www.lwa-arts.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:ec:42:ef:5b:76:24:75:c9:39:9b:62:06:61:64:bf:97:65 was issued on by Let's Encrypt.
With 31 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.lwa-arts.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ec:42:ef:5b:76:24:75:c9:39:9b:62:06:61:64:bf:97:65Serial Number (int): 341732468250352692552560963653061157295973
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): ac:73:44:a0:39:df:ed:5f:a2:4e:09:2c:cd:bb:b5:a5:33:cb:5f:4e
Fingerprint (sha256): 7d:60:aa:67:b4:84:7d:6b:46:70:bc:03:4e:f2:e8:d8:3c:a3:3d:46:8a:39:50:f3:fb:c5:f9:5e:b1:38:3b:7d
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.lwa-arts.org
31
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.lwa-arts.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
admin.belmont.bensalemsd.org
admin.bensalemsd.org
admin.cds.exeter.k12.ca.us
admin.cornwells.bensalemsd.org
admin.fairmontelementary.org
admin.hostoscharter.org
admin.olneycharter.org
admin.rush.bensalemsd.org
admin.shafer.bensalemsd.org
admin.snyder.bensalemsd.org
admin.struble.bensalemsd.org
admin.tuffree.org
admin.valley2.bensalemsd.org
atc.mayfield.kyschools.us
belmont.bensalemsd.org
bensalemsd.org
bhs.bensalemsd.org
cds.exeter.k12.ca.us
cornwells.bensalemsd.org
faust.bensalemsd.org
mbmswaves.com
rush.bensalemsd.org
shafer.bensalemsd.org
snyder.bensalemsd.org
struble.bensalemsd.org
valley2.bensalemsd.org
www.bensalemsd.org
www.fairmontelementary.org
www.lwa-arts.org
www.mayfield.kyschools.us
www.saintpiusx.com
admin.bensalemsd.org
admin.cds.exeter.k12.ca.us
admin.cornwells.bensalemsd.org
admin.fairmontelementary.org
admin.hostoscharter.org
admin.olneycharter.org
admin.rush.bensalemsd.org
admin.shafer.bensalemsd.org
admin.snyder.bensalemsd.org
admin.struble.bensalemsd.org
admin.tuffree.org
admin.valley2.bensalemsd.org
atc.mayfield.kyschools.us
belmont.bensalemsd.org
bensalemsd.org
bhs.bensalemsd.org
cds.exeter.k12.ca.us
cornwells.bensalemsd.org
faust.bensalemsd.org
mbmswaves.com
rush.bensalemsd.org
shafer.bensalemsd.org
snyder.bensalemsd.org
struble.bensalemsd.org
valley2.bensalemsd.org
www.bensalemsd.org
www.fairmontelementary.org
www.lwa-arts.org
www.mayfield.kyschools.us
www.saintpiusx.com
Other certificates including the domain name lwa-arts.org
(limited to 100 certificates)
admin.dover.k12.nh.us
www.hoganprep.net
www.kipling.edu.mx
ges.dover.k12.nh.us
lp.parkerusd.org
jacksoncoschools.com
fairmontelementary.org
dms.dover.k12.nh.us
admin.jchs.jacksoncoschools.com
cscisd.net
admin.todd.kyschools.us
tbjelc.henderson.kyschools.us
www.bufordsa.org
admin.wps.dover.k12.nh.us
admin.olneycharter.org
lwa-arts.org
cecvac.com
bufordsa.org
admin.bayouacademy.net
www.whitesburgchristianacademy.org
admin.bhs.ballingerisd.net
www.bayouacademy.net
admin.ges.dover.k12.nh.us
www.richardallenschools.com
admin.bles.lex3.org
admin.rapk3.richardallenschools.com
admin.bles.lex3.org
admin.bellamy.dover.k12.nh.us
www.lwa-arts.org
kiwedin.adsb.on.ca
admin.ctc.dover.k12.nh.us
admin.jacksoncoschools.com
admin.euhs.exeter.k12.ca.us
hostoscharter.org
hs.hoganprep.net
admin.bayouacademy.net
admin.cvilleschools.com
lwa-arts.org
lwa-arts.org
lwa-arts.org
admin.dms.dover.k12.nh.us
www.hostoscharter.org
admin.hoganprep.net
lwa-arts.org
ctc.dover.k12.nh.us
www.hss.dover.k12.nh.us
abchandler.henderson.kyschools.us
bayouacademy.net
admin.clarendon.sboe.org
www.henderson.kyschools.us
www.sllboces.org
lwa-arts.org
www.mbmswaves.com
admin.raak6.richardallenschools.com
www.jacksoncoschools.com
abchandler.henderson.kyschools.us
www.hoganprep.net
www.kipling.edu.mx
ges.dover.k12.nh.us
lp.parkerusd.org
jacksoncoschools.com
fairmontelementary.org
dms.dover.k12.nh.us
admin.jchs.jacksoncoschools.com
cscisd.net
admin.todd.kyschools.us
tbjelc.henderson.kyschools.us
www.bufordsa.org
admin.wps.dover.k12.nh.us
admin.olneycharter.org
lwa-arts.org
cecvac.com
bufordsa.org
admin.bayouacademy.net
www.whitesburgchristianacademy.org
admin.bhs.ballingerisd.net
www.bayouacademy.net
admin.ges.dover.k12.nh.us
www.richardallenschools.com
admin.bles.lex3.org
admin.rapk3.richardallenschools.com
admin.bles.lex3.org
admin.bellamy.dover.k12.nh.us
www.lwa-arts.org
kiwedin.adsb.on.ca
admin.ctc.dover.k12.nh.us
admin.jacksoncoschools.com
admin.euhs.exeter.k12.ca.us
hostoscharter.org
hs.hoganprep.net
admin.bayouacademy.net
admin.cvilleschools.com
lwa-arts.org
lwa-arts.org
lwa-arts.org
admin.dms.dover.k12.nh.us
www.hostoscharter.org
admin.hoganprep.net
lwa-arts.org
ctc.dover.k12.nh.us
www.hss.dover.k12.nh.us
abchandler.henderson.kyschools.us
bayouacademy.net
admin.clarendon.sboe.org
www.henderson.kyschools.us
www.sllboces.org
lwa-arts.org
www.mbmswaves.com
admin.raak6.richardallenschools.com
www.jacksoncoschools.com
abchandler.henderson.kyschools.us
Certificate
The complete raw certificate details for www.lwa-arts.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJPzCCCCegAwIBAgISA+xC71t2JHXJOZtiBmFkv5dlMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEyMDQwMTU4NDhaFw0x OTAzMDQwMTU4NDhaMBsxGTAXBgNVBAMTEHd3dy5sd2EtYXJ0cy5vcmcwggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCtrIXp7mbejFBtMdv7bPut9hUKX6mH mbwUkk4SAS2wWeHzgwVeEiXu4Q62pKUwqxHbZ3Nw0C0rUbmlXdHhEGCfXxFMedMP 19LbsnHJ7J+Vd91RftXDhoavIx/wwT5kaGhpA/RdgHdcMauZAXdn+HZ7pK1qC5s7 6lXAXMbxUMB2dqGxStseulJ5+JrOLKGF4+QvfNCD86ZpCQrvACEk7x6XbPfvksN3 ZUjCt1ZA/YmNXz3Zh360hk6cCTaPIOW/cxhcpcaKUHKtCVZnUB2M4p9GJjRyQW67 8NiS6+Q0qbZ/fNRq/DeyUK6NlYeQgdk2lo23F+yuki1QirlO7vNt6T8xH8kxH2dx 5bJnYy6d35JuB8t/3rA+FUFquuynUc1H4iSjK2vk8w1EHPBbMG9MPwXurpyRRsiC l6juy2ftvQg1c9iA1PvMVf9Q0JxaP5pon4q7wwpXgQQS5qK+Nb8/5ObrheNc2M/0 XVbz7m2VwmAmEZTITKUJS0BGqE+iNTNCeuHWJRIxE0jaWIngi53H+jdDgTbDoC53 09jJXTmkWAx1Itg1EZBPJBFJpJtDceZ9mL+lCMXJSiGIDv+HSiZSYIgOJBUbfR4e Fvc4g/dsmKxdkrioSuflkOYp1SA0LcZL7LCtMAFiPQ34RSeiGRSLqKQPiZ7qjnyy r8hBWbJ6bUz8TQIDAQABo4IFTDCCBUgwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQv a8hNbCwuMvIAIP8tTWxa/G66uzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv 86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu dC14My5sZXRzZW5jcnlwdC5vcmcvMIIDAAYDVR0RBIIC9zCCAvOCHGFkbWluLmJl bG1vbnQuYmVuc2FsZW1zZC5vcmeCFGFkbWluLmJlbnNhbGVtc2Qub3JnghphZG1p bi5jZHMuZXhldGVyLmsxMi5jYS51c4IeYWRtaW4uY29ybndlbGxzLmJlbnNhbGVt c2Qub3JnghxhZG1pbi5mYWlybW9udGVsZW1lbnRhcnkub3JnghdhZG1pbi5ob3N0 b3NjaGFydGVyLm9yZ4IWYWRtaW4ub2xuZXljaGFydGVyLm9yZ4IZYWRtaW4ucnVz aC5iZW5zYWxlbXNkLm9yZ4IbYWRtaW4uc2hhZmVyLmJlbnNhbGVtc2Qub3Jnghth ZG1pbi5zbnlkZXIuYmVuc2FsZW1zZC5vcmeCHGFkbWluLnN0cnVibGUuYmVuc2Fs ZW1zZC5vcmeCEWFkbWluLnR1ZmZyZWUub3JnghxhZG1pbi52YWxsZXkyLmJlbnNh bGVtc2Qub3JnghlhdGMubWF5ZmllbGQua3lzY2hvb2xzLnVzghZiZWxtb250LmJl bnNhbGVtc2Qub3Jngg5iZW5zYWxlbXNkLm9yZ4ISYmhzLmJlbnNhbGVtc2Qub3Jn ghRjZHMuZXhldGVyLmsxMi5jYS51c4IYY29ybndlbGxzLmJlbnNhbGVtc2Qub3Jn ghRmYXVzdC5iZW5zYWxlbXNkLm9yZ4INbWJtc3dhdmVzLmNvbYITcnVzaC5iZW5z YWxlbXNkLm9yZ4IVc2hhZmVyLmJlbnNhbGVtc2Qub3JnghVzbnlkZXIuYmVuc2Fs ZW1zZC5vcmeCFnN0cnVibGUuYmVuc2FsZW1zZC5vcmeCFnZhbGxleTIuYmVuc2Fs ZW1zZC5vcmeCEnd3dy5iZW5zYWxlbXNkLm9yZ4Iad3d3LmZhaXJtb250ZWxlbWVu dGFyeS5vcmeCEHd3dy5sd2EtYXJ0cy5vcmeCGXd3dy5tYXlmaWVsZC5reXNjaG9v bHMudXOCEnd3dy5zYWludHBpdXN4LmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3 BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNy eXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AHR+2oMxrTMQkSGcziVP QnDCv/1eQiAIxjc1eeYQe8xWAAABZ3cnYBgAAAQDAEcwRQIgaoYjC6GHaj5Bi05X trKHbPJinJE/gU9CX5XMVzht4esCIQC6JyuBsh/DsbAn6X5IXEeMNdsnlzhwo1pE QQbZp62EBgB2AGPy283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iNAAABZ3cn YCsAAAQDAEcwRQIgbu2CmL963UpP+i9e2M7x2/GlblfUXyd2mY2OlhMTRgUCIQCY QSIq/1sN2yHLZJcyacV04qp7Z9E97ADRgLD3dTg7CTANBgkqhkiG9w0BAQsFAAOC AQEACA1drQ+3XKFsElka0ZitIQIyxeNAZMEzp0XcUZsjHj3Nfua0Gu9SEDBYWi2X oWYcLfwL+9dRpCygdkeyH9f89GrsMjTH6GuTWFswtQGBuwrf7hYLBkF5L9Nz6D4L yNQhAqUX/3btCGEIJ7TOv8HiBP9LPttsrWXXhE87+j4SItG0cp5MGh+Iy1UGF9U/ muqrtkwwVS16hwIzgw1fykirYDV4sM6is3CAH10xuL8c1nPLYW9TTcJPwkrkp1yU ZluBDmpxvq8mIYai0UPVz5o9g/s4OsXLji5cnaxWBUDYh72XqgapHGViWk1XeVyU JV3ENEpttZlqN265YUJR9FMZNQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQbTHb+2z7 rfYVCl+ph5m8FJJOEgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5pV3R4RBg n18RTHnTD9fS27JxyeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGrmQF3Z/h2 e6StagubO+pVwFzG8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK7wAhJO8e l2z375LDd2VIwrdWQP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlWZ1AdjOKf RiY0ckFuu/DYkuvkNKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5Tu7zbek/ MR/JMR9nceWyZ2Mund+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzwWzBvTD8F 7q6ckUbIgpeo7stn7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuaivjW/P+Tm 64XjXNjP9F1W8+5tlcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ4Iudx/o3 Q4E2w6Aud9PYyV05pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/h0omUmCI DiQVG30eHhb3OIP3bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUnohkUi6ik D4me6o58sq/IQVmyem1M/E0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 341732468250352692552560963653061157295973 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-04 01:58:48 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-04 01:58:48 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lwa-arts.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (759 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.belmont.bensalemsd.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bensalemsd.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cds.exeter.k12.ca.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cornwells.bensalemsd.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fairmontelementary.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hostoscharter.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.olneycharter.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rush.bensalemsd.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.shafer.bensalemsd.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.snyder.bensalemsd.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.struble.bensalemsd.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tuffree.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.valley2.bensalemsd.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atc.mayfield.kyschools.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belmont.bensalemsd.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bensalemsd.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhs.bensalemsd.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cds.exeter.k12.ca.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornwells.bensalemsd.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faust.bensalemsd.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbmswaves.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rush.bensalemsd.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shafer.bensalemsd.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snyder.bensalemsd.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'struble.bensalemsd.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valley2.bensalemsd.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bensalemsd.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fairmontelementary.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lwa-arts.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mayfield.kyschools.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintpiusx.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016777276018000004030047304502206a86230ba1876a3e418b4e57b6b2876cf2629c913f814f425f95cc57386de1eb022100ba272b81b21fc3b1b027e97e485c478c35db27973870a35a444106d9a7ad840600760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001677727602b000004030047304502206eed8298bf7add4a4ffa2f5ed8cef1dbf1a56e57d45f2776998d8e96131346050221009841222aff5b0ddb21cb64973269c574e2aa7b67d13dec00d180b0f775383b09 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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