admin.trinitystelementary.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b8:e4:23:31:fd:f2:4f:66:07:55:1f:cc:e3:1b:8b:17:5e was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.trinitystelementary.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b8:e4:23:31:fd:f2:4f:66:07:55:1f:cc:e3:1b:8b:17:5e
Serial Number (int): 324252060036120213809495578406789982132062
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 09:b0:50:3d:49:b3:af:33:44:2e:3a:85:d7:c7:db:4b:5e:6c:99:68
Fingerprint (sha256): 7c:d8:2b:70:3d:24:7e:20:30:26:bf:14:66:98:f2:c8:07:18:a9:79:21:92:4d:fa:58:10:b9:a4:d0:32:3e:fe

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate admin.trinitystelementary.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.trinitystelementary.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.assumptionschool-sl.org
admin.banv.org
admin.bellflowerhigh.org
admin.budlongavenue.org
admin.carlossantanaarts.org
admin.chamlian.org
admin.cottageschool.org
admin.holyangelsarcadia.net
admin.hsmp.org
admin.ichspride.org
admin.mendezhs.org
admin.ranchopicojuniorhigh.org
admin.saintpaulcatholic.org
admin.shaeagles.org
admin.somersethigh.org
admin.trinitystelementary.com
admin.wardhigh.org
alisal.pleasantonusd.net
amador.pleasantonusd.net
assumptionschool-sl.org
avcollegecareer.avhsd.org
banv.org
barrington.nclusd.k12.ca.us
barrington.nclusd.org
bellflowerhigh.org
bonita.nclusd.k12.ca.us
bonita.nclusd.org
budlongavenue.org
carlossantanaarts.org
chamlian.org
donlon.pleasantonusd.net
edlioschooldistrict.org
elem.cumberlandacademy.com
elp.erusd.org
es.rockdaleisd.net
fairlands.pleasantonusd.net
harvest.pleasantonusd.net
hearst.pleasantonusd.net
holyangelsarcadia.net
hs.rockdaleisd.net
hsmp.org
hunt.nclusd.k12.ca.us
hunt.nclusd.org
ichspride.org
is.rockdaleisd.net
jh.rockdaleisd.net
kprep.avdistrict.org
lydiksen.pleasantonusd.net
mendezhs.org
mohr.pleasantonusd.net
ms.cumberlandacademy.com
orestimba.nclusd.k12.ca.us
orestimba.nclusd.org
pathways.portervilleschools.org
pleasantonmiddle.pleasantonusd.net
ranchopicojuniorhigh.com
ranchopicojuniorhigh.net
ranchopicojuniorhigh.org
saintpaulcatholic.org
shaeagles.org
smmschool.net
somersethigh.org
valleyview.pleasantonusd.net
vintagehills.pleasantonusd.net
vonrenner.nclusd.k12.ca.us
vonrenner.nclusd.org
walnutgrove.pleasantonusd.net
wardhigh.org
www.assumptionschool-sl.org
www.banv.org
www.bellflowerhigh.org
www.bgh4.k12.wy.us
www.budlongavenue.org
www.carlossantanaarts.org
www.chamlian.org
www.cottageschool.org
www.cumberlandacademy.com
www.esc6.net
www.glcps.org
www.holyangelsarcadia.net
www.hsmp.org
www.ichspride.org
www.leilehua.k12.hi.us
www.lnhs.org
www.mendezhs.org
www.nclusd.k12.ca.us
www.nclusd.org
www.pleasantonusd.net
www.ranchopicojuniorhigh.com
www.ranchopicojuniorhigh.net
www.ranchopicojuniorhigh.org
www.rockdaleisd.net
www.saintpaulcatholic.org
www.shaeagles.org
www.smms.pvt.k12.ca.us
www.smmschool.net
www.somersethigh.org
www.wardhigh.org
yolo.nclusd.k12.ca.us
yolo.nclusd.org

Other certificates including the domain name trinitystelementary.com

(limited to 100 certificates)
second.exteraschools.org
admin.adulteducation.pleasantonusd.net
admin.lorena.exteraschools.org
abchandler.henderson.k12.ky.us
tcms.todd.kyschools.us
admin.ccti.pgsd.ms
admin.ccti.pgsd.ms
admin.ccti.pgsd.ms
admin.tcms.todd.kyschools.us
admin.ccti.pgsd.ms
admin.ccti.pgsd.ms
admin.mes.mayfield.kyschools.us
admin.clarabartonhs.org
www.nicholsonstemacademy.org
abchandler.henderson.kyschools.us
abchandler.henderson.k12.ky.us
admin.ccti.pgsd.ms
abchandler.henderson.k12.ky.us
breed.exteraschools.org
abchandler.henderson.kyschools.us
admin.second.exteraschools.org
clarabartonhs.org
www.stlouis-batesville.org
admin.adulteducation.pleasantonusd.net
trinitystelementary.com
admin.exteraschools.org
northwesthigh.slp.k12.la.us
abchandler.henderson.kyschools.us
www.pacificschool.com
camden.cuhsd.org
admin.ccti.pgsd.ms
www.trinitystelementary.com
gageparkhs.org
abchandler.henderson.kyschools.us
exteraschools.org
abchandler.henderson.kyschools.us
www.lusd.k12.ca.us
admin.assumptionschool-sl.org
admin.chms.mx
trinitystelementary.com
abchandler.henderson.k12.ky.us
admin.hsmp.org
www.notredameacademy.org
admin.ccti.pgsd.ms
abchandler.henderson.kyschools.us
admin.ccti.pgsd.ms
www.exteraschools.org
admin.trinitystelementary.com
ccti.pgsd.ms
www.ccs-nc.org
abchandler.henderson.k12.ky.us
admin.sqhs.monroe.k12.tn.us
admin.assumptionschool-sl.org
second.exteraschools.org
www.summitacademyschools.org
www.macademy.org
admin.breed.exteraschools.org
admin.ntes.todd.kyschools.us
admin.res.rfisd.net
admin.clarabartonhs.org
arnaudvilleelem.slp.k12.la.us
admin.sssq.org
vapa.mvusd.net
admin.cuhsd.org
admin.ccti.pgsd.ms
www.trinitystelementary.com
admin.assumptionschool-sl.org
lorena.exteraschools.org
trinitystelementary.com
admin.chms.mx
grandcoteauelem.slp.k12.la.us
admin.adulteducation.pleasantonusd.net
admin.needlesusd.org
admin.tcms.todd.kyschools.us
admin.br.needlesusd.org
www.centroculturaljalilgibran.edu.mx
admin.assumptionschool-sl.org
admin.greatwestern.kcusd.com
breed.exteraschools.org
admin.todd.kyschools.us
abchandler.henderson.k12.ky.us
bluffdale.summitacademyschools.org
abchandler.henderson.k12.ky.us
grandcoteauelem.slp.k12.la.us
abchandler.henderson.k12.ky.us
abchandler.henderson.kyschools.us
abchandler.henderson.k12.ky.us
abchandler.henderson.k12.ky.us
eastman.exteraschools.org
ps086.com
hs.cumberlandacademy.com
admin.cvhs.cv.k12.ca.us
www.monte-rosa.mx

Certificate

The complete raw certificate details for admin.trinitystelementary.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIO6DCCDdCgAwIBAgISA7jkIzH98k9mB1UfzOMbixdeMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA0MTkyMDEyMDBaFw0x
NzA3MTgyMDEyMDBaMCgxJjAkBgNVBAMTHWFkbWluLnRyaW5pdHlzdGVsZW1lbnRh
cnkuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQ
bTHb+2z7rfYVCl+ph5m8FJJOEgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5
pV3R4RBgn18RTHnTD9fS27JxyeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGr
mQF3Z/h2e6StagubO+pVwFzG8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK
7wAhJO8el2z375LDd2VIwrdWQP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlW
Z1AdjOKfRiY0ckFuu/DYkuvkNKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5
Tu7zbek/MR/JMR9nceWyZ2Mund+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzw
WzBvTD8F7q6ckUbIgpeo7stn7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuai
vjW/P+Tm64XjXNjP9F1W8+5tlcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ
4Iudx/o3Q4E2w6Aud9PYyV05pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/
h0omUmCIDiQVG30eHhb3OIP3bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUn
ohkUi6ikD4me6o58sq/IQVmyem1M/E0CAwEAAaOCCugwggrkMA4GA1UdDwEB/wQE
AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIw
ADAdBgNVHQ4EFgQUL2vITWwsLjLyACD/LU1sWvxuurswHwYDVR0jBBgwFoAUqEpq
YwR93brm0Tm3pkVl7/Oo7KEwcAYIKwYBBQUHAQEEZDBiMC8GCCsGAQUFBzABhiNo
dHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAvBggrBgEFBQcwAoYj
aHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wggjwBgNVHREEggjn
MIII44IdYWRtaW4uYXNzdW1wdGlvbnNjaG9vbC1zbC5vcmeCDmFkbWluLmJhbnYu
b3JnghhhZG1pbi5iZWxsZmxvd2VyaGlnaC5vcmeCF2FkbWluLmJ1ZGxvbmdhdmVu
dWUub3JnghthZG1pbi5jYXJsb3NzYW50YW5hYXJ0cy5vcmeCEmFkbWluLmNoYW1s
aWFuLm9yZ4IXYWRtaW4uY290dGFnZXNjaG9vbC5vcmeCG2FkbWluLmhvbHlhbmdl
bHNhcmNhZGlhLm5ldIIOYWRtaW4uaHNtcC5vcmeCE2FkbWluLmljaHNwcmlkZS5v
cmeCEmFkbWluLm1lbmRlemhzLm9yZ4IeYWRtaW4ucmFuY2hvcGljb2p1bmlvcmhp
Z2gub3JnghthZG1pbi5zYWludHBhdWxjYXRob2xpYy5vcmeCE2FkbWluLnNoYWVh
Z2xlcy5vcmeCFmFkbWluLnNvbWVyc2V0aGlnaC5vcmeCHWFkbWluLnRyaW5pdHlz
dGVsZW1lbnRhcnkuY29tghJhZG1pbi53YXJkaGlnaC5vcmeCGGFsaXNhbC5wbGVh
c2FudG9udXNkLm5ldIIYYW1hZG9yLnBsZWFzYW50b251c2QubmV0ghdhc3N1bXB0
aW9uc2Nob29sLXNsLm9yZ4IZYXZjb2xsZWdlY2FyZWVyLmF2aHNkLm9yZ4IIYmFu
di5vcmeCG2JhcnJpbmd0b24ubmNsdXNkLmsxMi5jYS51c4IVYmFycmluZ3Rvbi5u
Y2x1c2Qub3JnghJiZWxsZmxvd2VyaGlnaC5vcmeCF2Jvbml0YS5uY2x1c2QuazEy
LmNhLnVzghFib25pdGEubmNsdXNkLm9yZ4IRYnVkbG9uZ2F2ZW51ZS5vcmeCFWNh
cmxvc3NhbnRhbmFhcnRzLm9yZ4IMY2hhbWxpYW4ub3Jnghhkb25sb24ucGxlYXNh
bnRvbnVzZC5uZXSCF2VkbGlvc2Nob29sZGlzdHJpY3Qub3JnghplbGVtLmN1bWJl
cmxhbmRhY2FkZW15LmNvbYINZWxwLmVydXNkLm9yZ4ISZXMucm9ja2RhbGVpc2Qu
bmV0ghtmYWlybGFuZHMucGxlYXNhbnRvbnVzZC5uZXSCGWhhcnZlc3QucGxlYXNh
bnRvbnVzZC5uZXSCGGhlYXJzdC5wbGVhc2FudG9udXNkLm5ldIIVaG9seWFuZ2Vs
c2FyY2FkaWEubmV0ghJocy5yb2NrZGFsZWlzZC5uZXSCCGhzbXAub3JnghVodW50
Lm5jbHVzZC5rMTIuY2EudXOCD2h1bnQubmNsdXNkLm9yZ4INaWNoc3ByaWRlLm9y
Z4ISaXMucm9ja2RhbGVpc2QubmV0ghJqaC5yb2NrZGFsZWlzZC5uZXSCFGtwcmVw
LmF2ZGlzdHJpY3Qub3JnghpseWRpa3Nlbi5wbGVhc2FudG9udXNkLm5ldIIMbWVu
ZGV6aHMub3JnghZtb2hyLnBsZWFzYW50b251c2QubmV0ghhtcy5jdW1iZXJsYW5k
YWNhZGVteS5jb22CGm9yZXN0aW1iYS5uY2x1c2QuazEyLmNhLnVzghRvcmVzdGlt
YmEubmNsdXNkLm9yZ4IfcGF0aHdheXMucG9ydGVydmlsbGVzY2hvb2xzLm9yZ4Ii
cGxlYXNhbnRvbm1pZGRsZS5wbGVhc2FudG9udXNkLm5ldIIYcmFuY2hvcGljb2p1
bmlvcmhpZ2guY29tghhyYW5jaG9waWNvanVuaW9yaGlnaC5uZXSCGHJhbmNob3Bp
Y29qdW5pb3JoaWdoLm9yZ4IVc2FpbnRwYXVsY2F0aG9saWMub3Jngg1zaGFlYWds
ZXMub3Jngg1zbW1zY2hvb2wubmV0ghBzb21lcnNldGhpZ2gub3Jnghx2YWxsZXl2
aWV3LnBsZWFzYW50b251c2QubmV0gh52aW50YWdlaGlsbHMucGxlYXNhbnRvbnVz
ZC5uZXSCGnZvbnJlbm5lci5uY2x1c2QuazEyLmNhLnVzghR2b25yZW5uZXIubmNs
dXNkLm9yZ4Idd2FsbnV0Z3JvdmUucGxlYXNhbnRvbnVzZC5uZXSCDHdhcmRoaWdo
Lm9yZ4Ibd3d3LmFzc3VtcHRpb25zY2hvb2wtc2wub3Jnggx3d3cuYmFudi5vcmeC
Fnd3dy5iZWxsZmxvd2VyaGlnaC5vcmeCEnd3dy5iZ2g0LmsxMi53eS51c4IVd3d3
LmJ1ZGxvbmdhdmVudWUub3Jnghl3d3cuY2FybG9zc2FudGFuYWFydHMub3JnghB3
d3cuY2hhbWxpYW4ub3JnghV3d3cuY290dGFnZXNjaG9vbC5vcmeCGXd3dy5jdW1i
ZXJsYW5kYWNhZGVteS5jb22CDHd3dy5lc2M2Lm5ldIINd3d3LmdsY3BzLm9yZ4IZ
d3d3LmhvbHlhbmdlbHNhcmNhZGlhLm5ldIIMd3d3LmhzbXAub3JnghF3d3cuaWNo
c3ByaWRlLm9yZ4IWd3d3LmxlaWxlaHVhLmsxMi5oaS51c4IMd3d3LmxuaHMub3Jn
ghB3d3cubWVuZGV6aHMub3JnghR3d3cubmNsdXNkLmsxMi5jYS51c4IOd3d3Lm5j
bHVzZC5vcmeCFXd3dy5wbGVhc2FudG9udXNkLm5ldIIcd3d3LnJhbmNob3BpY29q
dW5pb3JoaWdoLmNvbYIcd3d3LnJhbmNob3BpY29qdW5pb3JoaWdoLm5ldIIcd3d3
LnJhbmNob3BpY29qdW5pb3JoaWdoLm9yZ4ITd3d3LnJvY2tkYWxlaXNkLm5ldIIZ
d3d3LnNhaW50cGF1bGNhdGhvbGljLm9yZ4IRd3d3LnNoYWVhZ2xlcy5vcmeCFnd3
dy5zbW1zLnB2dC5rMTIuY2EudXOCEXd3dy5zbW1zY2hvb2wubmV0ghR3d3cuc29t
ZXJzZXRoaWdoLm9yZ4IQd3d3LndhcmRoaWdoLm9yZ4IVeW9sby5uY2x1c2QuazEy
LmNhLnVzgg95b2xvLm5jbHVzZC5vcmcwgf4GA1UdIASB9jCB8zAIBgZngQwBAgEw
geYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNl
bmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1h
eSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25s
eSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3Vu
ZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzANBgkqhkiG
9w0BAQsFAAOCAQEAAaBvJHfufmvKTVTGEPSg7VpF8e0B8jtRKN01G4VPfBYiuPXJ
GxsKghnLSLXGyrzzjODFqYq3lGfjEcid/ijq62FdzQ/+dUwsK6N+XswZknoFlkjo
32jIXd7DWPFIPkyveqsQdNqYSzjYwV+t74tjB/AtXneDm0WCuJ2v0mqOB4myYK3f
aC4NDt+KZAmYdLShtFM3qG+3GW1MHUYzudsSWSNKA98E4Y5w5z5dlTc9eqcXi2Pu
7jEbaNCYYpuWkYZvEN0n3d4IFoBfZw5NQz2UolDFVYXs2jdJGCH9SxGvSxPsehq4
AiruLSEw9gY+XCYXhbih+zpH2Jp617FYBKqniA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324252060036120213809495578406789982132062
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-19 20:12:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-18 20:12:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.trinitystelementary.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2279 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.assumptionschool-sl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.banv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bellflowerhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.budlongavenue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.carlossantanaarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.chamlian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cottageschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.holyangelsarcadia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hsmp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ichspride.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mendezhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ranchopicojuniorhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.saintpaulcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.shaeagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.somersethigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.trinitystelementary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wardhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alisal.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amador.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assumptionschool-sl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avcollegecareer.avhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barrington.nclusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barrington.nclusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellflowerhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonita.nclusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonita.nclusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budlongavenue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carlossantanaarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chamlian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donlon.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edlioschooldistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elem.cumberlandacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elp.erusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.rockdaleisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fairlands.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harvest.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearst.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyangelsarcadia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.rockdaleisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsmp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hunt.nclusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hunt.nclusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ichspride.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is.rockdaleisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jh.rockdaleisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kprep.avdistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lydiksen.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendezhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mohr.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.cumberlandacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orestimba.nclusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orestimba.nclusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pathways.portervilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pleasantonmiddle.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranchopicojuniorhigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranchopicojuniorhigh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranchopicojuniorhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintpaulcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaeagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smmschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'somersethigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valleyview.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vintagehills.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vonrenner.nclusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vonrenner.nclusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walnutgrove.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wardhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assumptionschool-sl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.banv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellflowerhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bgh4.k12.wy.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.budlongavenue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carlossantanaarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chamlian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cottageschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cumberlandacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esc6.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glcps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyangelsarcadia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsmp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ichspride.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leilehua.k12.hi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lnhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendezhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nclusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nclusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ranchopicojuniorhigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ranchopicojuniorhigh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ranchopicojuniorhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rockdaleisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintpaulcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shaeagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smms.pvt.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smmschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.somersethigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wardhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yolo.nclusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yolo.nclusd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0001a06f2477ee7e6bca4d54c610f4a0ed5a45f1ed01f23b5128dd351b854f7c1622b8f5c91b1b0a8219cb48b5c6cabcf38ce0c5a98ab79467e311c89dfe28eaeb615dcd0ffe754c2c2ba37e5ecc19927a059648e8df68c85ddec358f1483e4caf7aab1074da984b38d8c15fadef8b6307f02d5e77839b4582b89dafd26a8e0789b260addf682e0d0edf8a64099874b4a1b45337a86fb7196d4c1d4633b9db1259234a03df04e18e70e73e5d95373d7aa7178b63eeee311b68d098629b9691866f10dd27ddde0816805f670e4d433d94a250c55585ecda37491821fd4b11af4b13ec7a1ab8022aee2d2130f6063e5c261785b8a1fb3a47d89a7ad7b15804aaa788