admin.primary.cusd1.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4d:ff:c0:3b:a3:16:92:ef:91:13:09:78:69:14:e6:d9:60 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.primary.cusd1.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4d:ff:c0:3b:a3:16:92:ef:91:13:09:78:69:14:e6:d9:60
Serial Number (int): 287878551317698337271027806360005098527072
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 00:bc:18:a7:43:af:e9:c2:89:ba:13:57:bf:b7:2d:79:2f:34:4f:26
Fingerprint (sha256): 7f:98:1a:16:93:8a:e3:2e:2a:d9:e5:93:42:4f:0f:78:a6:f3:16:24:20:6e:ca:69:a8:5c:73:28:59:1e:42:3c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate admin.primary.cusd1.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.primary.cusd1.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acsaregion13.org
admin.acsaregion13.org
admin.arcoirisschool.org
admin.bishopludden.org
admin.colegioedlio.org
admin.coloradoearlycolleges.org
admin.cristoreyfortworth.org
admin.fdrhs.org
admin.fessenden-bowdon.org
admin.frankwoodruffelementary.org
admin.gghs.us
admin.gilbertmagnetschool.org
admin.huffmanef.com
admin.intermediate.cusd1.com
admin.mazenod.edu.mx
admin.middle.cusd1.com
admin.nvoc.org
admin.primary.cusd1.com
admin.saltlakeeshawaii.org
admin.san-saba.net
admin.standrewut.org
admin.tfhe.org
admin.venturacharterschool.org
admin.zionmarengo.net
arcoirisschool.info
arcoirisschool.org
bishopludden.org
central.mcssk12.org
colegioedlio.org
coloradoearlycolleges.org
cristoreyfortworth.org
endeavor.mcssk12.org
fessenden-bowdon.org
frankwoodruffelementary.org
gghs.us
gilbertmagnetschool.org
harvest.mcssk12.org
hazelgreenelementary.mcssk12.org
heritagevalley.fillmoreusd.org
huffmanef.com
intermediate.cusd1.com
intermediate.sd925.org
legacy.mcssk12.org
lynnfanning.mcssk12.org
madisoncountyelementary.mcssk12.org
madisoncrossroads.mcssk12.org
mazenod.edu.mx
meridianville.mcssk12.org
middle.cusd1.com
middle.sd925.org
monroviaelementary.mcssk12.org
monroviamiddle.mcssk12.org
mooresmill.mcssk12.org
mtcarmel.mcssk12.org
newhopeelementary.mcssk12.org
newmarket.mcssk12.org
nvoc.org
owenscrossroads.mcssk12.org
pace.mcssk12.org
primary.sd925.org
riovista.fillmoreusd.org
rivertonelementary.mcssk12.org
rivertonintermediate.mcssk12.org
saltlakeeshawaii.org
san-saba.net
sparkmanmiddle.mcssk12.org
standrewut.org
tfhe.org
venturacharterschool.com
venturacharterschool.org
venturacharterschool.us
walnutgrove.mcssk12.org
www.acsaregion13.org
www.arcoirisschool.info
www.arcoirisschool.org
www.bigpicture.org
www.bishopludden.org
www.bronxacademyofpromise.com
www.colegioedlio.org
www.coloradoearlycolleges.org
www.cristoreyfortworth.org
www.fdrhs.org
www.fessenden-bowdon.org
www.fessenden.k12.nd.us
www.frankwoodruffelementary.org
www.gghs.us
www.gilbertmagnetschool.org
www.hopewell.k12.va.us
www.huffmanef.com
www.lahainalunahs.org
www.mazenod.edu.mx
www.mcssk12.org
www.missourimilitaryacademy.org
www.nvoc.org
www.saltlake.k12.hi.us
www.saltlakeeshawaii.org
www.standrewut.org
www.venturacharterschool.com
www.venturacharterschool.us
zionmarengo.net

Other certificates including the domain name cusd1.com

(limited to 100 certificates)
cusd1.com
walshcps.org
admin-cuajimalpa.peterson.edu.mx
admin.bcsd.com
cusd1.com
admin-cuajimalpa.peterson.edu.mx
high.cusd1.com
www.san-saba.net
admin.sd925.org
admin.mtsd-vt.org
admin.mtsd-vt.org
admin-cuajimalpa.peterson.edu.mx
adams.scrsd.org
acsaregion13.org
admin.aerostem.org
admin-cuajimalpa.peterson.edu.mx
www.bsd100.org
www.nuview.k12.ca.us
admin.sandiaprep.org
bis.bayfield.k12.co.us
stmss.org
admin.aes.uinta1.com
adams.scrsd.org
acsaregion13.org
aurora.coloradoearlycolleges.org
cusd1.com
admin.aerostem.org
cusd1.com
wsis.scrsd.org
*.cusd1.com
admin-cuajimalpa.peterson.edu.mx
mes.mtsd-vt.org
admin.aerostem.org
adams.scrsd.org
admin.primary.cusd1.com
www.mammothusd.org
cusd1.com
acacia.hemetusd.org
cusd1.com
admin-cuajimalpa.peterson.edu.mx
acsaregion13.org
admin.aerostem.org
admin.harding.bcsd.com
*.cusd1.com
www.sandiaprep.org
cusd1.com
nes.nuview.k12.ca.us
admin.sandiaprep.org
acsaregion13.org
sequoia.bcsd.com
admin.mhs.mtsd-vt.org
admin.aes.uinta1.com
admin-cuajimalpa.peterson.edu.mx
cusd1.com
peterson.edu.mx
admin-cuajimalpa.peterson.edu.mx
www.stmss.org
mtvernon.bcsd.com
admin.sd925.org
cusd1.com
admin.cusd1.com
www.zionmarengo.net
cusd1.com
cusd1.com
admin.cusd1.com
admin.fletcher.bcsd.com
admin.jefferson.bcsd.com
admin-cuajimalpa.peterson.edu.mx

Certificate

The complete raw certificate details for admin.primary.cusd1.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287878551317698337271027806360005098527072
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-04 19:41:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-02 19:41:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.primary.cusd1.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acsaregion13.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.acsaregion13.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.arcoirisschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bishopludden.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.colegioedlio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.coloradoearlycolleges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cristoreyfortworth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fdrhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fessenden-bowdon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.frankwoodruffelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gghs.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gilbertmagnetschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.huffmanef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.intermediate.cusd1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mazenod.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.middle.cusd1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nvoc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.primary.cusd1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.saltlakeeshawaii.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.san-saba.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.standrewut.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tfhe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.venturacharterschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.zionmarengo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcoirisschool.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcoirisschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bishopludden.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'central.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colegioedlio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradoearlycolleges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cristoreyfortworth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endeavor.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fessenden-bowdon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frankwoodruffelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gghs.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gilbertmagnetschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harvest.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hazelgreenelementary.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heritagevalley.fillmoreusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huffmanef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intermediate.cusd1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intermediate.sd925.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lynnfanning.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madisoncountyelementary.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madisoncrossroads.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mazenod.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meridianville.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'middle.cusd1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'middle.sd925.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monroviaelementary.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monroviamiddle.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mooresmill.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtcarmel.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newhopeelementary.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newmarket.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nvoc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owenscrossroads.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pace.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primary.sd925.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riovista.fillmoreusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rivertonelementary.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rivertonintermediate.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saltlakeeshawaii.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-saba.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparkmanmiddle.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'standrewut.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tfhe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venturacharterschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venturacharterschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venturacharterschool.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walnutgrove.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acsaregion13.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arcoirisschool.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arcoirisschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigpicture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bishopludden.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bronxacademyofpromise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegioedlio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coloradoearlycolleges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cristoreyfortworth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fdrhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fessenden-bowdon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fessenden.k12.nd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frankwoodruffelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gghs.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gilbertmagnetschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hopewell.k12.va.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffmanef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lahainalunahs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mazenod.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missourimilitaryacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nvoc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saltlake.k12.hi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saltlakeeshawaii.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.standrewut.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.venturacharterschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.venturacharterschool.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zionmarengo.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000163cc883a4e00000403004730450221008c1fa45699f7701f1ea393d31f228ff4f491c32ef97a5a7aed20484e93585b09022032a8853e6add216fda409f352ca68fd7df92ae15caec3454a367708b5099561d007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000163cc883a72000004030046304402201b581cf4bea3929fd5eb52a25a29bb91e7fd6044393f07fe72661ab5c0ca7435022016c35b0d475b8a15b5c4e7c5582d4852e34c9ff48f9ea788c0ca376a37459ae9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0053a1c8bf38a57bcf683af495ce22b49dde619c940e173bee22fee95064be2ab0fff287976f8d9d682d2c643f1a51635148fc84d34a6d40183590733be556a8e64a234d2eab1d888992d09fcc4a909132c3493ddb8f9f2a73fc73bd2ca9a3a60f9f4452e798cb723ebde92ad98d06a590991983e4643f17cab2732d089745ecf9d15271094df970990b04aa7dda9177abd740c52ec9423ee2f6032a192f8cf70d94643931fb2a4adad7ebd5a562dce69086a7af96289024371b5ba5f357ca3ad4171a6aef14b32a40e7f59c0c6c1da520161ac8a86fcf5a30576a25fbf86d6985f952d791fb8120dc641847884f5d52db990d9aed9f9fc0943821ff662f812182