bhs.bayfield.k12.co.us

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1c:fd:dd:14:e0:24:d2:ae:47:0a:ef:8b:18:6a:64:4f:3d was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bhs.bayfield.k12.co.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1c:fd:dd:14:e0:24:d2:ae:47:0a:ef:8b:18:6a:64:4f:3d
Serial Number (int): 271202206673013033463603338386075271057213
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0f:26:d6:09:8d:b7:0a:83:13:48:d7:94:8c:16:77:38:aa:ec:ae:b4
Fingerprint (sha256): 90:1c:20:ae:d1:f7:a6:d1:3a:55:0f:a6:a0:19:42:68:60:b9:72:4b:90:b3:9c:b1:84:34:c1:1d:27:4f:71:05

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bhs.bayfield.k12.co.us

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bhs.bayfield.k12.co.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.belmonthighschool.org
admin.bpjh.bpsd.k12.ca.us
admin.brownell.flintschools.org
admin.colegiopedrochanel.com.mx
admin.corey.bpsd.k12.ca.us
admin.doyleryder.flintschools.org
admin.fthhs.org
admin.harthighschool.org
admin.jewishacademyorlando.org
admin.liggettschool.org
admin.liholiho.org
admin.sauguscenturions.com
admin.sierravistajuniorhigh.org
admin.ssfallsoulsschool.org
admin.westranchhighschool.com
beatty.bpsd.k12.ca.us
belmonthighschool.org
bhs.bayfield.k12.co.us
bis.bayfield.k12.co.us
bms.bayfield.k12.co.us
bpjh.bpsd.k12.ca.us
bps.bayfield.k12.co.us
cec.planada.org
colegiopedrochanel.com.mx
dhs.delhi.k12.ca.us
dms.delhi.k12.ca.us
elcapitan.delhi.k12.ca.us
forthamiltononline.org
fthhs.org
harmony.delhi.k12.ca.us
harthighschool.org
hayden.wsdk8.us
jewishacademyorlando.org
johnson.wsdk8.us
land.wsdk8.us
liggettschool.org
liholiho.org
meairs.wsdk8.us
ninth.frenship.us
pes.planada.org
sauguscenturions.com
schendel.delhi.k12.ca.us
schmitt.wsdk8.us
schroeder.wsdk8.us
sequoia.wsdk8.us
sequoiacharterschool.com
sequoiasamurai.com
sequoiasamurai.net
shattuck.delhi.k12.ca.us
sierravistajuniorhigh.com
sierravistajuniorhigh.net
sierravistajuniorhigh.org
ssfallsoulsschool.org
stacey.wsdk8.us
taketwo.ardmoreschools.org
warner.wsdk8.us
webber.wsdk8.us
westranchhighschool.com
westranchhighschool.org
willmore.wsdk8.us
www.bayfield.k12.co.us
www.belmonthighschool.org
www.colegiopedrochanel.com.mx
www.delhi.k12.ca.us
www.forthamiltononline.org
www.freeman.flintschools.org
www.fthhs.org
www.harthighschool.org
www.jewishacademyorlando.org
www.jonesschool.org
www.kvilleps.org
www.liggettschool.org
www.liholiho.org
www.lusd.k12.ca.us
www.mahsbears.org
www.mptcsfriends.org
www.mtairy.k12.nc.us
www.mtairymiddleschool.org
www.planada.org
www.sauguscenturions.com
www.sequoiacharterschool.com
www.sequoiasamurai.com
www.sequoiasamurai.net
www.shalhevet.org
www.sierravistajuniorhigh.com
www.sierravistajuniorhigh.net
www.sierravistajuniorhigh.org
www.ssfallsoulsschool.org
www.st-mikes-sf.org
www.stmichaelssf.org
www.stmikessf.org
www.stpetercov.org
www.tharringtonschool.org
www.warnerrocks.com
www.westranchhighschool.com
www.westranchhighschool.org
www.wsdk8.us
www.yavnehdallas.org

Other certificates including the domain name bayfield.k12.co.us

(limited to 100 certificates)
admin.brownell.flintschools.org
sequoiasamurai.com
bhs.bayfield.k12.co.us
bps.bayfield.k12.co.us
admin.belmonthighschool.org
3.bellevilleschools.org
admin.mtsd-vt.org
3.bellevilleschools.org
admin.brownell.flintschools.org
admin.belmonthighschool.org
admin.brownell.flintschools.org
admin.brownell.flintschools.org
admin.aerostem.org
sequoiasamurai.org
admin.belmonthighschool.org
116elementary.org
admin.belmonthighschool.org
www.freeman.flintschools.org
ireckon.bayfield.k12.co.us
www.bsd100.org
www.nuview.k12.ca.us
powerschool.bayfield.k12.co.us
admin.liholiho.org
bis.bayfield.k12.co.us
admin.belmonthighschool.org
116elementary.org
admin.belmonthighschool.org
3.bellevilleschools.org
admin.belmonthighschool.org
balloustay.com
3.bellevilleschools.org
bms.bayfield.k12.co.us
ireckon.bayfield.k12.co.us
3.bellevilleschools.org
admin.brownell.flintschools.org
www.bayfield.k12.co.us
password.bayfield.k12.co.us
admin.belmonthighschool.org
bps.bayfield.k12.co.us
www.kvilleps.org
admin.apr298.com
admin.belmonthighschool.org
admin.tpjhs.monroe.k12.tn.us
acacia.hemetusd.org
admin.monroe.k12.tn.us
ninth.frenship.us
admin.corey.bpsd.k12.ca.us
access.bayfield.k12.co.us
admin.aerostem.org
tunnel.bayfield.k12.co.us
admin.jewishacademyorlando.org
www.mammothusd.org
ah.cuesd.com
116elementary.org
3.bellevilleschools.org
tunnel.bayfield.k12.co.us
admin.aerostem.org
admin.dtm.flintschools.org
3.bellevilleschools.org
0-3.texasdhhresources.org
bhs.bayfield.k12.co.us
email.bayfield.k12.co.us
nes.nuview.k12.ca.us
admin.brownell.flintschools.org
www.bayfield.k12.co.us
password.bayfield.k12.co.us
admin.brownell.flintschools.org
bps.bayfield.k12.co.us
116elementary.org
access.bayfield.k12.co.us
bis.bayfield.k12.co.us
admin.belmonthighschool.org
admin.brownell.flintschools.org
116elementary.org
es.franklintowne.org
admin.sierra.bcsd.com
116elementary.org
admin.belmonthighschool.org
admin.flintschools.org
admin.sandiaprep.org
admin.brownell.flintschools.org
admin.tpjhs.monroe.k12.tn.us
admin.brownell.flintschools.org
hemetel.hemetusd.org
usf.com.mx
bis.bayfield.k12.co.us
bes.bayfield.k12.co.us
0-3.texasdhhresources.org
admin.brownell.flintschools.org
access.bayfield.k12.co.us
admin.brightfutures.grandviewc4.net
admin.brownell.flintschools.org
antero.bayfield.k12.co.us
bms.bayfield.k12.co.us
bis.bayfield.k12.co.us
3.bellevilleschools.org
admin.apr298.com
116elementary.org
www.forthamiltononline.org
tunnel.bayfield.k12.co.us

Certificate

The complete raw certificate details for bhs.bayfield.k12.co.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271202206673013033463603338386075271057213
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-10 09:46:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-09 09:46:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bhs.bayfield.k12.co.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2301 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.belmonthighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bpjh.bpsd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.brownell.flintschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.colegiopedrochanel.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.corey.bpsd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.doyleryder.flintschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fthhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.harthighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jewishacademyorlando.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.liggettschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.liholiho.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sauguscenturions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sierravistajuniorhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ssfallsoulsschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.westranchhighschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beatty.bpsd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belmonthighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhs.bayfield.k12.co.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bis.bayfield.k12.co.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bms.bayfield.k12.co.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bpjh.bpsd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bps.bayfield.k12.co.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cec.planada.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colegiopedrochanel.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhs.delhi.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dms.delhi.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elcapitan.delhi.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forthamiltononline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fthhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harmony.delhi.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harthighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hayden.wsdk8.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jewishacademyorlando.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnson.wsdk8.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'land.wsdk8.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liggettschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liholiho.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meairs.wsdk8.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ninth.frenship.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pes.planada.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sauguscenturions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schendel.delhi.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schmitt.wsdk8.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schroeder.wsdk8.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sequoia.wsdk8.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sequoiacharterschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sequoiasamurai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sequoiasamurai.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shattuck.delhi.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sierravistajuniorhigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sierravistajuniorhigh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sierravistajuniorhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssfallsoulsschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stacey.wsdk8.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taketwo.ardmoreschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warner.wsdk8.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webber.wsdk8.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westranchhighschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westranchhighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willmore.wsdk8.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayfield.k12.co.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belmonthighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegiopedrochanel.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.delhi.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.forthamiltononline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freeman.flintschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fthhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harthighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jewishacademyorlando.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jonesschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kvilleps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liggettschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liholiho.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahsbears.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mptcsfriends.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtairy.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtairymiddleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.planada.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sauguscenturions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sequoiacharterschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sequoiasamurai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sequoiasamurai.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shalhevet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sierravistajuniorhigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sierravistajuniorhigh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sierravistajuniorhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ssfallsoulsschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st-mikes-sf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmichaelssf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmikessf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpetercov.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tharringtonschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warnerrocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westranchhighschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westranchhighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wsdk8.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yavnehdallas.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a06dac01f0000040300483046022100b6a3963bbfead25668c4c839b44478b4a1ecc4975daa5ee708ec3d281b53b702022100ad9509b55103c043e21a5ee83e1cc00aa360655988d9824ac5f6a9a30c3c559700770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a06dac0560000040300483046022100c6141b0265b6181fd5f1fba86b09a3f662de2f24f3ea860fd464d304a30fcbd9022100b06255379ea34cdaf502f891abaaa61c963c368a24588ec0525f9323f1c09cde
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00541d61e8b98e1251847bbbb8eaa839094badc41a0e488fc7aa7fa168c92999d81f6278d8696c0a4484aa6f379f6a69635a1a69aba0f3c0cbf25fc81b7eded7ed75b449a67e2cb82ec0fa77b9cb529fb74788a85c5a8247be78e5d8ffb4e0fc04797d208094b6f9ec8768e5c9473329dd563a9427bc858f1d5da719c4cc4e4def16bd1bc86e1a7ed0d5860f8a90090edbb181088aa56403e9a0f1afbf75da44222844d95a7ccedea3420d3e4556316f507707588c53bcc1155e858afe2596d56aa79de3a6377cfdf3bda4740a8794700462d4de901f2ad61fe0ebbb2d7f3356dfd2142e3e2a5148ecdf4477a4386cde17ee6c61737ad3dd120e37a4034d26f4e4