1aevergreen.com

Issued by R3

About this certificate

This digital certificate with serial number 03:1d:48:fb:25:82:56:7c:fe:9d:8e:54:ef:4b:b4:b6:a9:8f was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=1aevergreen.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1d:48:fb:25:82:56:7c:fe:9d:8e:54:ef:4b:b4:b6:a9:8f
Serial Number (int): 271302054878971544846893316402997236246927
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 71:4e:a8:23:05:d1:07:2d:2c:3a:5e:a4:d3:19:f1:7f:47:ab:21:e5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9b:1a:9d:4e:5d:0a:96:53:1c:d8:4e:23:39:79:98:de:d5:55:b4:ef
Fingerprint (sha256): 85:ad:5b:28:e3:19:90:5b:60:ed:91:f1:36:62:23:6c:ba:6d:2d:6e:b6:a7:09:69:44:d0:2e:e3:a3:c8:b8:3f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate 1aevergreen.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 1aevergreen.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1aevergreen.com
2aevergreen.com
2agshl.com
2bcentral.com
activityscheduler.com
ccacathletics.com
centralbuckeyeleague.org
ctlathletics.com
custom2-rst7.rschooltoday.com
cwacathletics.com
cwbathletics.com
dpsathleticzone.com
ecusd4.com
emeraldsoundconference.org
ewacathletics.com
extra.wissports.net
facilitiesscheduler.com
frccathletics.com
gowada.org
greatnorthernconferencewi.org
greenvillecountyathletics.com
gshlathletics.com
hcsdathletics.org
hf.k12.mn.us
hlww.k12.mn.us
issathleticzone.com
kingcoathletics.com
mvcconference.com
nisquallyathletics.com
npslathletics.org
nw1a2bathletics.com
nwbathletics.com
nwcathletics.com
olympicleague.com
pacificathletics.org
pclathletics.org
rbed6049.org
scacconference.org
scarboroughredstorm.org
seatacleague.org
sectionxboces.org
spaathletics.org
spsl.org
spslathletics.com
sscathletics.org
stcroixiaa.org
tricoathletics.com
trivalleyconference.org
wescoathletics.com
wisconsinvalleyconference.com
www.1aevergreen.com
www.2aevergreen.com
www.2agshl.com
www.2bcentral.com
www.activityscheduler.com
www.ccacathletics.com
www.centralbuckeyeleague.org
www.ctlathletics.com
www.cwacathletics.com
www.cwbathletics.com
www.dpsathleticzone.com
www.ecusd4.com
www.emeraldsoundconference.org
www.ewacathletics.com
www.extra.wissports.net
www.facilitiesscheduler.com
www.frccathletics.com
www.gowada.org
www.greatnorthernconferencewi.org
www.greenvillecountyathletics.com
www.gshlathletics.com
www.hcsdathletics.org
www.hf.k12.mn.us
www.hlww.k12.mn.us
www.issathleticzone.com
www.kingcoathletics.com
www.mvcconference.com
www.nisquallyathletics.com
www.npslathletics.org
www.nw1a2bathletics.com
www.nwbathletics.com
www.nwcathletics.com
www.olympicleague.com
www.pacificathletics.org
www.pclathletics.org
www.rbed6049.org
www.scacconference.org
www.scarboroughredstorm.org
www.seatacleague.org
www.sectionxboces.org
www.spaathletics.org
www.spsl.org
www.spslathletics.com
www.sscathletics.org
www.stcroixiaa.org
www.tricoathletics.com
www.trivalleyconference.org
www.wescoathletics.com
www.wisconsinvalleyconference.com

Other certificates including the domain name 1aevergreen.com

(limited to 100 certificates)
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
1aevergreen.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
1aevergreen.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
1aevergreen.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
1aevergreen.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
1aevergreen.com
sni.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
1aevergreen.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
1aevergreen.com
sni32742.cloudflaressl.com
sni.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
1aevergreen.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
custom2-rst7.rschooltoday.com
sni32742.cloudflaressl.com
1aevergreen.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
1aevergreen.com
1aevergreen.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com
sni32742.cloudflaressl.com

Certificate

The complete raw certificate details for 1aevergreen.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEFyCWmT3EZUArdZ67vCKS6C9ggMjr
Qesvn6+ZKDMN/74yyqn+rKSBY5boChd01ET3SA/v9EihJpL7VIMxhwTcpw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271302054878971544846893316402997236246927
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-18 02:46:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-16 02:46:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1aevergreen.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004172096993dc465402b759ebbbc2292e82f6080c8eb41eb2f9faf9928330dffbe32caa9feaca4816396e80a1774d444f7480feff448a12692fb5483318704dca7
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							714ea82305d1072d2c3a5ea4d319f17f47ab21e5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2159 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1aevergreen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2aevergreen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2agshl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2bcentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activityscheduler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccacathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralbuckeyeleague.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctlathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'custom2-rst7.rschooltoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwacathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwbathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dpsathleticzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecusd4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emeraldsoundconference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ewacathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extra.wissports.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facilitiesscheduler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frccathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gowada.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatnorthernconferencewi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenvillecountyathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gshlathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcsdathletics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hf.k12.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hlww.k12.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'issathleticzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingcoathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvcconference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nisquallyathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'npslathletics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nw1a2bathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwbathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwcathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olympicleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacificathletics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pclathletics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbed6049.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scacconference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scarboroughredstorm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seatacleague.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sectionxboces.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spaathletics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spsl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spslathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sscathletics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcroixiaa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tricoathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trivalleyconference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wescoathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wisconsinvalleyconference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1aevergreen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2aevergreen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2agshl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2bcentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.activityscheduler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccacathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralbuckeyeleague.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctlathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cwacathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cwbathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dpsathleticzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecusd4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emeraldsoundconference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ewacathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extra.wissports.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.facilitiesscheduler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frccathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gowada.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greatnorthernconferencewi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenvillecountyathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gshlathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcsdathletics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hf.k12.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hlww.k12.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.issathleticzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingcoathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mvcconference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nisquallyathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.npslathletics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nw1a2bathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nwbathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nwcathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olympicleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pacificathletics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pclathletics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rbed6049.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scacconference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scarboroughredstorm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seatacleague.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sectionxboces.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spaathletics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spsl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spslathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sscathletics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcroixiaa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tricoathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trivalleyconference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wescoathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wisconsinvalleyconference.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189671b582400000403004630440220502ed3351310c0cb83e6b8325d2cf3702173e0d3c5888416eb6a1746afcdabae02201ac7c71c317e505c368e01032cdce1344c0591b9af475b7310147363803a0196007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000189671b5854000004030047304502202a24c807cc57af0101edca17ce8318b1c90bfc26e42f5925d4e04e012ce3f580022100e590ada02f137b91b9e8a88c0fb43981e840c84c84c4b5d71897cdd270f5beb0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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