ochoaprep.erusd.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:41:24:35:43:dc:4a:42:d3:eb:f0:72:fe:cf:48:71:65:d7 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ochoaprep.erusd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:41:24:35:43:dc:4a:42:d3:eb:f0:72:fe:cf:48:71:65:d7
Serial Number (int): 283503340421098121260682482870494690371031
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 07:8c:3f:9e:a2:7b:f0:41:06:f6:be:eb:98:18:65:12:b8:c2:86:c7
Fingerprint (sha256): 91:20:68:1f:49:9e:a6:c6:b7:70:7a:66:50:2b:fc:03:fa:a4:99:07:d7:dc:b1:61:32:8a:8e:d0:a4:b2:b3:2c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ochoaprep.erusd.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ochoaprep.erusd.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aak.potsdam.k12.ny.us
admin.aak.potsdam.k12.ny.us
admin.ahs.airportschools.com
admin.airportschools.com
admin.alexandercsd.org
admin.ava.airportschools.com
admin.berrienschools.org
admin.bls.lcdoe.org
admin.curiehs.org
admin.eastvalleyhs.net
admin.elementary.alexandercsd.org
admin.eyler.airportschools.com
admin.fes.lcdoe.org
admin.hrs.lcdoe.org
admin.jww.jubileeacademies.org
admin.lae.potsdam.k12.ny.us
admin.lcdoe.org
admin.lchs.lcdoe.org
admin.mhs.centerusd.org
admin.middlehigh.alexandercsd.org
admin.mlvrcs.org
admin.nce.airportschools.com
admin.nga.lcdoe.org
admin.phs.potsdam.k12.ny.us
admin.potsdam.k12.ny.us
admin.rangerville.sbcisd.net
admin.ritter.airportschools.com
admin.sle.lcdoe.org
admin.sterling.airportschools.com
admin.sullivan.sbcisd.net
admin.thevalleyacademy.net
admin.ujh.lcdoe.org
admin.wagar56.airportschools.com
admin.wagar78.airportschools.com
admin.wcr.centerusd.org
admin.windberschools.org
ahs.airportschools.com
airportschools.com
alexandercsd.org
alt.sbcisd.net
ava.airportschools.com
berrienschools.com
berrienschools.org
bls.lcdoe.org
bps.berrienschools.org
centerpreschool.centerusd.org
cmschl.org
csisd.org
curiehs.org
dudley.centerusd.org
eastvalleyhs.net
elementary.alexandercsd.org
erhs.erusd.org
eurotexcoco.edu.mx
eyler.airportschools.com
fes.lcdoe.org
gateway.sbcisd.net
hrs.lcdoe.org
instructionaltech.sbcisd.net
jhar.jubileeacademies.org
jlw.jubileeacademies.org
jodlf.sbcisd.net
jubileeacademies.org
lae.potsdam.k12.ny.us
laencantada.sbcisd.net
landrum.sbcisd.net
lapaloma.sbcisd.net
lcdoe.org
lchs.lcdoe.org
mhs.centerusd.org
middlehigh.alexandercsd.org
mlvrcs.org
nce.airportschools.com
nga.lcdoe.org
ochoaprep.erusd.org
phs.potsdam.k12.ny.us
rangerville.sbcisd.net
ritter.airportschools.com
sle.lcdoe.org
sterling.airportschools.com
sullivan.sbcisd.net
thevalleyacademy.net
ujh.lcdoe.org
wagar56.airportschools.com
wagar78.airportschools.com
wcr.centerusd.org
windberschools.org
www.airportschools.com
www.alexandercsd.org
www.berrienschools.com
www.berrienschools.org
www.curiehs.org
www.eastvalleyhs.net
www.eurotexcoco.edu.mx
www.jubileeacademies.org
www.lcdoe.org
www.mlvrcs.org
www.potsdam.k12.ny.us
www.thevalleyacademy.net
www.windberschools.org

Other certificates including the domain name erusd.org

(limited to 100 certificates)
admin.adulted.erusd.org
www.kheperacharter.org
21cli.beaumontusd.us
santafesouth.org
adulted.erusd.org
second.exteraschools.org
admin.newbernmiddle.gocats.org
admin.lorena.exteraschools.org
admin.ahs.ardmoreschools.org
erusd.org
admin.adulted.erusd.org
admin.ahs.ardmoreschools.org
21cli.beaumontusd.us
sea.mynhusd.org
academyofthecanyons.net
www.arschoolforthedeaf.org
bell.robla.k12.ca.us
admin.ourcommunityschool.org
www.british.edu.mx
admin.almadinah-school.com
admin.whitson.wsvsd.org
admin.stanthonyeagles.org
sv.gvusd.k12.ca.us
cce.leusd.k12.ca.us
admin.adulted.erusd.org
admin.bac.wsisd.com
admin.adulted.erusd.org
admin.be.erusd.org
www.saintpaulcatholic.org
admin.jfk.edu.mx
erusd.org
admin.jww.jubileeacademies.org
abchandler.henderson.kyschools.us
admin.adulted.erusd.org
admin.3rcs.org
admin.almadinah-school.com
www.sycamorepreparatoryacademy.org
admin.berrienschools.org
breed.exteraschools.org
re.erusd.org
abchandler.henderson.kyschools.us
admin.second.exteraschools.org
admin.de.erusd.org
admin.mms.monroe.k12.tn.us
shagirls.com
www.grandville.k12.mi.us
admin.exteraschools.org
northwesthigh.slp.k12.la.us
abchandler.henderson.kyschools.us
lorena.exteraschools.org
centerpreschool.centerusd.org
admin.adulted.erusd.org
ees.edgewoodschools.com
admin.adulted.erusd.org
www.trinitystelementary.com
gageparkhs.org
admin.ecacademy.scrsd.org
admin.ahs.ardmoreschools.org
abchandler.henderson.kyschools.us
montrosechristiancdc.org
academiamaddox.com
admin.elementary.bridgeportisd.net
21cli.beaumontusd.us
abchandler.henderson.kyschools.us
admin.3rcs.org
admin.rms.erusd.org
rve.erusd.org
admin.assumptionschool-sl.org
admin.ecacademy.scrsd.org
admin.da.nksd.net
npaa.erusd.org
21cli.beaumontusd.us
admin.hlc.gocats.org
www.lisboncsd.org
www.sd925.org
admin.bac.wsisd.com
admin.3rcs.org
admin.erusd.org
admin.excel.dcs.edu
sre.erusd.org
ochoaprep.erusd.org
admin.loudoncounty.org
admin.adulted.erusd.org
admin.tphs.monroe.k12.tn.us
admin.hsmp.org
academyofthecanyons.net
www.unionsquareacademy.org
admin.ecacademy.scrsd.org
steam.erusd.org
admin.3rcs.org
rms.erusd.org
www.icabh.org
admin.bac.wsisd.com
admin.almadinah-school.com
abchandler.henderson.kyschools.us
admin.ahs.ardmoreschools.org
erhs.erusd.org
dudley.centerusd.org
ve.erusd.org
admin.bes.berrienschools.org

Certificate

The complete raw certificate details for ochoaprep.erusd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283503340421098121260682482870494690371031
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-08 11:19:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-06 11:19:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ochoaprep.erusd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2307 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aak.potsdam.k12.ny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.aak.potsdam.k12.ny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ahs.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.alexandercsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ava.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.berrienschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bls.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.curiehs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eastvalleyhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.elementary.alexandercsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eyler.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fes.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hrs.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jww.jubileeacademies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lae.potsdam.k12.ny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lchs.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mhs.centerusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.middlehigh.alexandercsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mlvrcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nce.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nga.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.phs.potsdam.k12.ny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.potsdam.k12.ny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rangerville.sbcisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ritter.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sle.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sterling.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sullivan.sbcisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.thevalleyacademy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ujh.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wagar56.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wagar78.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wcr.centerusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.windberschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahs.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexandercsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alt.sbcisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ava.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berrienschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berrienschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bls.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bps.berrienschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centerpreschool.centerusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmschl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curiehs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dudley.centerusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastvalleyhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elementary.alexandercsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erhs.erusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eurotexcoco.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyler.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fes.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway.sbcisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrs.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instructionaltech.sbcisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhar.jubileeacademies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jlw.jubileeacademies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jodlf.sbcisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jubileeacademies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lae.potsdam.k12.ny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laencantada.sbcisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landrum.sbcisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lapaloma.sbcisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lchs.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhs.centerusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'middlehigh.alexandercsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlvrcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nce.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nga.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ochoaprep.erusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phs.potsdam.k12.ny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rangerville.sbcisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ritter.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sle.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sterling.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sullivan.sbcisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thevalleyacademy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ujh.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wagar56.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wagar78.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcr.centerusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windberschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alexandercsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berrienschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berrienschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.curiehs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastvalleyhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eurotexcoco.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jubileeacademies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mlvrcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.potsdam.k12.ny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thevalleyacademy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.windberschools.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001695d3e74ad000004030046304402207b48bc8701a1418d9b8233a67da4a91f82f29640362e7c85a6f4f8ca641d336d0220342e119d12b8e8a78ad50c32f731138f68f94d1af5200fe3ec33b6e3bc43b345007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001695d3e722300000403004730450220114155b940036f914e66d5700bd5cda5281111df378edad520ddb9d5421c03840221009017a042d9798bff3f6e0077dc7db130a71ab1e86007b05476fc242b856944cc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00177e0c7d67485c5b0ea358df213444b0e765300e262a8382505111072c8acc03897684670b9edf888db555bc8c0e3297264b88fac6cf34ea25fce3de32a8ac816b785586afddaf3adc8a44b9d4513bc0b34f797ae5d1caff6a9efca04d30dc33a87262d3e531949a9a3c6120b8f6a8dff96507409280b889bc0c216ac4e9408b761a235521b66212647c919a2146666a91e5a4853782cbbc03038b00840827586ad793b68ca028cfbe54b7fd162fb263bbf78adb89337add102cb49516d3c2b94839b2fe5452319bd51d2284375cfcb37f2e209a587cea3b4b96cc7c05756e8d057f1cf703e1f8b052ab4e0b739ddc561f2eff3514336765b7bef53e7a5d508d