1.southampton.k12.nj.us

Issued by R3

About this certificate

This digital certificate with serial number 04:d8:0f:59:69:02:60:a1:1b:5b:97:7f:71:4c:de:33:c5:a2 was issued on by Let's Encrypt.

With 59 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=1.southampton.k12.nj.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d8:0f:59:69:02:60:a1:1b:5b:97:7f:71:4c:de:33:c5:a2
Serial Number (int): 421970537646162248067984205123797986297250
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d1:e6:1a:98:f5:c0:bc:d5:ce:ac:ab:6f:50:72:40:f3:89:3d:25:76
Fingerprint (sha256): 8b:c9:8e:11:0f:f6:c8:5d:8e:7c:68:e7:78:d1:c8:53:59:67:07:0b:39:54:f6:2e:fd:17:4e:6c:29:41:89:1f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate 1.southampton.k12.nj.us

59

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 1.southampton.k12.nj.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1.southampton.k12.nj.us
2.southampton.k12.nj.us
3.southampton.k12.nj.us
admin.1.southampton.k12.nj.us
admin.2.southampton.k12.nj.us
admin.3.southampton.k12.nj.us
admin.avrlacademy.org
admin.benporatyosef.org
admin.campcreek.greenek12.org
admin.colegioedlio.org
admin.doak.greenek12.org
admin.edcenter.greenek12.org
admin.glenwood.greenek12.org
admin.incarnatewordhs.org
admin.jhcommunityschool.org
admin.jonestown.coahomak12.org
admin.lyon.coahomak12.org
admin.mcdonald.greenek12.org
admin.mosheim.greenek12.org
admin.nolachuckey.greenek12.org
admin.ps17queens.com
admin.sghs.greenek12.org
admin.sherard.coahomak12.org
admin.spokanevalleytech.org
admin.thhs.qc.edu
admin.valparaisobfms.valpo.k12.in.us
admin.valparaisoces.valpo.k12.in.us
admin.valparaisofles.valpo.k12.in.us
admin.valparaisohigh.valpo.k12.in.us
admin.valparaisopes.valpo.k12.in.us
admin.valparaisotjms.valpo.k12.in.us
admin.valpo.k12.in.us
admin.wghs.greenek12.org
avrlacademy.org
beaconacademyil.org
benporatyosef.org
campcreek.greenek12.org
ccjshs.coahomak12.org
chuckey.greenek12.org
colegioedlio.org
doak.greenek12.org
edcenter.greenek12.org
grandview.adsb.on.ca
jonestown.coahomak12.org
nolachuckey.greenek12.org
sherard.coahomak12.org
spokanevalleytech.org
thhs.qc.edu
valparaisohes.valpo.k12.in.us
valparaisotjes.valpo.k12.in.us
wghs.greenek12.org
wnymcs.com
www.beaconacademyil.org
www.bousd.us
www.coahomak12.org
www.colegioedlio.org
www.jhcommunityschool.org
www.ps17queens.com
www.spokanevalleytech.org

Other certificates including the domain name southampton.k12.nj.us

(limited to 100 certificates)
admin.ljef.ljsd.org
www.holyfamilycatholicacademy.net
1.southampton.k12.nj.us
admin.avrlacademy.org
benchmarkbobcats.org
1.southampton.k12.nj.us
www.crawfordschools.org
cra.freeholdtwp.k12.nj.us
1.southampton.k12.nj.us
admin.bands.dekalbcentral.net
admin.aes.acsc.net
2.southampton.k12.nj.us
admin.es.lorenaisd.net
1.southampton.k12.nj.us
admin.benchmarkbobcats.org
admin.coahomak12.org
www.southernwakeacademy.org
shs.lskysd.ca
church.faithmarietta.org
admin.ersk.acsc.net
grandview.adsb.on.ca
www.cristoreysanjose.org
admin.acsc.net
admin.bands.dekalbcentral.net
admin.chuckey.greenek12.org
2.southampton.k12.nj.us
1.southampton.k12.nj.us
debusk.greenek12.org
admin.ps17queens.com
admin.ups.lskysd.ca
harpethhighccs.net
coahomak12.org
www.rosemont78.org
admin.acsc.net
1.southampton.k12.nj.us
www.mstmaatroosevelt.org
www.ps17queens.com
webmail.sjtp.net
www.ckchicago.org
2.southampton.k12.nj.us
webmail.agtech.us.com
westcheathamccs.net
admin.colegioedlio.org
1.southampton.k12.nj.us
1.southampton.k12.nj.us
admin.benchmarkbobcats.org
vdi.southampton.k12.nj.us
admin.avrlacademy.org
oglesby.cps.edu
ckcs.lskysd.ca
faithmarietta.org
2.southampton.k12.nj.us
sunnybraemiddleschool.org
1.southampton.k12.nj.us
1.southampton.k12.nj.us
admin.rosemont78.org
www.swake.org
ups.lskysd.ca
webmail.sjtp.net
1.southampton.k12.nj.us
www.cardinalritterprep.net
admin.elportal.ljsd.org
www.cardinalritterprep.org
vdi.southampton.k12.nj.us

Certificate

The complete raw certificate details for 1.southampton.k12.nj.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQbTHb+2z7
rfYVCl+ph5m8FJJOEgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5pV3R4RBg
n18RTHnTD9fS27JxyeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGrmQF3Z/h2
e6StagubO+pVwFzG8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK7wAhJO8e
l2z375LDd2VIwrdWQP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlWZ1AdjOKf
RiY0ckFuu/DYkuvkNKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5Tu7zbek/
MR/JMR9nceWyZ2Mund+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzwWzBvTD8F
7q6ckUbIgpeo7stn7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuaivjW/P+Tm
64XjXNjP9F1W8+5tlcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ4Iudx/o3
Q4E2w6Aud9PYyV05pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/h0omUmCI
DiQVG30eHhb3OIP3bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUnohkUi6ik
D4me6o58sq/IQVmyem1M/E0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 421970537646162248067984205123797986297250
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-06 09:36:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-05 09:36:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1.southampton.k12.nj.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1544 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1.southampton.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2.southampton.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3.southampton.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.1.southampton.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.2.southampton.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.3.southampton.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.avrlacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.benporatyosef.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.campcreek.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.colegioedlio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.doak.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.edcenter.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.glenwood.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.incarnatewordhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jhcommunityschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jonestown.coahomak12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lyon.coahomak12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mcdonald.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mosheim.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nolachuckey.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ps17queens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sghs.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sherard.coahomak12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.spokanevalleytech.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.thhs.qc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.valparaisobfms.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.valparaisoces.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.valparaisofles.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.valparaisohigh.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.valparaisopes.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.valparaisotjms.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wghs.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avrlacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beaconacademyil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benporatyosef.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campcreek.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccjshs.coahomak12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chuckey.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colegioedlio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doak.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edcenter.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandview.adsb.on.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jonestown.coahomak12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nolachuckey.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sherard.coahomak12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spokanevalleytech.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thhs.qc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valparaisohes.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valparaisotjes.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wghs.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wnymcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beaconacademyil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bousd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coahomak12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegioedlio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhcommunityschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps17queens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spokanevalleytech.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c200000178a6c17b9b00000403004730450220099a08978d75fefa15be08863d8b3efde7852d6466050eb7bff905e2fd942272022100a2c3b659d13daffbd68a1b79cbb42f3b6f0c8eb0cdc4e303986227fd73d97c1a0076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000178a6c17bcd0000040300473045022028e13320a9666bf287fb7e7c4d7be0656e64ede74826152b6eb0298ca9f78296022100bcb470e890c4bdb5bc91b8fc189f2d224735806eb1570cf9a7016fa62b9e2172
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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