sgmission.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e1:43:01:19:c0:00:59:01:fa:52:e7:2d:90:92:47:59:d3 was issued on by Let's Encrypt.

With 71 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sgmission.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e1:43:01:19:c0:00:59:01:fa:52:e7:2d:90:92:47:59:d3
Serial Number (int): 337989454342778497015211654196745931807187
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 41:59:f8:e0:9d:d9:1d:7c:76:32:63:5e:09:f7:ab:19:08:64:47:b4
Fingerprint (sha256): 8f:5d:65:17:f2:cc:93:6e:a5:7b:31:68:37:09:ad:cd:f8:89:87:41:bf:3c:85:a0:73:59:be:7a:2e:e3:1f:22

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sgmission.org

71

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sgmission.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.bces.davidson.k12.nc.us
admin.cdhs.davidson.k12.nc.us
admin.ces.davidson.k12.nc.us
admin.des.davidson.k12.nc.us
admin.dtes.davidson.k12.nc.us
admin.echs.davidson.k12.nc.us
admin.edhs.davidson.k12.nc.us
admin.fbe.davidson.k12.nc.us
admin.fges.davidson.k12.nc.us
admin.hes.davidson.k12.nc.us
admin.lhs.davidson.k12.nc.us
admin.lms.davidson.k12.nc.us
admin.mes.davidson.k12.nc.us
admin.ndhs.davidson.k12.nc.us
admin.nes.davidson.k12.nc.us
admin.nms.davidson.k12.nc.us
admin.oghs.davidson.k12.nc.us
admin.ogms.davidson.k12.nc.us
admin.pes.davidson.k12.nc.us
admin.rallsisd.org
admin.sgmission.org
admin.stmaryschoolwayne.org
admin.thesae.k12.ca.us
admin.tphs.monroe.k12.tn.us
admin.ves.monroe.k12.tn.us
admin.wal.davidson.k12.nc.us
bces.davidson.k12.nc.us
bms.davidson.k12.nc.us
cdhs.davidson.k12.nc.us
ces.davidson.k12.nc.us
che.lifeschools.net
cms.davidson.k12.nc.us
dnn.portervilleschools.org
hartorah.org
hs.cumberlandacademy.com
itchome.lpisd.org
le.lifeschools.net
lhs.lifeschools.net
lifeschools.net
lphome.lpisd.org
mce.lifeschools.net
rallsisd.org
roe.lifeschools.net
ros.lifeschools.net
rosebudacademy.com
sgmission.org
stmaryschoolwayne.org
thesae.k12.ca.us
www.advantageacademy.org
www.advantageisd.com
www.advantageisd.net
www.advantageisd.org
www.arrowacademy.com
www.gesd32.org
www.lazbuddieisd.org
www.lifeschools.net
www.lpisd.org
www.mcgill-toolen.org
www.mcisd.net
www.nyos.org
www.portervilleschools.org
www.rallsisd.org
www.saisd.us
www.sgmission.org
www.stcathmont.org
www.stmaryschoolwayne.org
www.thesae.k12.ca.us
www.thesae.org
www.towandasd.org
www.tsd.k12.pa.us
www.wswaldorf.org

Other certificates including the domain name sgmission.org

(limited to 100 certificates)
admin.adultlearning.sunrisesd.ca
lumberton.k12.tx.us
admin.lms.davidson.k12.nc.us
admin.aristoiclassical.org
admin.aristoiclassical.org
sgmission.org
res.rsu14.org
admin.escalonhigh.org
academy.ndasla.org
admin.nms.davidson.k12.nc.us
admin.escalonhigh.org
admin.bms.davidson.k12.nc.us
eastprimary.kiskiarea.org
escalonhigh.org
lifeschools.net
admin.fges.davidson.k12.nc.us
admin.bces.davidson.k12.nc.us
admin.e3civichigh.com
sgmission.org
mas.mpusd.net
admin.e3civichigh.com
admin.e3civichigh.com
admin.adultlearning.sunrisesd.ca
admin.aristoiclassical.org
admin.e3civichigh.com
lec.lumberton.k12.tx.us
www.lasallesancristobal.edu.mx
sgmission.org
admin.escalonhigh.org
admin.aristoiclassical.org
hy.hpisd.org
admin.escalonhigh.org
admin.e3civichigh.com
admin.dmc.lockhartisd.org
www.lumberton.k12.tx.us
kohalahs.org
sgmission.org
www.santafecolegio.edu.mx
sgmission.org
rosebudacademy.com
admin.dmc.lockhartisd.org
hartorah.org
ads.gesd32.org
admin.oghs.davidson.k12.nc.us
es.glendaleacademy.org
admin.nes.davidson.k12.nc.us
admin.aristoiclassical.org
es.unitedsd.net
admin.mas.mpusd.net
komarek94.org
admin.e3civichigh.com
admin.nes.davidson.k12.nc.us
admin.ves.monroe.k12.tn.us
admin.aristoiclassical.org
hs.cumberlandacademy.com
admin.elementary.ndasla.org
admin.lhs.davidson.k12.nc.us
www.escalonhigh.org
admin.wal.davidson.k12.nc.us
admin.bces.davidson.k12.nc.us
advantageisd.org
admin.hs.hpisd.org
admin.e3civichigh.com
admin.aristoiclassical.org
admin.hs.unitedsd.net
es.glendaleacademy.org
highschool.kiskiarea.org
admin.colonies.sunrisesd.ca

Certificate

The complete raw certificate details for sgmission.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIM2DCCC8CgAwIBAgISA+FDARnAAFkB+lLnLZCSR1nTMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMjkwOTQ0MDlaFw0x
OTA2MjcwOTQ0MDlaMBgxFjAUBgNVBAMTDXNnbWlzc2lvbi5vcmcwggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQCtrIXp7mbejFBtMdv7bPut9hUKX6mHmbwU
kk4SAS2wWeHzgwVeEiXu4Q62pKUwqxHbZ3Nw0C0rUbmlXdHhEGCfXxFMedMP19Lb
snHJ7J+Vd91RftXDhoavIx/wwT5kaGhpA/RdgHdcMauZAXdn+HZ7pK1qC5s76lXA
XMbxUMB2dqGxStseulJ5+JrOLKGF4+QvfNCD86ZpCQrvACEk7x6XbPfvksN3ZUjC
t1ZA/YmNXz3Zh360hk6cCTaPIOW/cxhcpcaKUHKtCVZnUB2M4p9GJjRyQW678NiS
6+Q0qbZ/fNRq/DeyUK6NlYeQgdk2lo23F+yuki1QirlO7vNt6T8xH8kxH2dx5bJn
Yy6d35JuB8t/3rA+FUFquuynUc1H4iSjK2vk8w1EHPBbMG9MPwXurpyRRsiCl6ju
y2ftvQg1c9iA1PvMVf9Q0JxaP5pon4q7wwpXgQQS5qK+Nb8/5ObrheNc2M/0XVbz
7m2VwmAmEZTITKUJS0BGqE+iNTNCeuHWJRIxE0jaWIngi53H+jdDgTbDoC5309jJ
XTmkWAx1Itg1EZBPJBFJpJtDceZ9mL+lCMXJSiGIDv+HSiZSYIgOJBUbfR4eFvc4
g/dsmKxdkrioSuflkOYp1SA0LcZL7LCtMAFiPQ34RSeiGRSLqKQPiZ7qjnyyr8hB
WbJ6bUz8TQIDAQABo4II6DCCCOQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQva8hN
bCwuMvIAIP8tTWxa/G66uzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js
oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14
My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMIIGnQYDVR0RBIIGlDCCBpCCHWFkbWluLmJjZXMu
ZGF2aWRzb24uazEyLm5jLnVzgh1hZG1pbi5jZGhzLmRhdmlkc29uLmsxMi5uYy51
c4IcYWRtaW4uY2VzLmRhdmlkc29uLmsxMi5uYy51c4IcYWRtaW4uZGVzLmRhdmlk
c29uLmsxMi5uYy51c4IdYWRtaW4uZHRlcy5kYXZpZHNvbi5rMTIubmMudXOCHWFk
bWluLmVjaHMuZGF2aWRzb24uazEyLm5jLnVzgh1hZG1pbi5lZGhzLmRhdmlkc29u
LmsxMi5uYy51c4IcYWRtaW4uZmJlLmRhdmlkc29uLmsxMi5uYy51c4IdYWRtaW4u
Zmdlcy5kYXZpZHNvbi5rMTIubmMudXOCHGFkbWluLmhlcy5kYXZpZHNvbi5rMTIu
bmMudXOCHGFkbWluLmxocy5kYXZpZHNvbi5rMTIubmMudXOCHGFkbWluLmxtcy5k
YXZpZHNvbi5rMTIubmMudXOCHGFkbWluLm1lcy5kYXZpZHNvbi5rMTIubmMudXOC
HWFkbWluLm5kaHMuZGF2aWRzb24uazEyLm5jLnVzghxhZG1pbi5uZXMuZGF2aWRz
b24uazEyLm5jLnVzghxhZG1pbi5ubXMuZGF2aWRzb24uazEyLm5jLnVzgh1hZG1p
bi5vZ2hzLmRhdmlkc29uLmsxMi5uYy51c4IdYWRtaW4ub2dtcy5kYXZpZHNvbi5r
MTIubmMudXOCHGFkbWluLnBlcy5kYXZpZHNvbi5rMTIubmMudXOCEmFkbWluLnJh
bGxzaXNkLm9yZ4ITYWRtaW4uc2dtaXNzaW9uLm9yZ4IbYWRtaW4uc3RtYXJ5c2No
b29sd2F5bmUub3JnghZhZG1pbi50aGVzYWUuazEyLmNhLnVzghthZG1pbi50cGhz
Lm1vbnJvZS5rMTIudG4udXOCGmFkbWluLnZlcy5tb25yb2UuazEyLnRuLnVzghxh
ZG1pbi53YWwuZGF2aWRzb24uazEyLm5jLnVzghdiY2VzLmRhdmlkc29uLmsxMi5u
Yy51c4IWYm1zLmRhdmlkc29uLmsxMi5uYy51c4IXY2Rocy5kYXZpZHNvbi5rMTIu
bmMudXOCFmNlcy5kYXZpZHNvbi5rMTIubmMudXOCE2NoZS5saWZlc2Nob29scy5u
ZXSCFmNtcy5kYXZpZHNvbi5rMTIubmMudXOCGmRubi5wb3J0ZXJ2aWxsZXNjaG9v
bHMub3JnggxoYXJ0b3JhaC5vcmeCGGhzLmN1bWJlcmxhbmRhY2FkZW15LmNvbYIR
aXRjaG9tZS5scGlzZC5vcmeCEmxlLmxpZmVzY2hvb2xzLm5ldIITbGhzLmxpZmVz
Y2hvb2xzLm5ldIIPbGlmZXNjaG9vbHMubmV0ghBscGhvbWUubHBpc2Qub3JnghNt
Y2UubGlmZXNjaG9vbHMubmV0ggxyYWxsc2lzZC5vcmeCE3JvZS5saWZlc2Nob29s
cy5uZXSCE3Jvcy5saWZlc2Nob29scy5uZXSCEnJvc2VidWRhY2FkZW15LmNvbYIN
c2dtaXNzaW9uLm9yZ4IVc3RtYXJ5c2Nob29sd2F5bmUub3JnghB0aGVzYWUuazEy
LmNhLnVzghh3d3cuYWR2YW50YWdlYWNhZGVteS5vcmeCFHd3dy5hZHZhbnRhZ2Vp
c2QuY29tghR3d3cuYWR2YW50YWdlaXNkLm5ldIIUd3d3LmFkdmFudGFnZWlzZC5v
cmeCFHd3dy5hcnJvd2FjYWRlbXkuY29tgg53d3cuZ2VzZDMyLm9yZ4IUd3d3Lmxh
emJ1ZGRpZWlzZC5vcmeCE3d3dy5saWZlc2Nob29scy5uZXSCDXd3dy5scGlzZC5v
cmeCFXd3dy5tY2dpbGwtdG9vbGVuLm9yZ4INd3d3Lm1jaXNkLm5ldIIMd3d3Lm55
b3Mub3Jnghp3d3cucG9ydGVydmlsbGVzY2hvb2xzLm9yZ4IQd3d3LnJhbGxzaXNk
Lm9yZ4IMd3d3LnNhaXNkLnVzghF3d3cuc2dtaXNzaW9uLm9yZ4ISd3d3LnN0Y2F0
aG1vbnQub3Jnghl3d3cuc3RtYXJ5c2Nob29sd2F5bmUub3JnghR3d3cudGhlc2Fl
LmsxMi5jYS51c4IOd3d3LnRoZXNhZS5vcmeCEXd3dy50b3dhbmRhc2Qub3JnghF3
d3cudHNkLmsxMi5wYS51c4IRd3d3Lndzd2FsZG9yZi5vcmcwTAYDVR0gBEUwQzAI
BgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nw
cy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgB0ftqD
Ma0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWnJDMCmAAAEAwBHMEUCIDTV
1wUpQA1FfuY1ihMVlin9KGxVfE6CYJ0rlS3UUCi3AiEAhKjQiGIscmT60B7pWpd5
Q4F4OAeHo32Lx02ht7xujNEAdQApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTl
RUf0eAAAAWnJDL8kAAAEAwBGMEQCIHFk5CBneemGdYo1vnOsa1SF/Gm4cscLRpbT
1eWRFpqOAiBMTbDk1kmt0/u+A7Vpsh8CYaU4xzi6bRe9KznWBFZD5DANBgkqhkiG
9w0BAQsFAAOCAQEAMgiYrygUDdL0O9mv3rOuZjnthlFnnCoxfONowf/EzMDjzCVA
G9Zd9cDrGZ9jNuUiPoqRnomC0yrV7i31iiZJhEI6ymG7XtN5q3RtiD58PxhACiZC
d0fY8bzyOz0qKi/cEfRkkxiUT2njKKTatiJBQZGFS91AnRL0wRmbLviUFtd3fKTl
Jq22vQPdeGlyIsJAnQG5P7NGPWjzQcE2IkSDh+y72QN+rVnsJjxGlfBFTc6KFX5D
q4UNJ6UzWMCXkra5m/dbKgmlwrNGXveJk8W0hGkIICQl7TYzIS7OlG0Nc30w7TVh
pz3O1SnPFvl+5xWqn1GbFjJ6q2nESB1mQiPVXQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQbTHb+2z7
rfYVCl+ph5m8FJJOEgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5pV3R4RBg
n18RTHnTD9fS27JxyeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGrmQF3Z/h2
e6StagubO+pVwFzG8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK7wAhJO8e
l2z375LDd2VIwrdWQP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlWZ1AdjOKf
RiY0ckFuu/DYkuvkNKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5Tu7zbek/
MR/JMR9nceWyZ2Mund+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzwWzBvTD8F
7q6ckUbIgpeo7stn7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuaivjW/P+Tm
64XjXNjP9F1W8+5tlcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ4Iudx/o3
Q4E2w6Aud9PYyV05pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/h0omUmCI
DiQVG30eHhb3OIP3bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUnohkUi6ik
D4me6o58sq/IQVmyem1M/E0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337989454342778497015211654196745931807187
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-29 09:44:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-27 09:44:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sgmission.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1684 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bces.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cdhs.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ces.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.des.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dtes.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.echs.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.edhs.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fbe.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fges.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hes.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lhs.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lms.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mes.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ndhs.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nes.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nms.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.oghs.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ogms.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pes.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rallsisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sgmission.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stmaryschoolwayne.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.thesae.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tphs.monroe.k12.tn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ves.monroe.k12.tn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wal.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bces.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bms.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdhs.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ces.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'che.lifeschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnn.portervilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hartorah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.cumberlandacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itchome.lpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'le.lifeschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lhs.lifeschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lphome.lpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mce.lifeschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rallsisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roe.lifeschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ros.lifeschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosebudacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgmission.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryschoolwayne.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesae.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advantageacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advantageisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advantageisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advantageisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arrowacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gesd32.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lazbuddieisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifeschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcgill-toolen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nyos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portervilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rallsisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saisd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sgmission.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcathmont.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryschoolwayne.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesae.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesae.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.towandasd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tsd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wswaldorf.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169c90cc0a60000040300473045022034d5d70529400d457ee6358a13159629fd286c557c4e82609d2b952dd45028b702210084a8d088622c7264fad01ee95a9779438178380787a37d8bc74da1b7bc6e8cd1007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169c90cbf24000004030046304402207164e4206779e986758a35be73ac6b5485fc69b872c70b4696d3d5e591169a8e02204c4db0e4d649add3fbbe03b569b21f0261a538c738ba6d17bd2b39d6045643e4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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