admin.elkhartisd.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0f:7d:2c:e7:44:dc:48:9a:98:71:06:37:37:65:c1:42:38 was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.elkhartisd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0f:7d:2c:e7:44:dc:48:9a:98:71:06:37:37:65:c1:42:38
Serial Number (int): 266607479950322014877732987618860535464504
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 28:7e:40:52:6a:03:32:88:44:4f:56:08:13:9b:af:19:a2:07:6f:44
Fingerprint (sha256): 7d:9b:a4:3e:1e:15:3d:8c:d3:d6:a6:d4:df:cc:7d:1b:06:52:ea:0c:20:9d:88:5f:60:43:5c:ed:21:fa:e4:95

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate admin.elkhartisd.org

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.elkhartisd.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.elkhartisd.org
admin.es.elkhartisd.org
admin.holyfamilyhs.com
admin.hs.elkhartisd.org
admin.is.elkhartisd.org
admin.kahukuhigh.org
admin.ms.elkhartisd.org
admin.phillips.k12.wi.us
admin.sbdiocesecef.org
admin.tahquitzhs.org
admin.triviumcharter.org
admin.vciseagles.org
ae.chesterfieldschools.org
blc.arrowacademy.org
bonham.tisd.org
bradley.usd207.org
ca.arrowacademy.org
cater.tisd.org
cfh.chesterfieldschools.org
chesterfieldschools.org
chs.chesterfieldschools.org
cis.chesterfieldschools.org
cnh.chesterfieldschools.org
colehs.fshisd.net
colems.fshisd.net
coop.fshisd.net
cps.chesterfieldschools.org
crms.chesterfieldschools.org
cte.chesterfieldschools.org
edwards.tisd.org
ees.chesterfieldschools.org
eisenhower.usd207.org
es.elkhartisd.org
es.roosevelt.k12.tx.us
fa.arrowacademy.org
fshelem.fshisd.net
garcia.tisd.org
holyfamilyhs.com
hpa.arrowacademy.org
hs.elkhartisd.org
hs.roosevelt.k12.tx.us
is.elkhartisd.org
it.chesterfieldschools.org
jefferson.tisd.org
jes.chesterfieldschools.org
jh.roosevelt.k12.tx.us
kahukuhigh.org
kennedy-powell.tisd.org
la.arrowacademy.org
lalc.arrowacademy.org
lamar.tisd.org
lms.chesterfieldschools.org
macarthur.usd207.org
meridith-dunbar.tisd.org
mes.chesterfieldschools.org
mha.arrowacademy.org
mhs.chesterfieldschools.org
ms.elkhartisd.org
nhms.chesterfieldschools.org
patton.usd207.org
pes.chesterfieldschools.org
phillips.k12.wi.us
pps.chesterfieldschools.org
pve.chesterfieldschools.org
raye-allen.tisd.org
res.chesterfieldschools.org
sbdiocesecef.org
scott.tisd.org
sos.arrowacademy.org
south.fisd.us
tahquitzhs.org
triviumcharter.org
vciseagles.org
webster.usd465.com
westernhills.tisd.org
wheatley.tisd.org
www.arrowacademy.org
www.chesterfieldschools.org
www.elkhartisd.org
www.fshisd.net
www.fuchsmizrachi.org
www.hbuhsd.edu
www.hemetusd.k12.ca.us
www.holyfamilyhs.com
www.jecc.org
www.kahukuhigh.org
www.phillips.k12.wi.us
www.reaganacademy.org
www.roosevelt.k12.tx.us
www.sbdiocesecef.org
www.smcjuhsd.org
www.tahquitzhs.org
www.triviumcharter.org
www.usd207.org
www.vciseagles.org
www2.smcjuhsd.org

Other certificates including the domain name elkhartisd.org

(limited to 100 certificates)
admin.adultlearning.sunrisesd.ca
lp.parkerusd.org
admin.elkhartisd.org
admin.phillips.k12.wi.us
sgmission.org
admin.va.davidson.k12.nc.us
admin.triviumcharter.org
dz.aceroschools.org
elkhartisd.org
www.rebsamen.mx
admin.breed.exteraschools.org
es.elkhartisd.org
lifeschools.net
www.grandville.k12.mi.us
admin.fges.davidson.k12.nc.us
www.tisd.org
rvs.monroe.k12.tn.us
mas.mpusd.net
admin.wayside.bcsd.com
admin.es.elkhartisd.org
admin.es.elkhartisd.org
admin.breed.exteraschools.org
elkhartisd.org
blc.arrowacademy.org
admin.breed.exteraschools.org
admin.adultlearning.sunrisesd.ca
admin.aristoiclassical.org
admin.tahquitzhs.org
triviumcharter.org
wheatley.tisd.org
admin.stanthonyeagles.org
admin.elkhartisd.org
admin.breed.exteraschools.org
admin.breed.exteraschools.org
meridith-dunbar.tisd.org
hy.hpisd.org
admin.elkhartisd.org
hs.elkhartisd.org
www.monroe.k12.tn.us
admin.elkhartisd.org
westernhills.tisd.org
admin.adulted.kcusd.com
hartorah.org
admin.ms.elkhartisd.org
admin.holyfamilyhs.com
admin.oghs.davidson.k12.nc.us
es.glendaleacademy.org
admin.nes.davidson.k12.nc.us
lalc.arrowacademy.org
admin.cvilleschools.com
ms.elkhartisd.org
admin.breed.exteraschools.org
cis.gobearsgo.net
admin.breed.exteraschools.org
admin.adulted.kcusd.com
admin.nes.davidson.k12.nc.us
bonham.tisd.org
admin.ves.monroe.k12.tn.us
admin.breed.exteraschools.org
is.elkhartisd.org
hs.elkhartisd.org
admin.wal.davidson.k12.nc.us
admin.es.elkhartisd.org
admin.sme.davidson.k12.nc.us
admin.elkhartisd.org
ae.chesterfieldschools.org
cherokeeisd.net
admin.bces.davidson.k12.nc.us
admin.hs.hpisd.org
admin.adulted.kcusd.com
admin.elkhartisd.org
www.elkhartisd.org
es.glendaleacademy.org
admin.es.elkhartisd.org
admin.colonies.sunrisesd.ca
admin.adulted.kcusd.com
ths.tisd.org

Certificate

The complete raw certificate details for admin.elkhartisd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266607479950322014877732987618860535464504
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-30 10:53:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-28 10:53:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.elkhartisd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2159 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.es.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.holyfamilyhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hs.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.is.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kahukuhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ms.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.phillips.k12.wi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sbdiocesecef.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tahquitzhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.triviumcharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.vciseagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ae.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blc.arrowacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonham.tisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bradley.usd207.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.arrowacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cater.tisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfh.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chs.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cis.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnh.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colehs.fshisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colems.fshisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coop.fshisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cps.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crms.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cte.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edwards.tisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ees.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eisenhower.usd207.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.roosevelt.k12.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fa.arrowacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fshelem.fshisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garcia.tisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamilyhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpa.arrowacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.roosevelt.k12.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jefferson.tisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jes.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jh.roosevelt.k12.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kahukuhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kennedy-powell.tisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'la.arrowacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lalc.arrowacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lamar.tisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lms.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macarthur.usd207.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meridith-dunbar.tisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mes.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mha.arrowacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhs.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhms.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patton.usd207.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pes.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phillips.k12.wi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pps.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pve.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raye-allen.tisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'res.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbdiocesecef.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scott.tisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sos.arrowacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'south.fisd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tahquitzhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triviumcharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vciseagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webster.usd465.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westernhills.tisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wheatley.tisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arrowacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fshisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fuchsmizrachi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbuhsd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hemetusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamilyhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jecc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kahukuhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phillips.k12.wi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reaganacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roosevelt.k12.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sbdiocesecef.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smcjuhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tahquitzhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.triviumcharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usd207.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vciseagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.smcjuhsd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ebc2884d20000040300483046022100d283c581fee61ce54fed07f6993848ff04f4600e48e11cca39915045769f59c3022100fcd95f939f2d682dcdfa5425b7f9181611aad6818c7bc9baa9aa10db76462cc100750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ebc2884fc000004030046304402202764ef853cf63182f1806ae0e518f3a6fa870429aa3c47fc36b0e28d827a1789022054ea03c3c6dd582f7eb265d01db8b9e9f3ad4f29026c6fed166f6557c41137d3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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