org
webservices.lskysd.ca
admin.bcs.lskysd.ca
webservices.lskysd.ca
webservices.lskysd.ca
ups.lskysd.ca
webservices.lskysd.ca
admin.bcs.lskysd.ca
lync.lskysd.ca

Certificate

The complete raw certificate details for admin.bcs.lskysd.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342958323120260706660526088585861524693344
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-22 19:50:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-22 19:50:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.bcs.lskysd.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2136 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bcs.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bready.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.calmecaacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cando.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cathedralschoolny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ckcs.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.connaught.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cornelius.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.csd300.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dilley.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.echoshaw.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fernhill.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fghs.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.garvanzaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hafford.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hamlincharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.harveyclarke.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hces.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.heritage.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.highschool.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.husd4.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.josephgale.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kauffmanschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kaumanaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kcs.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lawrence.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.leoville.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.luseland.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.macklin.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.maymont.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mccreery.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mckitrick.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.missionprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nams.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.oga.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.omardblaircharterschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.phillyscholars.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rayne.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ryderschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sendicaeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.siths.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tommcall.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calmecaacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cathedralschoolny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornelius.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csd300.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ddiny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dilley.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echoshaw.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fernhill.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fghs.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garvanzaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamlincharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harveyclarke.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highschool.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'husd4.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'josephgale.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kauffmanschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaumanaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mccreery.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missionprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nams.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northregionselpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oga.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omardblaircharterschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phillyscholars.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rayne.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryderschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siths.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tommcall.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.sendicaeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.calmecaacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cathedralschoolny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csd300.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ddiny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garvanzaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hamlincharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.husd4.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kauffmanschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaumanaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missionprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northregionselpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omardblaircharterschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phillyscholars.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ryderschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.siths.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunrisewaldorfschool.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c2000001768c37e780000004030048304602210091ebad6bfbe74945a59a69c13959b8c9d0e3eb9b751c9af86703c3999175b572022100ba418eeac48ddab5ce3c4b94d9ed9d51c7cc9c3a6cc24ebbeeb18afe5e81e968007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001768c37e7860000040300483046022100f1acc4f22caf6002b69acdcb8ef08787a2a0a2172d5313b55ae11a38cda3ae6c022100ff240452cd689702b3aad84a1a6d988d188d93297ebe1ae3ff7e1f90bc8dcb23
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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