admin.angelocatholicschool.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5a:d5:6d:5f:43:f9:46:a0:83:df:58:6b:d1:70:b7:7c:96 was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.angelocatholicschool.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5a:d5:6d:5f:43:f9:46:a0:83:df:58:6b:d1:70:b7:7c:96
Serial Number (int): 292245964273839315414343977208922617904278
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1c:2c:7e:0c:82:f7:2e:b0:d6:14:cf:4b:23:02:c3:18:ba:b1:cb:8b
Fingerprint (sha256): 78:02:1c:29:f7:09:7b:91:3e:b6:37:e0:08:34:df:b2:22:95:24:12:c0:3a:fd:12:79:c6:0c:55:13:aa:ae:0b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate admin.angelocatholicschool.com

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.angelocatholicschool.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.angelocatholicschool.com
admin.bellhs.org
admin.cds.pusdschools.net
admin.compton.k12.ca.us
admin.eastlandisd.net
admin.ece.pusdschools.net
admin.elkincityschools.org
admin.ems.elkincityschools.org
admin.euroamericanosur.edu.mx
admin.greenfieldhs.org
admin.hamiltonmiddle.org
admin.kingcityhs.org
admin.newlamiddle.org
admin.redeemerschool.net
admin.rockwoodprep.org
admin.sangabrielmissionchurch.org
angelocatholicschool.com
angelocatholicschool.org
bellhs.org
cds.pusdschools.net
church.christrpv.com
compass.creightonschools.org
ctc.lowndes.k12.ms.us
eastlandisd.net
ecc.eastlandisd.net
ehs.eastlandisd.net
el.gatesvilleisd.org
elkincityschools.org
ems.eastlandisd.net
ems.elkincityschools.org
es.postisd.net
es.rs-wolves.com
ges.giddingsisd.net
ghs.giddingsisd.net
giddingsisd.net
gis.giddingsisd.net
gms.giddingsisd.net
greenfieldhs.org
hs.fairfieldcityschools.com
hs.gatesvilleisd.org
hs.postisd.net
hs.rs-wolves.com
hs.somervilleisd.org
in.gatesvilleisd.org
is.rs-wolves.com
jh.gatesvilleisd.org
kingcityhs.org
ms.postisd.net
ms.rs-wolves.com
newlamiddle.org
nhhs.lowndes.k12.ms.us
pr.gatesvilleisd.org
preschool.christrpv.com
ps.rs-wolves.com
redeemerschool.net
sangabrielmissionchurch.org
school.christrpv.com
siebert.eastlandisd.net
web.euroamericanosur.edu.mx
wpadmin.ctc.lowndes.k12.ms.us
wpadmin.nhhs.lowndes.k12.ms.us
www.angelocatholicschool.com
www.angelocatholicschool.org
www.bellhs.org
www.cshm.org
www.darnallcharter.org
www.eastland.esc14.net
www.eastlandisd.net
www.elkincityschools.org
www.exteraschools.org
www.ezzellisd.org
www.fairfieldcityschools.com
www.gatesvilleisd.org
www.giddings.txed.net
www.giddingsisd.net
www.greenfieldhs.org
www.hamiltonmiddle.org
www.kingcityhs.org
www.nchcityschools.org
www.newlamiddle.org
www.postisd.net
www.psusd.k12.az.us
www.psusd8.org
www.redeemerschool.net
www.rs-wolves.com
www.sangabrielmissionchurch.org
www.smithvilleisd.org
www.wlisd.net
www.wolves.k12.mo.us

Other certificates including the domain name angelocatholicschool.com

(limited to 100 certificates)
parish.sangabrielmissionchurch.org
www.angelocatholicschool.com
angelocatholicschool.com
admin.angelocatholicschool.com
www.christrpv.com
admin.angelocatholicschool.com
www.gorman.esc14.net
daycare.eastlandisd.net
admin.angelocatholicschool.com
admin.angelocatholicschool.com
admin.angelocatholicschool.com
admin.angelocatholicschool.com
baxterjh.eisd.org
admin.angelocatholicschool.com
admin.angelocatholicschool.com
ees.elkincityschools.org
admin.angelocatholicschool.com
ems.elkincityschools.org
web.euroamericanosur.edu.mx
admin.keppel.pusdschools.net
ces.lowndes.k12.ms.us
chs.lowndes.k12.ms.us
admin.angelocatholicschool.com
admin.angelocatholicschool.com
ctc.lowndes.k12.ms.us
admin.angelocatholicschool.com
admin.llhs.org
bp.smithvilleisd.org
admin.angelocatholicschool.com
parish.sangabrielmissionchurch.org
admin.ehs.elkincityschools.org
admin.angelocatholicschool.com
admin.ece.pusdschools.net
www.newlamiddle.org

Certificate

The complete raw certificate details for admin.angelocatholicschool.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIO9TCCDd2gAwIBAgISA1rVbV9D+Uagg99Ya9Fwt3yWMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA3MTAwNjU2MjJaFw0x
ODEwMDgwNjU2MjJaMCkxJzAlBgNVBAMTHmFkbWluLmFuZ2Vsb2NhdGhvbGljc2No
b29sLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK2shenuZt6M
UG0x2/ts+632FQpfqYeZvBSSThIBLbBZ4fODBV4SJe7hDrakpTCrEdtnc3DQLStR
uaVd0eEQYJ9fEUx50w/X0tuyccnsn5V33VF+1cOGhq8jH/DBPmRoaGkD9F2Ad1wx
q5kBd2f4dnukrWoLmzvqVcBcxvFQwHZ2obFK2x66Unn4ms4soYXj5C980IPzpmkJ
Cu8AISTvHpds9++Sw3dlSMK3VkD9iY1fPdmHfrSGTpwJNo8g5b9zGFylxopQcq0J
VmdQHYzin0YmNHJBbrvw2JLr5DSptn981Gr8N7JQro2Vh5CB2TaWjbcX7K6SLVCK
uU7u823pPzEfyTEfZ3HlsmdjLp3fkm4Hy3/esD4VQWq67KdRzUfiJKMra+TzDUQc
8Fswb0w/Be6unJFGyIKXqO7LZ+29CDVz2IDU+8xV/1DQnFo/mmifirvDCleBBBLm
or41vz/k5uuF41zYz/RdVvPubZXCYCYRlMhMpQlLQEaoT6I1M0J64dYlEjETSNpY
ieCLncf6N0OBNsOgLnfT2MldOaRYDHUi2DURkE8kEUmkm0Nx5n2Yv6UIxclKIYgO
/4dKJlJgiA4kFRt9Hh4W9ziD92yYrF2SuKhK5+WQ5inVIDQtxkvssK0wAWI9DfhF
J6IZFIuopA+JnuqOfLKvyEFZsnptTPxNAgMBAAGjggr0MIIK8DAOBgNVHQ8BAf8E
BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQC
MAAwHQYDVR0OBBYEFC9ryE1sLC4y8gAg/y1NbFr8brq7MB8GA1UdIwQYMBaAFKhK
amMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYi
aHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYj
aHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wggf1BgNVHREEggfs
MIIH6IIeYWRtaW4uYW5nZWxvY2F0aG9saWNzY2hvb2wuY29tghBhZG1pbi5iZWxs
aHMub3JnghlhZG1pbi5jZHMucHVzZHNjaG9vbHMubmV0ghdhZG1pbi5jb21wdG9u
LmsxMi5jYS51c4IVYWRtaW4uZWFzdGxhbmRpc2QubmV0ghlhZG1pbi5lY2UucHVz
ZHNjaG9vbHMubmV0ghphZG1pbi5lbGtpbmNpdHlzY2hvb2xzLm9yZ4IeYWRtaW4u
ZW1zLmVsa2luY2l0eXNjaG9vbHMub3Jngh1hZG1pbi5ldXJvYW1lcmljYW5vc3Vy
LmVkdS5teIIWYWRtaW4uZ3JlZW5maWVsZGhzLm9yZ4IYYWRtaW4uaGFtaWx0b25t
aWRkbGUub3JnghRhZG1pbi5raW5nY2l0eWhzLm9yZ4IVYWRtaW4ubmV3bGFtaWRk
bGUub3JnghhhZG1pbi5yZWRlZW1lcnNjaG9vbC5uZXSCFmFkbWluLnJvY2t3b29k
cHJlcC5vcmeCIWFkbWluLnNhbmdhYnJpZWxtaXNzaW9uY2h1cmNoLm9yZ4IYYW5n
ZWxvY2F0aG9saWNzY2hvb2wuY29tghhhbmdlbG9jYXRob2xpY3NjaG9vbC5vcmeC
CmJlbGxocy5vcmeCE2Nkcy5wdXNkc2Nob29scy5uZXSCFGNodXJjaC5jaHJpc3Ry
cHYuY29tghxjb21wYXNzLmNyZWlnaHRvbnNjaG9vbHMub3JnghVjdGMubG93bmRl
cy5rMTIubXMudXOCD2Vhc3RsYW5kaXNkLm5ldIITZWNjLmVhc3RsYW5kaXNkLm5l
dIITZWhzLmVhc3RsYW5kaXNkLm5ldIIUZWwuZ2F0ZXN2aWxsZWlzZC5vcmeCFGVs
a2luY2l0eXNjaG9vbHMub3JnghNlbXMuZWFzdGxhbmRpc2QubmV0ghhlbXMuZWxr
aW5jaXR5c2Nob29scy5vcmeCDmVzLnBvc3Rpc2QubmV0ghBlcy5ycy13b2x2ZXMu
Y29tghNnZXMuZ2lkZGluZ3Npc2QubmV0ghNnaHMuZ2lkZGluZ3Npc2QubmV0gg9n
aWRkaW5nc2lzZC5uZXSCE2dpcy5naWRkaW5nc2lzZC5uZXSCE2dtcy5naWRkaW5n
c2lzZC5uZXSCEGdyZWVuZmllbGRocy5vcmeCG2hzLmZhaXJmaWVsZGNpdHlzY2hv
b2xzLmNvbYIUaHMuZ2F0ZXN2aWxsZWlzZC5vcmeCDmhzLnBvc3Rpc2QubmV0ghBo
cy5ycy13b2x2ZXMuY29tghRocy5zb21lcnZpbGxlaXNkLm9yZ4IUaW4uZ2F0ZXN2
aWxsZWlzZC5vcmeCEGlzLnJzLXdvbHZlcy5jb22CFGpoLmdhdGVzdmlsbGVpc2Qu
b3Jngg5raW5nY2l0eWhzLm9yZ4IObXMucG9zdGlzZC5uZXSCEG1zLnJzLXdvbHZl
cy5jb22CD25ld2xhbWlkZGxlLm9yZ4IWbmhocy5sb3duZGVzLmsxMi5tcy51c4IU
cHIuZ2F0ZXN2aWxsZWlzZC5vcmeCF3ByZXNjaG9vbC5jaHJpc3RycHYuY29tghBw
cy5ycy13b2x2ZXMuY29tghJyZWRlZW1lcnNjaG9vbC5uZXSCG3NhbmdhYnJpZWxt
aXNzaW9uY2h1cmNoLm9yZ4IUc2Nob29sLmNocmlzdHJwdi5jb22CF3NpZWJlcnQu
ZWFzdGxhbmRpc2QubmV0ght3ZWIuZXVyb2FtZXJpY2Fub3N1ci5lZHUubXiCHXdw
YWRtaW4uY3RjLmxvd25kZXMuazEyLm1zLnVzgh53cGFkbWluLm5oaHMubG93bmRl
cy5rMTIubXMudXOCHHd3dy5hbmdlbG9jYXRob2xpY3NjaG9vbC5jb22CHHd3dy5h
bmdlbG9jYXRob2xpY3NjaG9vbC5vcmeCDnd3dy5iZWxsaHMub3Jnggx3d3cuY3No
bS5vcmeCFnd3dy5kYXJuYWxsY2hhcnRlci5vcmeCFnd3dy5lYXN0bGFuZC5lc2Mx
NC5uZXSCE3d3dy5lYXN0bGFuZGlzZC5uZXSCGHd3dy5lbGtpbmNpdHlzY2hvb2xz
Lm9yZ4IVd3d3LmV4dGVyYXNjaG9vbHMub3JnghF3d3cuZXp6ZWxsaXNkLm9yZ4Ic
d3d3LmZhaXJmaWVsZGNpdHlzY2hvb2xzLmNvbYIVd3d3LmdhdGVzdmlsbGVpc2Qu
b3JnghV3d3cuZ2lkZGluZ3MudHhlZC5uZXSCE3d3dy5naWRkaW5nc2lzZC5uZXSC
FHd3dy5ncmVlbmZpZWxkaHMub3JnghZ3d3cuaGFtaWx0b25taWRkbGUub3JnghJ3
d3cua2luZ2NpdHlocy5vcmeCFnd3dy5uY2hjaXR5c2Nob29scy5vcmeCE3d3dy5u
ZXdsYW1pZGRsZS5vcmeCD3d3dy5wb3N0aXNkLm5ldIITd3d3LnBzdXNkLmsxMi5h
ei51c4IOd3d3LnBzdXNkOC5vcmeCFnd3dy5yZWRlZW1lcnNjaG9vbC5uZXSCEXd3
dy5ycy13b2x2ZXMuY29tgh93d3cuc2FuZ2FicmllbG1pc3Npb25jaHVyY2gub3Jn
ghV3d3cuc21pdGh2aWxsZWlzZC5vcmeCDXd3dy53bGlzZC5uZXSCFHd3dy53b2x2
ZXMuazEyLm1vLnVzMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLf
EwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcw
gasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSBy
ZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3Jk
YW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6
Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wggEEBgorBgEEAdZ5AgQCBIH1
BIHyAPAAdgBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAWSDMPre
AAAEAwBHMEUCIQCwrtYkiAPRGfVtBZZJnSp5j2P5TYcIqI9e+dDThhNglQIgcGOA
GFSSxKtvzQ3hRIryZRfuzWvqeNN8E4Iv3R6hYWwAdgApPFGWVMg5ZbqqUPxYB9S3
b79Yeily3KTDDPTlRUf0eAAAAWSDMPrsAAAEAwBHMEUCIDgUajjK3xiMPoba0V8T
glvceK/8OCdCNiwdJZ2DVVUzAiEAxvHBPiMOjQYrqJPnC4TEUDHvCyBEdq5CL33g
LIA8xeYwDQYJKoZIhvcNAQELBQADggEBAEtm9vLHHfMxq6+txxdnVnC3uoUhq56t
FXFkSPnsOVq0zn5O3qF+OdjZ9vBmL3gG/Plu7L4dyagyWMADOQ8PyPbJU36N4uXv
z/ZjTXrLVOs9IjTa1DsqVPk3l/DIm9UZ+XvvbLo+C6gNpZZRpM6e8M5XkUYfua7m
bEqpCScLzDI6O4EApO01ufy3rIAOllxMQgxHHaPm9rUCxDBoskfpASkukJuuQpE1
XxCg+t+LGztjsKU7EzeOUmVH8gacNjxOntyhB+sRrwj+yXllpWhhhY5Gk85R97hO
eg2YJowGsO2Lr3asx7aLGXfUtr+TnkndMJbFXx0zQYYOOpPBZH7M/S0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQbTHb+2z7
rfYVCl+ph5m8FJJOEgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5pV3R4RBg
n18RTHnTD9fS27JxyeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGrmQF3Z/h2
e6StagubO+pVwFzG8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK7wAhJO8e
l2z375LDd2VIwrdWQP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlWZ1AdjOKf
RiY0ckFuu/DYkuvkNKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5Tu7zbek/
MR/JMR9nceWyZ2Mund+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzwWzBvTD8F
7q6ckUbIgpeo7stn7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuaivjW/P+Tm
64XjXNjP9F1W8+5tlcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ4Iudx/o3
Q4E2w6Aud9PYyV05pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/h0omUmCI
DiQVG30eHhb3OIP3bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUnohkUi6ik
D4me6o58sq/IQVmyem1M/E0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292245964273839315414343977208922617904278
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-10 06:56:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-08 06:56:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.angelocatholicschool.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2028 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.angelocatholicschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bellhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cds.pusdschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.compton.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eastlandisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ece.pusdschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.elkincityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ems.elkincityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.euroamericanosur.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.greenfieldhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hamiltonmiddle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kingcityhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.newlamiddle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.redeemerschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rockwoodprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sangabrielmissionchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angelocatholicschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angelocatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cds.pusdschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'church.christrpv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compass.creightonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctc.lowndes.k12.ms.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastlandisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecc.eastlandisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehs.eastlandisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'el.gatesvilleisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elkincityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ems.eastlandisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ems.elkincityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.postisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.rs-wolves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ges.giddingsisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghs.giddingsisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giddingsisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gis.giddingsisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gms.giddingsisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenfieldhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.fairfieldcityschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.gatesvilleisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.postisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.rs-wolves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.somervilleisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in.gatesvilleisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is.rs-wolves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jh.gatesvilleisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingcityhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.postisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.rs-wolves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newlamiddle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhhs.lowndes.k12.ms.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.gatesvilleisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preschool.christrpv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps.rs-wolves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redeemerschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sangabrielmissionchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.christrpv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siebert.eastlandisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.euroamericanosur.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpadmin.ctc.lowndes.k12.ms.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpadmin.nhhs.lowndes.k12.ms.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.angelocatholicschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.angelocatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cshm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.darnallcharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastland.esc14.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastlandisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elkincityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exteraschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ezzellisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fairfieldcityschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gatesvilleisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giddings.txed.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giddingsisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenfieldhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hamiltonmiddle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingcityhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nchcityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newlamiddle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.postisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.psusd.k12.az.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.psusd8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redeemerschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rs-wolves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sangabrielmissionchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smithvilleisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wlisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wolves.k12.mo.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001648330fade0000040300473045022100b0aed6248803d119f56d0596499d2a798f63f94d8708a88f5ef9d0d3861360950220706380185492c4ab6fcd0de1448af26517eecd6bea78d37c13822fdd1ea1616c007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001648330faec0000040300473045022038146a38cadf188c3e86dad15f13825bdc78affc382742362c1d259d83555533022100c6f1c13e230e8d062ba893e70b84c45031ef0b204476ae422f7de02c803cc5e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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