admin.cfn.edu.mx

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:10:b1:54:2e:36:79:8a:5e:d5:42:0a:a1:d4:8d:41:08:55 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.cfn.edu.mx

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:10:b1:54:2e:36:79:8a:5e:d5:42:0a:a1:d4:8d:41:08:55
Serial Number (int): 267017086111512579899845430612971623614549
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bd:ca:99:8c:05:31:5b:1b:bf:6d:58:d7:17:ac:35:fc:31:1c:6d:69
Fingerprint (sha256): 77:eb:6e:b8:12:8f:bf:50:0c:f9:ff:09:50:67:b1:10:ad:0a:33:04:89:5c:34:5b:0b:01:6a:16:09:3e:02:90

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate admin.cfn.edu.mx

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.cfn.edu.mx

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.bennett.frenship.net
admin.castaicusd.com
admin.ces.castaicusd.com
admin.cfn.edu.mx
admin.charter.ncsd.school
admin.cms.castaicusd.com
admin.colegiobosquereal.edu.mx
admin.colegioterranova.edu.mx
admin.csx211.org
admin.deercreek.ncsd.school
admin.fhs.frenship.net
admin.fms.frenship.net
admin.gilbertacademy.org
admin.gilmore.ucboe.us
admin.hms.frenship.net
admin.legacy.frenship.net
admin.los.castaicusd.com
admin.ncsd.school
admin.newnasa.org
admin.nhs.castaicusd.com
admin.nr.frenship.net
admin.or.frenship.net
admin.pams.pusdatsa.org
admin.pes.pusdatsa.org
admin.phs.pusdatsa.org
admin.preschool.castaicusd.com
admin.rec.frenship.net
admin.sevenhills.ncsd.school
admin.tvms.frenship.net
admin.usd205.com
admin.wb.frenship.net
admin.ww.frenship.net
bennett.frenship.net
castaicusd.com
ces.castaicusd.com
charter.ncsd.school
cms.castaicusd.com
colegiobosquereal.edu.mx
colegioterranova.edu.mx
csx211.org
cv.frenship.net
deercreek.ncsd.school
dietz.crandall-isd.net
elementary.montourschools.com
faa.pamlico.k12.nc.us
fhs.frenship.net
fms.frenship.net
gilbertacademy.org
gilmore.ucboe.us
hms.frenship.net
hy.hpisd.org
hyer.hpisd.org
legacy.frenship.net
los.castaicusd.com
ncsd.school
nes.norris.k12.ca.us
newnasa.org
nhs.castaicusd.com
nms.norris.k12.ca.us
norris.k12.ca.us
nr.frenship.net
ode.norris.k12.ca.us
or.frenship.net
pamlico.k12.nc.us
pams.pusdatsa.org
pchs.pamlico.k12.nc.us
pcms.pamlico.k12.nc.us
pcps.pamlico.k12.nc.us
pes.pusdatsa.org
phs.pusdatsa.org
preschool.castaicusd.com
rec.frenship.net
schoolforthedeaf.wvsdb2.state.k12.wv.us
sevenhills.ncsd.school
stemhigh.org
stemk12.org
tvms.frenship.net
uh.frenship.net
ves.norris.k12.ca.us
vvhs.info
wb.frenship.net
wbe.norris.k12.ca.us
ww.frenship.net
www.bpbraves.net
www.bradleyschools.org
www.castaicusd.com
www.colegiobosquereal.edu.mx
www.colegioterranova.edu.mx
www.csx211.org
www.gilbertacademy.org
www.loyola-nyc.org
www.ncsd.school
www.newnasa.org
www.norris.k12.ca.us
www.rockwernacademy.org
www.stemhigh.org
www.stemk12.org
www.usd205.com

Other certificates including the domain name cfn.edu.mx

(limited to 100 certificates)
*.cfn.edu.mx
admin.dm.aceroschools.org
www.cfn.edu.mx
admin.hes.huntingtonisd.com
aceroschools.org
cfn.edu.mx
plummerpanthers.org
admin.cfn.edu.mx
mis.edu.mx
admin.mhs.cherokee.k12.nc.us
admin.stggcs.org
admin.hg.aceroschools.org
athletics.aquinashs.net
ace.pusd.org
ms.gsd.wednet.edu
acsaregionxv.org
admin.ahs.cherokee.k12.nc.us
aceroschools.org
admin.nbfacademy.org
acsaregionxv.org
admin.bennett.frenship.net
shs.smithvilleisd.org
admin.cfn.edu.mx
vs.aceroschools.org
aceroschools.org
admin.bennett.frenship.net
aceroschools.org
admin.ms.moodyisd.org
stmmsa.org
acsaregionxv.org
ace.pusd.org
acsaregionxv.org
en-merida.mis.edu.mx
admin.resedahs.net
acsaregionxv.org
cfn.edu.mx
admin.cfn.edu.mx
*.cfn.edu.mx
pes.cherokee.k12.nc.us
admin.bradfield.hpisd.org
nhuman.edu.mx
admin.hs.hpisd.org
claytonvalley.org
admin.mcems.cherokee.k12.nc.us
cfn.edu.mx
ace.pusd.org
admin.kit.mynhusd.org
ace.pusd.org
cfn.edu.mx
admin.aquinashs.net
sanjose.pusd.org

Certificate

The complete raw certificate details for admin.cfn.edu.mx in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPQjCCDiqgAwIBAgISAxCxVC42eYpe1UIKodSNQQhVMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA2MTUwMTAzMTFaFw0x
ODA5MTMwMTAzMTFaMBsxGTAXBgNVBAMTEGFkbWluLmNmbi5lZHUubXgwggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCtrIXp7mbejFBtMdv7bPut9hUKX6mH
mbwUkk4SAS2wWeHzgwVeEiXu4Q62pKUwqxHbZ3Nw0C0rUbmlXdHhEGCfXxFMedMP
19LbsnHJ7J+Vd91RftXDhoavIx/wwT5kaGhpA/RdgHdcMauZAXdn+HZ7pK1qC5s7
6lXAXMbxUMB2dqGxStseulJ5+JrOLKGF4+QvfNCD86ZpCQrvACEk7x6XbPfvksN3
ZUjCt1ZA/YmNXz3Zh360hk6cCTaPIOW/cxhcpcaKUHKtCVZnUB2M4p9GJjRyQW67
8NiS6+Q0qbZ/fNRq/DeyUK6NlYeQgdk2lo23F+yuki1QirlO7vNt6T8xH8kxH2dx
5bJnYy6d35JuB8t/3rA+FUFquuynUc1H4iSjK2vk8w1EHPBbMG9MPwXurpyRRsiC
l6juy2ftvQg1c9iA1PvMVf9Q0JxaP5pon4q7wwpXgQQS5qK+Nb8/5ObrheNc2M/0
XVbz7m2VwmAmEZTITKUJS0BGqE+iNTNCeuHWJRIxE0jaWIngi53H+jdDgTbDoC53
09jJXTmkWAx1Itg1EZBPJBFJpJtDceZ9mL+lCMXJSiGIDv+HSiZSYIgOJBUbfR4e
Fvc4g/dsmKxdkrioSuflkOYp1SA0LcZL7LCtMAFiPQ34RSeiGRSLqKQPiZ7qjnyy
r8hBWbJ6bUz8TQIDAQABo4ILTzCCC0swDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQv
a8hNbCwuMvIAIP8tTWxa/G66uzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv
86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu
dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu
dC14My5sZXRzZW5jcnlwdC5vcmcvMIIIUgYDVR0RBIIISTCCCEWCGmFkbWluLmJl
bm5ldHQuZnJlbnNoaXAubmV0ghRhZG1pbi5jYXN0YWljdXNkLmNvbYIYYWRtaW4u
Y2VzLmNhc3RhaWN1c2QuY29tghBhZG1pbi5jZm4uZWR1Lm14ghlhZG1pbi5jaGFy
dGVyLm5jc2Quc2Nob29sghhhZG1pbi5jbXMuY2FzdGFpY3VzZC5jb22CHmFkbWlu
LmNvbGVnaW9ib3NxdWVyZWFsLmVkdS5teIIdYWRtaW4uY29sZWdpb3RlcnJhbm92
YS5lZHUubXiCEGFkbWluLmNzeDIxMS5vcmeCG2FkbWluLmRlZXJjcmVlay5uY3Nk
LnNjaG9vbIIWYWRtaW4uZmhzLmZyZW5zaGlwLm5ldIIWYWRtaW4uZm1zLmZyZW5z
aGlwLm5ldIIYYWRtaW4uZ2lsYmVydGFjYWRlbXkub3JnghZhZG1pbi5naWxtb3Jl
LnVjYm9lLnVzghZhZG1pbi5obXMuZnJlbnNoaXAubmV0ghlhZG1pbi5sZWdhY3ku
ZnJlbnNoaXAubmV0ghhhZG1pbi5sb3MuY2FzdGFpY3VzZC5jb22CEWFkbWluLm5j
c2Quc2Nob29sghFhZG1pbi5uZXduYXNhLm9yZ4IYYWRtaW4ubmhzLmNhc3RhaWN1
c2QuY29tghVhZG1pbi5uci5mcmVuc2hpcC5uZXSCFWFkbWluLm9yLmZyZW5zaGlw
Lm5ldIIXYWRtaW4ucGFtcy5wdXNkYXRzYS5vcmeCFmFkbWluLnBlcy5wdXNkYXRz
YS5vcmeCFmFkbWluLnBocy5wdXNkYXRzYS5vcmeCHmFkbWluLnByZXNjaG9vbC5j
YXN0YWljdXNkLmNvbYIWYWRtaW4ucmVjLmZyZW5zaGlwLm5ldIIcYWRtaW4uc2V2
ZW5oaWxscy5uY3NkLnNjaG9vbIIXYWRtaW4udHZtcy5mcmVuc2hpcC5uZXSCEGFk
bWluLnVzZDIwNS5jb22CFWFkbWluLndiLmZyZW5zaGlwLm5ldIIVYWRtaW4ud3cu
ZnJlbnNoaXAubmV0ghRiZW5uZXR0LmZyZW5zaGlwLm5ldIIOY2FzdGFpY3VzZC5j
b22CEmNlcy5jYXN0YWljdXNkLmNvbYITY2hhcnRlci5uY3NkLnNjaG9vbIISY21z
LmNhc3RhaWN1c2QuY29tghhjb2xlZ2lvYm9zcXVlcmVhbC5lZHUubXiCF2NvbGVn
aW90ZXJyYW5vdmEuZWR1Lm14ggpjc3gyMTEub3Jngg9jdi5mcmVuc2hpcC5uZXSC
FWRlZXJjcmVlay5uY3NkLnNjaG9vbIIWZGlldHouY3JhbmRhbGwtaXNkLm5ldIId
ZWxlbWVudGFyeS5tb250b3Vyc2Nob29scy5jb22CFWZhYS5wYW1saWNvLmsxMi5u
Yy51c4IQZmhzLmZyZW5zaGlwLm5ldIIQZm1zLmZyZW5zaGlwLm5ldIISZ2lsYmVy
dGFjYWRlbXkub3JnghBnaWxtb3JlLnVjYm9lLnVzghBobXMuZnJlbnNoaXAubmV0
ggxoeS5ocGlzZC5vcmeCDmh5ZXIuaHBpc2Qub3JnghNsZWdhY3kuZnJlbnNoaXAu
bmV0ghJsb3MuY2FzdGFpY3VzZC5jb22CC25jc2Quc2Nob29sghRuZXMubm9ycmlz
LmsxMi5jYS51c4ILbmV3bmFzYS5vcmeCEm5ocy5jYXN0YWljdXNkLmNvbYIUbm1z
Lm5vcnJpcy5rMTIuY2EudXOCEG5vcnJpcy5rMTIuY2EudXOCD25yLmZyZW5zaGlw
Lm5ldIIUb2RlLm5vcnJpcy5rMTIuY2EudXOCD29yLmZyZW5zaGlwLm5ldIIRcGFt
bGljby5rMTIubmMudXOCEXBhbXMucHVzZGF0c2Eub3JnghZwY2hzLnBhbWxpY28u
azEyLm5jLnVzghZwY21zLnBhbWxpY28uazEyLm5jLnVzghZwY3BzLnBhbWxpY28u
azEyLm5jLnVzghBwZXMucHVzZGF0c2Eub3JnghBwaHMucHVzZGF0c2Eub3Jnghhw
cmVzY2hvb2wuY2FzdGFpY3VzZC5jb22CEHJlYy5mcmVuc2hpcC5uZXSCJ3NjaG9v
bGZvcnRoZWRlYWYud3ZzZGIyLnN0YXRlLmsxMi53di51c4IWc2V2ZW5oaWxscy5u
Y3NkLnNjaG9vbIIMc3RlbWhpZ2gub3JnggtzdGVtazEyLm9yZ4IRdHZtcy5mcmVu
c2hpcC5uZXSCD3VoLmZyZW5zaGlwLm5ldIIUdmVzLm5vcnJpcy5rMTIuY2EudXOC
CXZ2aHMuaW5mb4IPd2IuZnJlbnNoaXAubmV0ghR3YmUubm9ycmlzLmsxMi5jYS51
c4IPd3cuZnJlbnNoaXAubmV0ghB3d3cuYnBicmF2ZXMubmV0ghZ3d3cuYnJhZGxl
eXNjaG9vbHMub3JnghJ3d3cuY2FzdGFpY3VzZC5jb22CHHd3dy5jb2xlZ2lvYm9z
cXVlcmVhbC5lZHUubXiCG3d3dy5jb2xlZ2lvdGVycmFub3ZhLmVkdS5teIIOd3d3
LmNzeDIxMS5vcmeCFnd3dy5naWxiZXJ0YWNhZGVteS5vcmeCEnd3dy5sb3lvbGEt
bnljLm9yZ4IPd3d3Lm5jc2Quc2Nob29sgg93d3cubmV3bmFzYS5vcmeCFHd3dy5u
b3JyaXMuazEyLmNhLnVzghd3d3cucm9ja3dlcm5hY2FkZW15Lm9yZ4IQd3d3LnN0
ZW1oaWdoLm9yZ4IPd3d3LnN0ZW1rMTIub3Jngg53d3cudXNkMjA1LmNvbTCB/gYD
VR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUH
AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyB
m1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVs
eWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2Vy
dGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3Jn
L3JlcG9zaXRvcnkvMIIBAgYKKwYBBAHWeQIEAgSB8wSB8ADuAHUA23Sv7ssp7LH+
yj5xbSzluaq7NveEcYPHXZ1PN7Yfv2QAAAFkAS6m8gAABAMARjBEAiBDQxF8CBoA
KSm1n0z4y1StN2LZQT0a24pv1ouR6gFfsQIgLfEgsy0W/Y2lKIVBR5jDiHAmcFJj
XQVSwDYFoOmymqwAdQCkUBJpBVoVVF5iEas3vBA/Yq5VdqReSxcURT4bIhBqJQAA
AWQBLqbwAAAEAwBGMEQCIGGBxmSVtcnHUT85ScXQjTNnCAnc7BHRHAkC0y8u9WIL
AiBfatZBijLci4ygyW/pMAbLfPwpVHtTUNV7NU7Q+rGzYTANBgkqhkiG9w0BAQsF
AAOCAQEAWiBt7+1bav1DQegEAQYXTZNX5XFoSzy4iTtf3FtT00zm4PranMZtYhjz
nkjei3nOMEr6fHfdzCmu4HXULcfYm29przdKAf2XXZydEkFSkxm2GJuvamsiCVj5
xRGmMre497Ik3lL1DAmcdUGUJ4yVAj07/ogziOnwHzpU8G2+E/OjXmjV7SW8RRSI
E66z7II8g9soW3YHfpnd71rvEI9f1psyVTmGgcZwZxgm6izaa0+3+SKKkJxiHCGn
z8s++yld8e6KdZWey45PgNEy8jgjCDAzXNqDRIbPfBH1R5FdhvdgjbLLZInA4dQS
ICaWwT1UmOqBpE9pyfQjYYWJwVV9ew==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267017086111512579899845430612971623614549
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-15 01:03:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-13 01:03:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.cfn.edu.mx'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bennett.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.castaicusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ces.castaicusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cfn.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.charter.ncsd.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cms.castaicusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.colegiobosquereal.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.colegioterranova.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.csx211.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.deercreek.ncsd.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fhs.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fms.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gilbertacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gilmore.ucboe.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hms.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.legacy.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.los.castaicusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ncsd.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.newnasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nhs.castaicusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nr.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.or.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pams.pusdatsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pes.pusdatsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.phs.pusdatsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.preschool.castaicusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rec.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sevenhills.ncsd.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tvms.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.usd205.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wb.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ww.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bennett.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castaicusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ces.castaicusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charter.ncsd.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.castaicusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colegiobosquereal.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colegioterranova.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csx211.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cv.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deercreek.ncsd.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dietz.crandall-isd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elementary.montourschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faa.pamlico.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fhs.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fms.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gilbertacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gilmore.ucboe.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hms.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hy.hpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyer.hpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'los.castaicusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncsd.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nes.norris.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newnasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhs.castaicusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nms.norris.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norris.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nr.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ode.norris.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'or.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pamlico.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pams.pusdatsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pchs.pamlico.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcms.pamlico.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcps.pamlico.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pes.pusdatsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phs.pusdatsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preschool.castaicusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rec.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolforthedeaf.wvsdb2.state.k12.wv.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sevenhills.ncsd.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvms.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uh.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ves.norris.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vvhs.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wb.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wbe.norris.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww.frenship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bpbraves.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.castaicusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegiobosquereal.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegioterranova.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csx211.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gilbertacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loyola-nyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncsd.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newnasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norris.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rockwernacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usd205.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000164012ea6f2000004030046304402204343117c081a002929b59f4cf8cb54ad3762d9413d1adb8a6fd68b91ea015fb102202df120b32d16fd8da52885414798c38870267052635d0552c03605a0e9b29aac007500a4501269055a15545e6211ab37bc103f62ae5576a45e4b1714453e1b22106a2500000164012ea6f0000004030046304402206181c66495b5c9c7513f3949c5d08d33670809dcec11d11c0902d32f2ef5620b02205f6ad6418a32dc8b8ca0c96fe93006cb7cfc29547b5350d57b354ed0fab1b361
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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