admin.ascensionoakpark.com

Issued by R3

About this certificate

This digital certificate with serial number 03:1e:68:db:30:2f:6a:af:86:bf:a0:5b:eb:62:41:32:aa:c3 was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.ascensionoakpark.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1e:68:db:30:2f:6a:af:86:bf:a0:5b:eb:62:41:32:aa:c3
Serial Number (int): 271684706604794946444647672107958480841411
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cb:3a:b7:b1:79:d7:d2:50:56:d0:96:8e:71:dd:ad:bb:5c:27:25:a4
Fingerprint (sha256): 8f:48:bb:2b:8f:d0:da:bb:49:55:b2:0a:73:48:09:42:f4:8e:af:2f:ff:14:c1:85:19:ce:94:26:77:88:92:84

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate admin.ascensionoakpark.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.ascensionoakpark.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.ascensionoakpark.com
admin.bme.zcs.k12.in.us
admin.bridges.fmsd.org
admin.cca.fmsd.org
admin.colegiolospinos.edu.mx
admin.dahl.fmsd.org
admin.eag.zcs.k12.in.us
admin.fmsd.org
admin.franklin.fmsd.org
admin.goldenoakmontessori.org
admin.hellyer.fmsd.org
admin.kennedy.fmsd.org
admin.lairon.fmsd.org
admin.lknc.org
admin.losarboles.fmsd.org
admin.mckinley.fmsd.org
admin.meadows.fmsd.org
admin.mes.mtsd-vt.org
admin.mhs.mtsd-vt.org
admin.mms.mtsd-vt.org
admin.mtsd-vt.org
admin.nstaracademy.org
admin.olmbulldogs.com
admin.olmcath.org
admin.pcschools.org
admin.pve.zcs.k12.in.us
admin.ramblewood.fmsd.org
admin.santee.fmsd.org
admin.school.ascensionoakpark.com
admin.senahigh.com
admin.sge.zcs.k12.in.us
admin.shirakawa.fmsd.org
admin.stonegate.fmsd.org
admin.sylvandale.fmsd.org
admin.tekoacharterschool.org
admin.uni.zcs.k12.in.us
admin.windmillsprings.fmsd.org
admin.zcs.k12.in.us
admin.zhs.zcs.k12.in.us
admin.zms.zcs.k12.in.us
admin.zwm.zcs.k12.in.us
ascensionoakpark.com
bme.zcs.k12.in.us
bridges.fmsd.org
cca.fmsd.org
colegiolospinos.edu.mx
dahl.fmsd.org
eag.zcs.k12.in.us
franklin.fmsd.org
goldenoakmontessori.org
hellyer.fmsd.org
kennedy.fmsd.org
lacpacademy.org
lairon.fmsd.org
lknc.org
losarboles.fmsd.org
mckinley.fmsd.org
meadows.fmsd.org
mes.mtsd-vt.org
mhs.mtsd-vt.org
mms.mtsd-vt.org
mtsd-vt.org
nstaracademy.org
olmbulldogs.com
olmcath.org
pcschools.org
pve.zcs.k12.in.us
ramblewood.fmsd.org
santee.fmsd.org
school.ascensionoakpark.com
sge.zcs.k12.in.us
shirakawa.fmsd.org
stonegate.fmsd.org
sylvandale.fmsd.org
tekoacharterschool.org
uni.zcs.k12.in.us
windmillsprings.fmsd.org
www.ascensionoakpark.com
www.colegiolospinos.edu.mx
www.fmsd.org
www.goldenoakmontessori.org
www.lacpacademy.org
www.lknc.org
www.mtsd-vt.org
www.nstaracademy.org
www.olmbulldogs.com
www.olmcath.org
www.pcschools.org
www.senahigh.com
www.tekoacharterschool.org
www.zcs.k12.in.us
zhs.zcs.k12.in.us
zms.zcs.k12.in.us
zwm.zcs.k12.in.us

Other certificates including the domain name ascensionoakpark.com

(limited to 100 certificates)
ascensionoakpark.com
admin.ascensionoakpark.com
ascensionoakpark.com
ascensionoakpark.com
admin.ascensionoakpark.com
admin.bme.zcs.k12.in.us
ascensionoakpark.com
ascensionoakpark.com
www.lacpacademy.org
ascensionoakpark.com
ascensionoakpark.com
admin.mes.mtsd-vt.org
school.ascensionoakpark.com
admin.ascensionoakpark.com
admin.ascensionoakpark.com
lacpacademy.org
admin.ascensionoakpark.com
school.ascensionoakpark.com
admin.ascensionoakpark.com
ascensionoakpark.com
www.ascensionoakpark.com
www.ascensionoakpark.com
admin.school.ascensionoakpark.com
ascensionoakpark.com
dev601.ascensionoakpark.com
admin.ascensionoakpark.com
ascensionoakpark.com
ascensionoakpark.com
admin.ascensionoakpark.com
school.ascensionoakpark.com
ascensionoakpark.com
admin.ascensionoakpark.com
admin.ascensionoakpark.com
ascensionoakpark.com
ascensionoakpark.com
admin.tekoacharterschool.org
ascensionoakpark.com
ascensionoakpark.com
www.ascensionoakpark.com
school.ascensionoakpark.com

Certificate

The complete raw certificate details for admin.ascensionoakpark.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271684706604794946444647672107958480841411
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-06 10:35:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-07 10:35:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.ascensionoakpark.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2029 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ascensionoakpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bme.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bridges.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cca.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.colegiolospinos.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dahl.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eag.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.franklin.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.goldenoakmontessori.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hellyer.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kennedy.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lairon.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lknc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.losarboles.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mckinley.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.meadows.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mes.mtsd-vt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mhs.mtsd-vt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mms.mtsd-vt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mtsd-vt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nstaracademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.olmbulldogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.olmcath.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pcschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pve.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ramblewood.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.santee.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.school.ascensionoakpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.senahigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sge.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.shirakawa.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stonegate.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sylvandale.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tekoacharterschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.uni.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.windmillsprings.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.zhs.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.zms.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.zwm.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ascensionoakpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bme.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridges.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cca.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colegiolospinos.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dahl.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eag.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franklin.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldenoakmontessori.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellyer.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kennedy.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacpacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lairon.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lknc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losarboles.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mckinley.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meadows.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mes.mtsd-vt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhs.mtsd-vt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.mtsd-vt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtsd-vt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nstaracademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olmbulldogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olmcath.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pve.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramblewood.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santee.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.ascensionoakpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sge.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shirakawa.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stonegate.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sylvandale.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tekoacharterschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uni.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windmillsprings.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ascensionoakpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegiolospinos.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fmsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldenoakmontessori.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lacpacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lknc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtsd-vt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nstaracademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olmbulldogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olmcath.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.senahigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tekoacharterschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhs.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zms.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zwm.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017eced15a8d0000040300483046022100bd2cc5f6d3bd06fb16fb871e29e255710e58690dd2ca0e0a85e8608f8c5d1e560221009137cb59a01b741f0a585a062138747249fc5f32366342f5ce97b3517b3b808a00750046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017eced15abb000004030046304402201a65c939c5c21e42325596677db708941d928e8f630dc18d23809ca03e9fabc302202b74619bdc855c09b1b5cc934d9164aba2905458b2598f62f37ec057270b9e46
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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