www.monroe.k12.tn.us

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9e:5e:c3:21:a1:78:0e:d2:4e:2b:3a:5a:67:b1:ee:e5:6a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.monroe.k12.tn.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9e:5e:c3:21:a1:78:0e:d2:4e:2b:3a:5a:67:b1:ee:e5:6a
Serial Number (int): 315227432380392620755106048490011735549290
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3a:49:1a:52:87:04:8e:80:a8:0e:90:8e:26:33:77:ce:88:f4:1f:07
Fingerprint (sha256): 7a:f9:07:8b:b7:d1:e8:38:6b:3f:6c:01:db:3b:68:e6:b5:21:0c:0c:2d:11:98:d9:d0:ea:14:7b:5a:c0:71:a2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.monroe.k12.tn.us

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.monroe.k12.tn.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.breed.exteraschools.org
admin.es.elkhartisd.org
admin.gtchs.org
admin.holyfamilyhs.com
admin.hs.elkhartisd.org
admin.is.elkhartisd.org
admin.kahukuhigh.org
admin.monroe.k12.tn.us
admin.ms.elkhartisd.org
admin.orcaeagles.org
admin.res.davidson.k12.nc.us
admin.sbdiocesecef.org
admin.sdhs.davidson.k12.nc.us
admin.sme.davidson.k12.nc.us
admin.sms.davidson.k12.nc.us
admin.sts.davidson.k12.nc.us
admin.sves.davidson.k12.nc.us
admin.tes.davidson.k12.nc.us
admin.tms.davidson.k12.nc.us
admin.upshurschools.com
admin.va.davidson.k12.nc.us
admin.vciseagles.org
bes.gobearsgo.net
bhs.gobearsgo.net
bis.gobearsgo.net
bjh.gobearsgo.net
bl.parkerusd.org
bradley.usd207.org
ces.gobearsgo.net
ces35.cliftonisd.org
cfh.chesterfieldschools.org
chs.chesterfieldschools.org
chs.cliftonisd.org
cis.chesterfieldschools.org
cms.cliftonisd.org
cnh.chesterfieldschools.org
colehs.fshisd.net
colems.fshisd.net
coop.fshisd.net
cps.chesterfieldschools.org
crms.chesterfieldschools.org
cte.chesterfieldschools.org
dz.aceroschools.org
ees.chesterfieldschools.org
eisenhower.usd207.org
es.elkhartisd.org
es.roosevelt.k12.tx.us
fa.arrowacademy.org
fshelem.fshisd.net
gtchs.org
hs.elkhartisd.org
hs.roosevelt.k12.tx.us
is.elkhartisd.org
jes.chesterfieldschools.org
jh.roosevelt.k12.tx.us
kahukuhigh.org
lms.chesterfieldschools.org
lp.parkerusd.org
macarthur.usd207.org
mes.chesterfieldschools.org
mhs.chesterfieldschools.org
ms.elkhartisd.org
nhms.chesterfieldschools.org
patton.usd207.org
pes.chesterfieldschools.org
pps.chesterfieldschools.org
pve.chesterfieldschools.org
res.chesterfieldschools.org
sbdiocesecef.org
south.fisd.us
triviumcharter.org
upshurschools.com
vciseagles.org
webster.usd465.com
www.chesterfieldschools.org
www.cliftonisd.org
www.elkhartisd.org
www.fshisd.net
www.fuchsmizrachi.org
www.gobearsgo.net
www.gtchs.org
www.hbuhsd.edu
www.hemetusd.k12.ca.us
www.hemetusd.org
www.jecc.org
www.kahukuhigh.org
www.magnoliaisd.org
www.monroe.k12.tn.us
www.parkerusd.org
www.phillips.k12.wi.us
www.reaganacademy.org
www.rebsamen.mx
www.roosevelt.k12.tx.us
www.sbdiocesecef.org
www.smcjuhsd.org
www.tahquitzhs.org
www.upshurschools.com
www.usd207.org
www.vciseagles.org
www2.smcjuhsd.org

Other certificates including the domain name monroe.k12.tn.us

(limited to 100 certificates)
admin.adulted.erusd.org
admin.canoncityschools.org
monroe.k12.tn.us
admin.adultlearning.sunrisesd.ca
monroe.k12.tn.us
aceroschools.org
monroe.k12.tn.us
santafesouth.org
admin.lms.davidson.k12.nc.us
cchs.ccusd.org
admin.adulted.erusd.org
www.burkeschools.org
admin.kcusd.com
monroe.k12.tn.us
cphs.ccusd.org
admin.rvs.monroe.k12.tn.us
stmmsa.org
sgmission.org
admin.elmwood.mbgsd.org
admin.adulted.erusd.org
aceroschools.org
admin.breed.exteraschools.org
admin.tpjhs.monroe.k12.tn.us
5.bellevilleschools.org
lifeschools.net
admin.adulted.erusd.org
admin.vms.monroe.k12.tn.us
monroe.k12.tn.us
admin.ccti.pgsd.ms
upperallen.mbgsd.org
5.bellevilleschools.org
admin.fges.davidson.k12.nc.us
admin.mms.monroe.k12.tn.us
spectrum.canoncityschools.org
admin.smithcountymiddle.smithcoedu.com
rvs.monroe.k12.tn.us
admin.veritasca.org
admin.adulted.erusd.org
dietz.crandall-isd.net
mas.mpusd.net
aceroschools.org
admin.adulted.erusd.org
admin.ei.themethighschool.org
academy.swartzcreek.org
admin.lasgs.net
admin.bayhaven.org
www.canoncityschools.org
ps39.jcboe.org
admin.adulted.kcusd.com
monroe.k12.tn.us
monroe.k12.tn.us
www.bayfield.k12.co.us
admin.breed.exteraschools.org
admin.bayhaven.org
admin.adultlearning.sunrisesd.ca
acrma8.org
admin.adulted.erusd.org
admin.tphs.monroe.k12.tn.us
admin.stanthonyeagles.org
monroe.k12.tn.us
admin.ccti.pgsd.ms
www.chinaspringisd.net
monroe.k12.tn.us
erhs.erusd.org
admin.bayhaven.org
admin.tpjhs.monroe.k12.tn.us
acacia.hemetusd.org
hy.hpisd.org
alt.crandall-isd.net
academy.swartzcreek.org
admin.monroe.k12.tn.us
www.fda6.org
admin.rockyriverhighschool.wearecms.com
www.grovetonisd.net
admin.adulted.erusd.org
www.fda6.org
ocd.ccusd.org
www.monroe.k12.tn.us
admin.erusd.org
mps.monroe.k12.tn.us
ah.cuesd.com
admin.adulted.erusd.org
admin.adulted.erusd.org
rvs.monroe.k12.tn.us
ps39.jcboe.org
admin.adulted.erusd.org
admin.sqhs.monroe.k12.tn.us
admin.carlsbadnmschools.com
admin.cces.monroe.k12.tn.us
0-3.texasdhhresources.org
sgmission.org
admin.adulted.erusd.org
admin.adulted.kcusd.com
admin.adulted.erusd.org
erhs.erusd.org
adulted.sanjacinto.k12.ca.us
admin.oghs.davidson.k12.nc.us
es.glendaleacademy.org
admin.carlsbadnmschools.com
admin.nes.davidson.k12.nc.us

Certificate

The complete raw certificate details for www.monroe.k12.tn.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQbTHb+2z7
rfYVCl+ph5m8FJJOEgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5pV3R4RBg
n18RTHnTD9fS27JxyeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGrmQF3Z/h2
e6StagubO+pVwFzG8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK7wAhJO8e
l2z375LDd2VIwrdWQP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlWZ1AdjOKf
RiY0ckFuu/DYkuvkNKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5Tu7zbek/
MR/JMR9nceWyZ2Mund+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzwWzBvTD8F
7q6ckUbIgpeo7stn7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuaivjW/P+Tm
64XjXNjP9F1W8+5tlcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ4Iudx/o3
Q4E2w6Aud9PYyV05pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/h0omUmCI
DiQVG30eHhb3OIP3bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUnohkUi6ik
D4me6o58sq/IQVmyem1M/E0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315227432380392620755106048490011735549290
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-06 06:30:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-04 06:30:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.monroe.k12.tn.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2281 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.breed.exteraschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.es.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gtchs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.holyfamilyhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hs.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.is.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kahukuhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.monroe.k12.tn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ms.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.orcaeagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.res.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sbdiocesecef.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sdhs.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sme.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sms.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sts.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sves.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tes.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tms.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.upshurschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.va.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.vciseagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bes.gobearsgo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhs.gobearsgo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bis.gobearsgo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bjh.gobearsgo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bl.parkerusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bradley.usd207.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ces.gobearsgo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ces35.cliftonisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfh.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chs.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chs.cliftonisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cis.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.cliftonisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnh.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colehs.fshisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colems.fshisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coop.fshisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cps.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crms.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cte.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dz.aceroschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ees.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eisenhower.usd207.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.roosevelt.k12.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fa.arrowacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fshelem.fshisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtchs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.roosevelt.k12.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jes.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jh.roosevelt.k12.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kahukuhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lms.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.parkerusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macarthur.usd207.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mes.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhs.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhms.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patton.usd207.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pes.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pps.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pve.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'res.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbdiocesecef.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'south.fisd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triviumcharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upshurschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vciseagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webster.usd465.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cliftonisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fshisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fuchsmizrachi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gobearsgo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gtchs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbuhsd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hemetusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hemetusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jecc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kahukuhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magnoliaisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monroe.k12.tn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkerusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phillips.k12.wi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reaganacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rebsamen.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roosevelt.k12.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sbdiocesecef.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smcjuhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tahquitzhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upshurschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usd207.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vciseagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.smcjuhsd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000163d40118a200000403004630440220220142aa5d8a2c4f4fe71fbe67b367d70e90430eef1cf35c908078ac570cdf5902201a90b5a7595e7b26e09379f09601d2b177daad4e2502075be6e908ed8377006d007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000163d40118c00000040300473045022100896af0421a32811318aaca4b7459e65d5d9517a3388f0a14f4d820dc5e53cc9a022029164a74329556fd7a7213f6e2b7a312a54453ae62ccba9440f85392027c5f22
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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