www.sandiaprep.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d4:f8:e4:65:4d:cf:94:b9:21:86:a0:08:46:56:2e:ce:04 was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sandiaprep.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d4:f8:e4:65:4d:cf:94:b9:21:86:a0:08:46:56:2e:ce:04
Serial Number (int): 333807554023846280946014195242976907546116
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c9:46:81:2e:8c:d4:97:20:63:e8:55:ee:ad:ae:9a:0f:23:35:c0:2c
Fingerprint (sha256): 8d:4b:e9:c4:2e:15:b2:60:ef:61:37:91:c9:38:90:ed:7b:03:42:8d:f0:4b:99:34:2e:1d:20:67:de:ba:9a:a2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.sandiaprep.org

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sandiaprep.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adams.scrsd.org
admin.cusd1.com
admin.cvalternatives.org
admin.dalhartisd.org
admin.ecesd.org
admin.guadalupecenter.org
admin.hidoecentral.org
admin.high.cusd1.com
admin.institutochicago.org
admin.lifelinecharterschool.com
admin.newmiddleton.smithcoedu.com
admin.nshahs.org
admin.stbernardchurchpgh.org
admin.swartzcreek.org
amerman.northvilleschools.org
armstrong.scrsd.org
bancroft.scrsd.org
con.newton-conover.org
cooke.northvilleschools.org
cpa.confluenceacademy.org
cvalternatives.org
dalhartisd.org
dhs.dalhartisd.org
djhs.dalhartisd.org
dsdk12.net
ea.confluenceacademy.org
hidoecentral.org
high.cusd1.com
hillside.northvilleschools.org
kennedy.scrsd.org
les.lexingtonisd.net
lifelinecharterschool.com
mcnichols.scrsd.org
meadsmill.northvilleschools.org
moraine.northvilleschools.org
morris.scrsd.org
newton-conover.org
nhs.northvilleschools.org
nhuman.mx
northeastis.scrsd.org
nuviewusd.org
on.confluenceacademy.org
prescott.scrsd.org
ridgewood.northvilleschools.org
sandiaprep.org
sc.confluenceacademy.org
school.lexnyc.org
scrantonhs.scrsd.org
silversprings.northvilleschools.org
southis.scrsd.org
stbernardchurchpgh.org
sumner.scrsd.org
tec.newton-conover.org
thorntoncreek.northvilleschools.org
tripp.scrsd.org
wesths.scrsd.org
whittier.scrsd.org
willard.scrsd.org
winchester.northvilleschools.org
www.admin.colegiobvg.edu.mx
www.aspireacademystl.org
www.boyslatin.org
www.clioschools.org
www.colegiobvg.edu.mx
www.cusd1.com
www.cvalternatives.org
www.dalhartisd.org
www.dsdk12.net
www.ecesd.com
www.fillmore.k12.ca.us
www.fillmoreusd.org
www.guadalupecenter.org
www.hidoecentral.org
www.hokulani-elementary.com
www.institutochicago.org
www.lchs78.net
www.lexingtonisd.net
www.lifelinecharterschool.com
www.mccomb.k12.ms.us
www.missionbasilicaschool.org
www.montrosechristian.org
www.ndcrhs.org
www.pcycougars.net
www.phacs.org
www.prospecthillacademy.org
www.ps086.com
www.sandiaprep.org
www.stbernardchurchpgh.org
www.stbschool.com
www.stbschool.net
www.swartzcreek.org
www.synergycharteracademy.org
www.synergykineticacademy.org
www.synergyquantumacademy.org
www.theburlingtonschool.org
www.zcisd.org

Other certificates including the domain name sandiaprep.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.sandiaprep.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333807554023846280946014195242976907546116
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-06 20:35:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-06 20:35:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sandiaprep.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2215 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adams.scrsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cusd1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cvalternatives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dalhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ecesd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.guadalupecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hidoecentral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.high.cusd1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.institutochicago.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lifelinecharterschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.newmiddleton.smithcoedu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nshahs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stbernardchurchpgh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.swartzcreek.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amerman.northvilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armstrong.scrsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bancroft.scrsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.newton-conover.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cooke.northvilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpa.confluenceacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvalternatives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dalhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhs.dalhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'djhs.dalhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsdk12.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ea.confluenceacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hidoecentral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'high.cusd1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillside.northvilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kennedy.scrsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'les.lexingtonisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifelinecharterschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcnichols.scrsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meadsmill.northvilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moraine.northvilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morris.scrsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newton-conover.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhs.northvilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhuman.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northeastis.scrsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuviewusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'on.confluenceacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prescott.scrsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ridgewood.northvilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandiaprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sc.confluenceacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.lexnyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrantonhs.scrsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silversprings.northvilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southis.scrsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbernardchurchpgh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumner.scrsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tec.newton-conover.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thorntoncreek.northvilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tripp.scrsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wesths.scrsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whittier.scrsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willard.scrsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winchester.northvilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.admin.colegiobvg.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aspireacademystl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boyslatin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clioschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegiobvg.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cusd1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cvalternatives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dalhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsdk12.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecesd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fillmore.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fillmoreusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guadalupecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hidoecentral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hokulani-elementary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.institutochicago.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lchs78.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lexingtonisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifelinecharterschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mccomb.k12.ms.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missionbasilicaschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.montrosechristian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ndcrhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcycougars.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phacs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prospecthillacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps086.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandiaprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbernardchurchpgh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swartzcreek.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.synergycharteracademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.synergykineticacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.synergyquantumacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theburlingtonschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zcisd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001678572da9000000403004730450220579bbd3852fc3419f6f2e67b066faec440c26934d3893976fc0a1183cab43cf1022100ebe74847d6e4bd17bdae50cfc4479ef1fdfa8d2e19cbe5461399ea7c4811b3d200750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001678572da18000004030046304402202b92df0ca9f424a2d35fdf8ef5dd0b6caf8c782b33963342cebaf2fb2a3179df02203f033175dcba4119a61b84b8627ab636d6b91b6353e47995367036ee8d50367f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009cd2e702a85395d7b19f7d027f44bb29d613e7cb112d42aeeb45f3a9d560de7c480393e338b0aef2f77ccda7210421523268484b0bfbb845243d5b583c5ced2833e4375738bf6dba1a25aae611fcd2d53f83255febfd1a526f4ec5d59d7f3e72956427dda713a4cd6fc143ab3c2d4730cbf27e2cf40bf64cee59947a40eec2079bd63913ca9ac842d49c97791ef7905bf0db58830dd752c605c93ef55e01a363cfd55689cd692265ad59f5645db1a3f3278cbda0ee3759ca59ca58c6e3bf9ce51484914e048ff7a37fb5b56cf305f45a1a72e68a2c44d81252f779734aab239f563292344ff96aeb14924c8b9195947750ce58ba22a9a584ffd1b538aabb655b