admin.franklin.northbergen.k12.nj.us

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:91:64:e5:13:f3:e1:3b:9a:58:32:47:01:d4:6e:ec:be:80 was issued on by Let's Encrypt.

With 75 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.franklin.northbergen.k12.nj.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:91:64:e5:13:f3:e1:3b:9a:58:32:47:01:d4:6e:ec:be:80
Serial Number (int): 310811913239063845347930837475554092695168
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e5:0d:fb:5d:0f:32:ce:3b:c3:5e:f2:3c:4e:c9:8b:fc:7d:aa:6d:3d
Fingerprint (sha256): 7a:f9:18:7e:da:ac:d3:01:f7:f4:ca:fb:30:ba:d5:f1:29:01:f3:38:33:fa:63:63:fb:0e:7f:bf:d6:89:4e:bc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate admin.franklin.northbergen.k12.nj.us

75

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.franklin.northbergen.k12.nj.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.cfh.edu.mx
admin.church.spxtulsa.org
admin.franklin.northbergen.k12.nj.us
admin.fullbrightelementary.org
admin.fulton.northbergen.k12.nj.us
admin.horacemann.northbergen.k12.nj.us
admin.jaddams.org
admin.kennedy.northbergen.k12.nj.us
admin.lincoln.northbergen.k12.nj.us
admin.lincolnparkhs.org
admin.mckinley.northbergen.k12.nj.us
admin.nbhs.northbergen.k12.nj.us
admin.northbergen.k12.nj.us
admin.pinnaclecharter.org
admin.ps086.com
admin.school.spxtulsa.org
admin.sfrschool.org
admin.sunnybraemiddleschool.org
arvin.kernhigh.org
bakersfield.kernhigh.org
bas.kernhigh.org
centennial.kernhigh.org
centralvalley.kernhigh.org
east.kernhigh.org
foothill.kernhigh.org
franklin.northbergen.k12.nj.us
frontier.kernhigh.org
fullbrightelementary.org
fulton.northbergen.k12.nj.us
goldenvalley.kernhigh.org
highland.kernhigh.org
horacemann.northbergen.k12.nj.us
independence.kernhigh.org
jaddams.org
kennedy.northbergen.k12.nj.us
kernvalley.kernhigh.org
liberty.kernhigh.org
lincoln.northbergen.k12.nj.us
lincolnparkhs.org
mckinley.northbergen.k12.nj.us
miramonte.kernhigh.org
nbhs.northbergen.k12.nj.us
north.kernhigh.org
northbergen.k12.nj.us
nueva.kernhigh.org
pathwaytomyfuture.com
pathwaytomyfuture.net
pathwaytomyfuture.org
pinnaclecharter.org
ps086.com
ridgeview.kernhigh.org
roc.kernhigh.org
school.spxtulsa.org
shafter.kernhigh.org
south.kernhigh.org
stockdale.kernhigh.org
sunnybraemiddleschool.org
tierradelsol.kernhigh.org
vista.kernhigh.org
vistawest.kernhigh.org
wellness.kernhigh.org
west.kernhigh.org
www.cfh.edu.mx
www.fullbrightelementary.org
www.highlands.edu.mx
www.jaddams.org
www.lincolnparkhs.org
www.northbergen.k12.nj.us
www.pathwaytomyfuture.com
www.pathwaytomyfuture.net
www.pathwaytomyfuture.org
www.pinnaclecharter.org
www.ps086.com
www.sfrschool.org
www.sunnybraemiddleschool.org

Other certificates including the domain name northbergen.k12.nj.us

(limited to 100 certificates)
mckinley.northbergen.k12.nj.us
northbergen.k12.nj.us
cte.kernhigh.org
admin.arvin.kernhigh.org
admin.fulton.northbergen.k12.nj.us
www.ps086.com
mail3.northbergen.k12.nj.us
admin.bas.kernhigh.org
mail3.northbergen.k12.nj.us
horacemann.northbergen.k12.nj.us
admin.spxtulsa.org
northbergen.k12.nj.us
cra.freeholdtwp.k12.nj.us
northbergen.k12.nj.us
admin.aes.acsc.net
northbergen.k12.nj.us
admin.church.spxtulsa.org
2.southampton.k12.nj.us
admin.es.lorenaisd.net
northbergen.k12.nj.us
www.lincolnparkhs.org
fulton.northbergen.k12.nj.us
lincoln.northbergen.k12.nj.us
admin.cfh.edu.mx
sfrschool.org
admin.franklin.northbergen.k12.nj.us
admin.acsc.net
mail3.northbergen.k12.nj.us
admin.chuckey.greenek12.org
2.southampton.k12.nj.us
admin.arvin.kernhigh.org
admin.ps17queens.com
nbhs.northbergen.k12.nj.us
kennedy.northbergen.k12.nj.us
harpethhighccs.net
nbhs.northbergen.k12.nj.us
www.northbergen.k12.nj.us
admin.cfh.edu.mx
northbergen.k12.nj.us
www.northbergen.k12.nj.us
ps086.com
admin.arvin.kernhigh.org
admin.cfh.edu.mx
www.mstmaatroosevelt.org
northbergen.k12.nj.us
www.ps17queens.com
admin.stockdale.kernhigh.org
lincoln.northbergen.k12.nj.us
2.southampton.k12.nj.us
westcheathamccs.net
admin.cfh.edu.mx
admin.arvin.kernhigh.org
northbergen.k12.nj.us
www.northbergen.k12.nj.us
admin.northbergen.k12.nj.us
admin.horacemann.northbergen.k12.nj.us
admin.avrlacademy.org
2.southampton.k12.nj.us
sunnybraemiddleschool.org
1.southampton.k12.nj.us
northbergen.k12.nj.us
franklin.northbergen.k12.nj.us
1.southampton.k12.nj.us
kennedy.northbergen.k12.nj.us
nbhs.northbergen.k12.nj.us
kennedy.northbergen.k12.nj.us
nbhs.northbergen.k12.nj.us
admin.arvin.kernhigh.org

Certificate

The complete raw certificate details for admin.franklin.northbergen.k12.nj.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINuDCCDKCgAwIBAgISA5Fk5RPz4TuaWDJHAdRu7L6AMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjAwOTQwMzRaFw0x
OTA4MTgwOTQwMzRaMC8xLTArBgNVBAMTJGFkbWluLmZyYW5rbGluLm5vcnRoYmVy
Z2VuLmsxMi5uai51czCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK2s
henuZt6MUG0x2/ts+632FQpfqYeZvBSSThIBLbBZ4fODBV4SJe7hDrakpTCrEdtn
c3DQLStRuaVd0eEQYJ9fEUx50w/X0tuyccnsn5V33VF+1cOGhq8jH/DBPmRoaGkD
9F2Ad1wxq5kBd2f4dnukrWoLmzvqVcBcxvFQwHZ2obFK2x66Unn4ms4soYXj5C98
0IPzpmkJCu8AISTvHpds9++Sw3dlSMK3VkD9iY1fPdmHfrSGTpwJNo8g5b9zGFyl
xopQcq0JVmdQHYzin0YmNHJBbrvw2JLr5DSptn981Gr8N7JQro2Vh5CB2TaWjbcX
7K6SLVCKuU7u823pPzEfyTEfZ3HlsmdjLp3fkm4Hy3/esD4VQWq67KdRzUfiJKMr
a+TzDUQc8Fswb0w/Be6unJFGyIKXqO7LZ+29CDVz2IDU+8xV/1DQnFo/mmifirvD
CleBBBLmor41vz/k5uuF41zYz/RdVvPubZXCYCYRlMhMpQlLQEaoT6I1M0J64dYl
EjETSNpYieCLncf6N0OBNsOgLnfT2MldOaRYDHUi2DURkE8kEUmkm0Nx5n2Yv6UI
xclKIYgO/4dKJlJgiA4kFRt9Hh4W9ziD92yYrF2SuKhK5+WQ5inVIDQtxkvssK0w
AWI9DfhFJ6IZFIuopA+JnuqOfLKvyEFZsnptTPxNAgMBAAGjggmxMIIJrTAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFC9ryE1sLC4y8gAg/y1NbFr8brq7MB8GA1UdIwQY
MBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEF
BQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEF
BQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wggdlBgNV
HREEggdcMIIHWIIQYWRtaW4uY2ZoLmVkdS5teIIZYWRtaW4uY2h1cmNoLnNweHR1
bHNhLm9yZ4IkYWRtaW4uZnJhbmtsaW4ubm9ydGhiZXJnZW4uazEyLm5qLnVzgh5h
ZG1pbi5mdWxsYnJpZ2h0ZWxlbWVudGFyeS5vcmeCImFkbWluLmZ1bHRvbi5ub3J0
aGJlcmdlbi5rMTIubmoudXOCJmFkbWluLmhvcmFjZW1hbm4ubm9ydGhiZXJnZW4u
azEyLm5qLnVzghFhZG1pbi5qYWRkYW1zLm9yZ4IjYWRtaW4ua2VubmVkeS5ub3J0
aGJlcmdlbi5rMTIubmoudXOCI2FkbWluLmxpbmNvbG4ubm9ydGhiZXJnZW4uazEy
Lm5qLnVzghdhZG1pbi5saW5jb2xucGFya2hzLm9yZ4IkYWRtaW4ubWNraW5sZXku
bm9ydGhiZXJnZW4uazEyLm5qLnVzgiBhZG1pbi5uYmhzLm5vcnRoYmVyZ2VuLmsx
Mi5uai51c4IbYWRtaW4ubm9ydGhiZXJnZW4uazEyLm5qLnVzghlhZG1pbi5waW5u
YWNsZWNoYXJ0ZXIub3Jngg9hZG1pbi5wczA4Ni5jb22CGWFkbWluLnNjaG9vbC5z
cHh0dWxzYS5vcmeCE2FkbWluLnNmcnNjaG9vbC5vcmeCH2FkbWluLnN1bm55YnJh
ZW1pZGRsZXNjaG9vbC5vcmeCEmFydmluLmtlcm5oaWdoLm9yZ4IYYmFrZXJzZmll
bGQua2VybmhpZ2gub3JnghBiYXMua2VybmhpZ2gub3JnghdjZW50ZW5uaWFsLmtl
cm5oaWdoLm9yZ4IaY2VudHJhbHZhbGxleS5rZXJuaGlnaC5vcmeCEWVhc3Qua2Vy
bmhpZ2gub3JnghVmb290aGlsbC5rZXJuaGlnaC5vcmeCHmZyYW5rbGluLm5vcnRo
YmVyZ2VuLmsxMi5uai51c4IVZnJvbnRpZXIua2VybmhpZ2gub3JnghhmdWxsYnJp
Z2h0ZWxlbWVudGFyeS5vcmeCHGZ1bHRvbi5ub3J0aGJlcmdlbi5rMTIubmoudXOC
GWdvbGRlbnZhbGxleS5rZXJuaGlnaC5vcmeCFWhpZ2hsYW5kLmtlcm5oaWdoLm9y
Z4IgaG9yYWNlbWFubi5ub3J0aGJlcmdlbi5rMTIubmoudXOCGWluZGVwZW5kZW5j
ZS5rZXJuaGlnaC5vcmeCC2phZGRhbXMub3Jngh1rZW5uZWR5Lm5vcnRoYmVyZ2Vu
LmsxMi5uai51c4IXa2VybnZhbGxleS5rZXJuaGlnaC5vcmeCFGxpYmVydHkua2Vy
bmhpZ2gub3Jngh1saW5jb2xuLm5vcnRoYmVyZ2VuLmsxMi5uai51c4IRbGluY29s
bnBhcmtocy5vcmeCHm1ja2lubGV5Lm5vcnRoYmVyZ2VuLmsxMi5uai51c4IWbWly
YW1vbnRlLmtlcm5oaWdoLm9yZ4IabmJocy5ub3J0aGJlcmdlbi5rMTIubmoudXOC
Em5vcnRoLmtlcm5oaWdoLm9yZ4IVbm9ydGhiZXJnZW4uazEyLm5qLnVzghJudWV2
YS5rZXJuaGlnaC5vcmeCFXBhdGh3YXl0b215ZnV0dXJlLmNvbYIVcGF0aHdheXRv
bXlmdXR1cmUubmV0ghVwYXRod2F5dG9teWZ1dHVyZS5vcmeCE3Bpbm5hY2xlY2hh
cnRlci5vcmeCCXBzMDg2LmNvbYIWcmlkZ2V2aWV3Lmtlcm5oaWdoLm9yZ4IQcm9j
Lmtlcm5oaWdoLm9yZ4ITc2Nob29sLnNweHR1bHNhLm9yZ4IUc2hhZnRlci5rZXJu
aGlnaC5vcmeCEnNvdXRoLmtlcm5oaWdoLm9yZ4IWc3RvY2tkYWxlLmtlcm5oaWdo
Lm9yZ4IZc3VubnlicmFlbWlkZGxlc2Nob29sLm9yZ4IZdGllcnJhZGVsc29sLmtl
cm5oaWdoLm9yZ4ISdmlzdGEua2VybmhpZ2gub3JnghZ2aXN0YXdlc3Qua2Vybmhp
Z2gub3JnghV3ZWxsbmVzcy5rZXJuaGlnaC5vcmeCEXdlc3Qua2VybmhpZ2gub3Jn
gg53d3cuY2ZoLmVkdS5teIIcd3d3LmZ1bGxicmlnaHRlbGVtZW50YXJ5Lm9yZ4IU
d3d3LmhpZ2hsYW5kcy5lZHUubXiCD3d3dy5qYWRkYW1zLm9yZ4IVd3d3LmxpbmNv
bG5wYXJraHMub3Jnghl3d3cubm9ydGhiZXJnZW4uazEyLm5qLnVzghl3d3cucGF0
aHdheXRvbXlmdXR1cmUuY29tghl3d3cucGF0aHdheXRvbXlmdXR1cmUubmV0ghl3
d3cucGF0aHdheXRvbXlmdXR1cmUub3Jnghd3d3cucGlubmFjbGVjaGFydGVyLm9y
Z4INd3d3LnBzMDg2LmNvbYIRd3d3LnNmcnNjaG9vbC5vcmeCHXd3dy5zdW5ueWJy
YWVtaWRkbGVzY2hvb2wub3JnMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQB
gt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn
MIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAKTxRllTIOWW6qlD8WAfUt2+/WHop
ctykwwz05UVH9HgAAAFq1NQoggAABAMARzBFAiEAwDvMIH5VWdZbRRpwY2gFBSlk
WR9Dw4EEJIlc+Oi+1gECIG9AFflE/Xth+SOisqRkUcvcilfMowHkAnKtaUYzvs+u
AHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFq1NQpdAAABAMA
RzBFAiB9aZWOEoiEadhq/Xy9RvrAKbVU36eA3/cHPY3DkQIhlwIhAKxvXlxihSvs
SARwhC37pwwRRi8eKfTtuEHRVWUTDAUzMA0GCSqGSIb3DQEBCwUAA4IBAQAcTyhc
Du0789+hsBxBib3GUqWZsadunJhwQ0i+hTyRhocLx2/MsDNottP1hzN9p8y6rK5b
RGu5Dvwkp1449K/Ruu47tfcJwsn1pCcH9fXkE+IsP8AtThqaa5RRwUzHpBgyxDKS
cdwgdMUHHfD/jWvSyHFtcPwBKGyOKUL9f5ltlwAPsY0YSgqgcVY7xyFAs5KQGEBv
T3WWiamy7QsEJnq0UkfCeM6tk2dEHcXvRaM1yk8Ce/1CQn4KykSslHWwxyQBbAon
s/BEZBWzMpVLVHlF02RFu7CLpsYwEWLlNHmJ6HMQRUOc5rFLqBtNMd3W5wCdt3m0
nVpt0rXmNuo/Ot7a
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 310811913239063845347930837475554092695168
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-20 09:40:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-18 09:40:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.franklin.northbergen.k12.nj.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1884 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cfh.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.church.spxtulsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.franklin.northbergen.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fullbrightelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fulton.northbergen.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.horacemann.northbergen.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jaddams.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kennedy.northbergen.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lincoln.northbergen.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lincolnparkhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mckinley.northbergen.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nbhs.northbergen.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.northbergen.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pinnaclecharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ps086.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.school.spxtulsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sfrschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sunnybraemiddleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arvin.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakersfield.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bas.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centennial.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralvalley.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'east.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foothill.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franklin.northbergen.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frontier.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fullbrightelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fulton.northbergen.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldenvalley.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highland.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horacemann.northbergen.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'independence.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaddams.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kennedy.northbergen.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kernvalley.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liberty.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincoln.northbergen.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincolnparkhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mckinley.northbergen.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miramonte.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbhs.northbergen.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'north.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northbergen.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nueva.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pathwaytomyfuture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pathwaytomyfuture.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pathwaytomyfuture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinnaclecharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps086.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ridgeview.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roc.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.spxtulsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shafter.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'south.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stockdale.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunnybraemiddleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tierradelsol.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vista.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vistawest.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellness.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'west.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cfh.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fullbrightelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highlands.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jaddams.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lincolnparkhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northbergen.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pathwaytomyfuture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pathwaytomyfuture.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pathwaytomyfuture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pinnaclecharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps086.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfrschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunnybraemiddleschool.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ad4d428820000040300473045022100c03bcc207e5559d65b451a70636805052964591f43c3810424895cf8e8bed60102206f4015f944fd7b61f923a2b2a46451cbdc8a57cca301e40272ad694633becfae0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ad4d42974000004030047304502207d69958e12888469d86afd7cbd46fac029b554dfa780dff7073d8dc391022197022100ac6f5e5c62852bec480470842dfba70c11462f1e29f4edb841d15565130c0533
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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