sphsgoldeneagles.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5c:7c:57:21:b7:9a:47:cb:be:51:94:46:4f:1a:42:51:f7 was issued on by Let's Encrypt.

With 80 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sphsgoldeneagles.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5c:7c:57:21:b7:9a:47:cb:be:51:94:46:4f:1a:42:51:f7
Serial Number (int): 292808112237177118824758249966370897940983
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4b:a9:98:97:f4:b7:23:a0:b1:b1:74:4d:15:e7:be:76:5c:50:73:2e
Fingerprint (sha256): 8e:ce:52:60:42:24:73:c9:60:d6:6a:87:84:b9:fa:86:89:8d:a2:72:35:98:44:e6:49:fd:07:35:48:d5:26:3b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sphsgoldeneagles.org

80

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sphsgoldeneagles.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.bhs.burkburnettisd.org
admin.bitely.garvey.k12.ca.us
admin.bms.burkburnettisd.org
admin.boydisd.net
admin.carlton.unionsd.org
admin.cbs.windhamps.org
admin.chaforward.org
admin.cheneysd.org
admin.darbyelementary.org
admin.dewey.garvey.k12.ca.us
admin.ecc.windhamps.org
admin.ees.burkburnettisd.org
admin.emerson.garvey.k12.ca.us
admin.es.boydisd.net
admin.es.fsd2.org
admin.garveyint.garvey.k12.ca.us
admin.hes.burkburnettisd.org
admin.hillcrest.garvey.k12.ca.us
admin.hs.boydisd.net
admin.is.boydisd.net
admin.ms.boydisd.net
admin.mvista.garvey.k12.ca.us
admin.nat.windhamps.org
admin.newlhs.com
admin.nws.windhamps.org
admin.ola.school
admin.pv.sd44.org
admin.rmckenna.org
admin.sphsgoldeneagles.org
admin.swe.windhamps.org
admin.tes.burkburnettisd.org
admin.wcs.windhamps.org
admin.wh.sd44.org
admin.whs.windhamps.org
admin.wms.windhamps.org
arete.prsd.us
bitely.garvey.k12.ca.us
cbs.windham.k12.ct.us
cbs.windhamps.org
chaforward.org
darbyelementary.org
dewey.garvey.k12.ca.us
ecc.windham.k12.ct.us
ecc.windhamps.org
emerson.garvey.k12.ca.us
es.boydisd.net
es.fsd2.org
garveyint.garvey.k12.ca.us
hillcrest.garvey.k12.ca.us
hpems.flo2.k12.sc.us
hs.boydisd.net
is.boydisd.net
ms.boydisd.net
ms.fsd2.org
nat.windham.k12.ct.us
nat.windhamps.org
newlhs.com
north.legacyprep.org
nws.windham.k12.ct.us
nws.windhamps.org
ola.school
sphsgoldeneagles.org
swe.windham.k12.ct.us
swe.windhamps.org
wcs.windham.k12.ct.us
wcs.windhamps.org
wh.sd44.org
whs.windham.k12.ct.us
whs.windhamps.org
wms.windham.k12.ct.us
wms.windhamps.org
www.boydisd.net
www.chaforward.org
www.cheneysd.org
www.darbyelementary.org
www.hpems.flo2.k12.sc.us
www.newlhs.com
www.ola.school
www.sphsgoldeneagles.org
www.windham.k12.ct.us

Other certificates including the domain name sphsgoldeneagles.org

(limited to 100 certificates)
admin.acsc.net
admin.acsc.net
academywest.hamadyhawks.net
www.maywoodacademy.org
admin.betz.cheneysd.org
www.windham.k12.ct.us
admin.aileencolburn.school
sphsgoldeneagles.org
pmes.pennsmanor.org
admin.acsc.net
www.sphsgoldeneagles.org
admin.mes.mcduffie.k12.ga.us
admin.mvista.garvey.k12.ca.us
admin.altavista.unionsd.org
admin.acsc.net
admin.aileencolburn.school
admin.aileencolburn.school
admin.aileencolburn.school
north.legacyprep.org
sphsgoldeneagles.org
admin.acsc.net
sphsgoldeneagles.org
admin.acsc.net
admin.bhs.burkburnettisd.org
admin.aileencolburn.school
admin.ec.sd44.org
arete.prsd.us
es-admin.markham.edu.pe
sphsgoldeneagles.org
sphsgoldeneagles.org
admin.bf.sd44.org
admin.bf.sd44.org
admin.acsc.net
highschool.snyderisd.net
admin.aileencolburn.school
admin.acsc.net
admin.benholtschool.org
www.markham.edu.pe
admin.aileencolburn.school
6gc.sangerisd.net
www.triviumcharter.org
juniper.durangoschools.org
admin.altavista.unionsd.org
admin.acsc.net
admin.acsc.net
ps40.jcboe.org
ec.sd44.org
admin.betz.cheneysd.org
admin.aileencolburn.school
admin.aileencolburn.school
sphsgoldeneagles.org
admin.boydisd.net
es.markham.edu.pe
admin.betz.cheneysd.org
sphsgoldeneagles.org

Certificate

The complete raw certificate details for sphsgoldeneagles.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292808112237177118824758249966370897940983
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-09 11:11:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-07 11:11:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sphsgoldeneagles.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1789 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bhs.burkburnettisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bitely.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bms.burkburnettisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.boydisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.carlton.unionsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cbs.windhamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.chaforward.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cheneysd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.darbyelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dewey.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ecc.windhamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ees.burkburnettisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.emerson.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.es.boydisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.es.fsd2.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.garveyint.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hes.burkburnettisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hillcrest.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hs.boydisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.is.boydisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ms.boydisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mvista.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nat.windhamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.newlhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nws.windhamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ola.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pv.sd44.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rmckenna.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sphsgoldeneagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.swe.windhamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tes.burkburnettisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wcs.windhamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wh.sd44.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.whs.windhamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wms.windhamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arete.prsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitely.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbs.windham.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbs.windhamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chaforward.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darbyelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dewey.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecc.windham.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecc.windhamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emerson.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.boydisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.fsd2.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garveyint.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillcrest.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpems.flo2.k12.sc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.boydisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is.boydisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.boydisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.fsd2.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nat.windham.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nat.windhamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newlhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'north.legacyprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nws.windham.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nws.windhamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ola.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sphsgoldeneagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swe.windham.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swe.windhamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcs.windham.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcs.windhamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wh.sd44.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whs.windham.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whs.windhamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wms.windham.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wms.windhamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boydisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chaforward.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheneysd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.darbyelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hpems.flo2.k12.sc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newlhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ola.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sphsgoldeneagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.windham.k12.ct.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169625d22b1000004030047304502204c51bc89077c8a2ec4443927fc45f9c551e2512b32ff89cf505a908eef4c3407022100bbcacfdf1335cb1d7b8799fc126825c13a0322c62985938cdf39269ec74fd8d2007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169625d250a00000403004830460221008c9b13fc92dc762229269e968dac24d1fe55c1ccd78ef80ffa8e0a17b0e98bcc022100ae1a47d0091a5488248f8a29e15fc55b88a2780b9fd23be97ace278981600fb2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0070ff4d334979bfbe4d437466528e53010958433f42cf2d2e12854dded803bf74d009c055f9e83aa8eb77982605589a39025b848aff3cd0f1e2133c26395bffd2a8164c79bffef0e0adabc7906d1a3ab0b54430f3da17b2a1487a4fe90a136b2a86e0c12925e3068282363dbce7b60e3a02bf405139c6bc8bbe47fffcc1aecc8b55bf7e183891673a1dcc9ad22987f6ddabaf47404678cf7784e951f6b384ff641adf5e6b8d1ff41c4be4308c185afc549b0f3bfa040355d1a6dd5b7b3cfcbe9090917f8925aeca54133689fd7549593e19c89a9bffcded941277fb0d66d1cf426f6a6062a64ef521072640c536dbed7fcb69b7e43371fee7dab7570812c2f682