admin.ajshs.asd.k12.pa.us

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:e6:f6:58:5a:d7:26:f3:79:97:c9:86:5e:f1:cc:eb:16:ba was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.ajshs.asd.k12.pa.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e6:f6:58:5a:d7:26:f3:79:97:c9:86:5e:f1:cc:eb:16:ba
Serial Number (int): 427041536970406447595408277326107167626938
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4f:f4:02:07:de:bb:45:78:03:23:cd:c8:87:71:9f:f7:32:ab:c8:99
Fingerprint (sha256): 89:e2:aa:d7:9c:5a:c3:ae:eb:ec:41:14:f1:3c:fa:c7:ef:56:2e:77:98:a0:e0:44:e9:2e:15:38:9d:ee:ba:bb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate admin.ajshs.asd.k12.pa.us

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.ajshs.asd.k12.pa.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.ajshs.asd.k12.pa.us
admin.apluscharterschools.org
admin.beethoven-elementary.vanguardacademy.education
admin.bfcsd.org
admin.bgisd.org
admin.brocktonelementary.org
admin.brookwoodhighschool.net
admin.catsdr.com
admin.cfh.edu.mx
admin.colegiociodemexico.edu.mx
admin.colegiosenda.edu.mx
admin.cypsd.org
admin.delevandriveelementary.org
admin.des.asd.k12.pa.us
admin.ees.asd.k12.pa.us
admin.goldenvalley.kernhigh.org
admin.gorhamschools.org
admin.hudson.ucboe.us
admin.inspireschools.org
admin.les.asd.k12.pa.us
admin.magnoliapandas.net
admin.mozart-elementary.vanguardacademy.education
admin.noscihigh.org
admin.olaclaremont.org
admin.rlcs-slc.org
admin.sd44.org
admin.seventhstreetelementary.org
admin.somervilleisd.org
admin.svs.asd.k12.pa.us
admin.unionbigpicture.org
admin.wis.asd.k12.pa.us
admin.wps.asd.k12.pa.us
admin.wshs.asd.k12.pa.us
ajshs.asd.k12.pa.us
apluscharterschools.org
brocktonelementary.org
brookwoodhighschool.net
brookwoodhs.com
colegiociodemexico.edu.mx
delevandriveelementary.org
des.asd.k12.pa.us
dymallyhs.org
ees.asd.k12.pa.us
hopecharteracademy.org
hudson.ucboe.us
hudson.union-city.k12.nj.us
inspireacademy.net
inspirecharteracademy.net
inspirecharterschools.net
inspirecharterschools.org
inspireschools.net
inspireschools.org
les.asd.k12.pa.us
magnoliapanda.net
magnoliapandas.net
mentalhealth.lexnyc.org
mozart-elementary.vanguardacademy.education
mozart-secondary.vanguardacademy.education
noscihigh.org
public.rlcs-slc.org
rlcs-slc.org
school.rlcs-slc.org
seventhstreetelementary.org
svs.asd.k12.pa.us
wis.asd.k12.pa.us
wps.asd.k12.pa.us
wshs.asd.k12.pa.us
www.apluscharterschools.org
www.bfcsd.org
www.bgisd.org
www.brocktonelementary.org
www.brookwoodhighschool.net
www.brookwoodhs.com
www.catsdr.com
www.colegiociodemexico.edu.mx
www.colegiosenda.edu.mx
www.cypsd.k12.ca.us
www.cypsd.org
www.delevandriveelementary.org
www.dymallyhs.org
www.gorhamschools.org
www.holynamesf.com
www.hopecharteracademy.org
www.inspireacademy.net
www.inspirecharteracademy.net
www.inspirecharterschools.net
www.inspirecharterschools.org
www.inspireschools.net
www.inspireschools.org
www.magnoliapandas.net
www.noscihigh.org
www.rlcs-slc.org
www.rosner.edu.mx
www.sd44.org
www.seventhstreetelementary.org
www.somervilleisd.org
www.unionbigpicture.org
www.vanalstyneisd.org

Other certificates including the domain name asd.k12.pa.us

(limited to 100 certificates)
admin.beethoven-elementary.vanguardacademy.education
www.holynamesf.com
*.asd.k12.pa.us
asd.k12.pa.us
admin.espanol.tecsalvord.org
www.asd.k12.pa.us
abilene.texasleadership.net
*.asd.k12.pa.us
*.asd.k12.pa.us
abilene.texasleadership.net
hs.somervilleisd.org
ees.elkincityschools.org
admin.es.somervilleisd.org
admin.ajshs.asd.k12.pa.us
abs.lockhartisd.org
abilene.texasleadership.net
abilene.texasleadership.net
delevandriveelementary.org
abilene.texasleadership.net
admin.highschool.bfcsd.org
admin.ajshs.asd.k12.pa.us
asd.k12.pa.us
admin.ajshs.asd.k12.pa.us
*.asd.k12.pa.us
admin.ajshs.asd.k12.pa.us
admin.ajshs.asd.k12.pa.us
admin.stedmundprep.org
asd.k12.pa.us
www.asd.k12.pa.us
fams.franklinlakes.k12.nj.us
asd.k12.pa.us
mail.asd.k12.pa.us
hmr.franklinlakes.k12.nj.us
web1.asd.k12.pa.us
abilene.texasleadership.net
admin.ajshs.asd.k12.pa.us
abilene.texasleadership.net
admin.ajshs.asd.k12.pa.us
admin.eagles.lucernevalleyunified.org
admin.rembrandt-secondary.vanguardacademy.education
admin.somonauk.net
admin.ajshs.asd.k12.pa.us
ees.elkincityschools.org
www.asd.k12.pa.us
admin.clarabartonhs.org
admin.ajshs.asd.k12.pa.us
admin.ajshs.asd.k12.pa.us
givetokids.csisd.org
admin.ajshs.asd.k12.pa.us
admin.mozart-secondary.vanguardacademy.education
beethoven-elementary.vanguardacademy.education
mail.asd.k12.pa.us
admin.mozart-secondary.vanguardacademy.education
abilene.texasleadership.net
admin.cbs.windhamps.org
admin.ajshs.asd.k12.pa.us
asd.k12.pa.us
web1.asd.k12.pa.us
texasleadership.net
bfcsd.org
wps.asd.k12.pa.us
admin.ajshs.asd.k12.pa.us
admin.olaclaremont.org
www.lsusfw.org
asd.k12.pa.us
web1.asd.k12.pa.us
admin.ajshs.asd.k12.pa.us
admin.ajshs.asd.k12.pa.us
abilene.texasleadership.net
admin.ajshs.asd.k12.pa.us
*.asd.k12.pa.us
admin.ajshs.asd.k12.pa.us
admin.ehs.elkincityschools.org
asd.k12.pa.us
www.bigpicture.org
admin.ajshs.asd.k12.pa.us
bhswca.com
admin.ajshs.asd.k12.pa.us
abilene.texasleadership.net
admin.ajshs.asd.k12.pa.us
skyward.asd.k12.pa.us
admin.dimensions.org
admin.northsidecatholic.org
asd.k12.pa.us
wshs.asd.k12.pa.us
admin.lucernevalleyunified.org
abilene.texasleadership.net
abilene.texasleadership.net
admin.ajshs.asd.k12.pa.us
calaps.org
admin.ajshs.asd.k12.pa.us
abilene.texasleadership.net
abilene.texasleadership.net
admin.ajshs.asd.k12.pa.us
asd.k12.pa.us
mentalhealth.lexnyc.org
admin.elementaryschool.bfcsd.org
abilene.texasleadership.net
*.asd.k12.pa.us
abilene.texasleadership.net

Certificate

The complete raw certificate details for admin.ajshs.asd.k12.pa.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 427041536970406447595408277326107167626938
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-11 03:06:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-09 03:06:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.ajshs.asd.k12.pa.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2396 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ajshs.asd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.apluscharterschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.beethoven-elementary.vanguardacademy.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bfcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bgisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.brocktonelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.brookwoodhighschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.catsdr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cfh.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.colegiociodemexico.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.colegiosenda.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cypsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.delevandriveelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.des.asd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ees.asd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.goldenvalley.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gorhamschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hudson.ucboe.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.inspireschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.les.asd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.magnoliapandas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mozart-elementary.vanguardacademy.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.noscihigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.olaclaremont.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rlcs-slc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sd44.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.seventhstreetelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.somervilleisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.svs.asd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.unionbigpicture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wis.asd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wps.asd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wshs.asd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajshs.asd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apluscharterschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brocktonelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brookwoodhighschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brookwoodhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colegiociodemexico.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delevandriveelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'des.asd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dymallyhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ees.asd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hopecharteracademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hudson.ucboe.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hudson.union-city.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspireacademy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspirecharteracademy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspirecharterschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspirecharterschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspireschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspireschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'les.asd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnoliapanda.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnoliapandas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mentalhealth.lexnyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mozart-elementary.vanguardacademy.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mozart-secondary.vanguardacademy.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noscihigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public.rlcs-slc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rlcs-slc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.rlcs-slc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seventhstreetelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svs.asd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wis.asd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wps.asd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wshs.asd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apluscharterschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bfcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bgisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brocktonelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brookwoodhighschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brookwoodhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catsdr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegiociodemexico.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegiosenda.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cypsd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cypsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.delevandriveelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dymallyhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gorhamschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holynamesf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hopecharteracademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inspireacademy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inspirecharteracademy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inspirecharterschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inspirecharterschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inspireschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inspireschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magnoliapandas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.noscihigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rlcs-slc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosner.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sd44.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seventhstreetelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.somervilleisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unionbigpicture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vanalstyneisd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001634d60a50a00000403004630440220201609a753578b5645f7055db501d8f92ffaf5cf8ba894d0429451c17bfea36702202f1698489c6bafdefbf24312aa2c2b430c582687b0f55abe23a694d95f876301007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001634d60a5c50000040300473045022100f905583e3bf702d3c73f756f1db67f992a7fe0c8c19091ae9219d8b830a6fdeb02204ea2f28d1a491fc7e2a7220ef023e79a081259b96c90ac27931d14eafd6e5102
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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