bes.yadkin.k12.nc.us

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4e:24:e5:bc:b7:42:92:29:1c:cb:78:ff:83:1d:79:32:1e was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bes.yadkin.k12.nc.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4e:24:e5:bc:b7:42:92:29:1c:cb:78:ff:83:1d:79:32:1e
Serial Number (int): 287927927486555163471556870798447344169502
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 53:da:de:7d:c8:5b:22:8a:34:96:f7:55:ad:76:e8:91:9a:b1:dd:ef
Fingerprint (sha256): 91:50:b1:5f:ff:04:49:54:6d:30:d9:37:9e:d8:92:a2:74:6b:c5:4b:2e:8c:ae:01:b7:a9:9d:47:02:df:63:f9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bes.yadkin.k12.nc.us

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bes.yadkin.k12.nc.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.arcedu.mx
admin.hbcsd.k12.ca.us
admin.kanoelani.org
admin.lahainalunahs.org
admin.makalapael.org
admin.qkes.us
admin.rogibson.org
admin.uhms.ucboe.us
admin.veterans.ucboe.us
admin.washington.ucboe.us
admin.yadkin.k12.nc.us
alc.ucboe.us
alc.union-city.k12.nj.us
arcedu.mx
beauchenehigh.slp.k12.la.us
bes.yadkin.k12.nc.us
caps.slp.k12.la.us
centralmiddle.slp.k12.la.us
ces.yadkin.k12.nc.us
cpowell.ucboe.us
ebs.yadkin.k12.nc.us
ecc.ucboe.us
ecc.union-city.k12.nj.us
edison.ucboe.us
edison.union-city.k12.nj.us
ems.ucboe.us
ems.union-city.k12.nj.us
eunicecareer.slp.k12.la.us
eunicehigh.slp.k12.la.us
eunicejr.slp.k12.la.us
fcs.yadkin.k12.nc.us
fes.yadkin.k12.nc.us
fhs.yadkin.k12.nc.us
fms.yadkin.k12.nc.us
gilmore.ucboe.us
hudson.ucboe.us
hudson.union-city.k12.nj.us
jefferson.ucboe.us
jefferson.union-city.k12.nj.us
jes.yadkin.k12.nc.us
jmfa.ucboe.us
jmfa.union-city.k12.nj.us
kanoelani.org
lahainalunahs.org
leonvilleelem.slp.k12.la.us
maca.slp.k12.la.us
makalapael.org
northcentralhigh.slp.k12.la.us
northeastelem.slp.k12.la.us
northelem.slp.k12.la.us
northsidecatholic.org
opelousashigh.slp.k12.la.us
opelousasjr.slp.k12.la.us
palmettoelem.slp.k12.la.us
parkvistaelem.slp.k12.la.us
plaisanceelem.slp.k12.la.us
portbarreelem.slp.k12.la.us
portbarrehigh.slp.k12.la.us
qkes.us
rogibson.org
roosevelt.ucboe.us
rws.ucboe.us
rws.union-city.k12.nj.us
shs.yadkin.k12.nc.us
slats.slp.k12.la.us
sms.yadkin.k12.nc.us
southstreetelem.slp.k12.la.us
southwestelem.slp.k12.la.us
sunsetelem.slp.k12.la.us
uchs.ucboe.us
uchs.union-city.k12.nj.us
uhms.ucboe.us
uhms.union-city.k12.nj.us
veterans.ucboe.us
veterans.union-city.k12.nj.us
washington.ucboe.us
washington.union-city.k12.nj.us
washingtoncareer.slp.k12.la.us
washingtonelem.slp.k12.la.us
wilson.union-city.k12.nj.us
www.arcedu.mx
www.bellevue-schools.com
www.hbcsd.k12.ca.us
www.hbcsd.us
www.kanoelani.org
www.makalapael.org
www.mcaknights.org
www.qkes.us
www.rogibson.org
www.yadkin.k12.nc.us
wys.yadkin.k12.nc.us
yec.yadkin.k12.nc.us
yes.yadkin.k12.nc.us
ysa.yadkin.k12.nc.us

Other certificates including the domain name yadkin.k12.nc.us

(limited to 100 certificates)

Certificate

The complete raw certificate details for bes.yadkin.k12.nc.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOmjCCDYKgAwIBAgISA04k5by3QpIpHMt4/4MdeTIeMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMDgxMTAyNDhaFw0x
OTA2MDYxMTAyNDhaMB8xHTAbBgNVBAMTFGJlcy55YWRraW4uazEyLm5jLnVzMIIC
IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQbTHb+2z7rfYV
Cl+ph5m8FJJOEgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5pV3R4RBgn18R
THnTD9fS27JxyeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGrmQF3Z/h2e6St
agubO+pVwFzG8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK7wAhJO8el2z3
75LDd2VIwrdWQP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlWZ1AdjOKfRiY0
ckFuu/DYkuvkNKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5Tu7zbek/MR/J
MR9nceWyZ2Mund+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzwWzBvTD8F7q6c
kUbIgpeo7stn7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuaivjW/P+Tm64Xj
XNjP9F1W8+5tlcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ4Iudx/o3Q4E2
w6Aud9PYyV05pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/h0omUmCIDiQV
G30eHhb3OIP3bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUnohkUi6ikD4me
6o58sq/IQVmyem1M/E0CAwEAAaOCCqMwggqfMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
FgQUL2vITWwsLjLyACD/LU1sWvxuurswHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3
pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2Nz
cC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2Vy
dC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzCCCFcGA1UdEQSCCE4wgghKgg9hZG1p
bi5hcmNlZHUubXiCFWFkbWluLmhiY3NkLmsxMi5jYS51c4ITYWRtaW4ua2Fub2Vs
YW5pLm9yZ4IXYWRtaW4ubGFoYWluYWx1bmFocy5vcmeCFGFkbWluLm1ha2FsYXBh
ZWwub3Jngg1hZG1pbi5xa2VzLnVzghJhZG1pbi5yb2dpYnNvbi5vcmeCE2FkbWlu
LnVobXMudWNib2UudXOCF2FkbWluLnZldGVyYW5zLnVjYm9lLnVzghlhZG1pbi53
YXNoaW5ndG9uLnVjYm9lLnVzghZhZG1pbi55YWRraW4uazEyLm5jLnVzggxhbGMu
dWNib2UudXOCGGFsYy51bmlvbi1jaXR5LmsxMi5uai51c4IJYXJjZWR1Lm14ghti
ZWF1Y2hlbmVoaWdoLnNscC5rMTIubGEudXOCFGJlcy55YWRraW4uazEyLm5jLnVz
ghJjYXBzLnNscC5rMTIubGEudXOCG2NlbnRyYWxtaWRkbGUuc2xwLmsxMi5sYS51
c4IUY2VzLnlhZGtpbi5rMTIubmMudXOCEGNwb3dlbGwudWNib2UudXOCFGVicy55
YWRraW4uazEyLm5jLnVzggxlY2MudWNib2UudXOCGGVjYy51bmlvbi1jaXR5Lmsx
Mi5uai51c4IPZWRpc29uLnVjYm9lLnVzghtlZGlzb24udW5pb24tY2l0eS5rMTIu
bmoudXOCDGVtcy51Y2JvZS51c4IYZW1zLnVuaW9uLWNpdHkuazEyLm5qLnVzghpl
dW5pY2VjYXJlZXIuc2xwLmsxMi5sYS51c4IYZXVuaWNlaGlnaC5zbHAuazEyLmxh
LnVzghZldW5pY2Vqci5zbHAuazEyLmxhLnVzghRmY3MueWFka2luLmsxMi5uYy51
c4IUZmVzLnlhZGtpbi5rMTIubmMudXOCFGZocy55YWRraW4uazEyLm5jLnVzghRm
bXMueWFka2luLmsxMi5uYy51c4IQZ2lsbW9yZS51Y2JvZS51c4IPaHVkc29uLnVj
Ym9lLnVzghtodWRzb24udW5pb24tY2l0eS5rMTIubmoudXOCEmplZmZlcnNvbi51
Y2JvZS51c4IeamVmZmVyc29uLnVuaW9uLWNpdHkuazEyLm5qLnVzghRqZXMueWFk
a2luLmsxMi5uYy51c4INam1mYS51Y2JvZS51c4IZam1mYS51bmlvbi1jaXR5Lmsx
Mi5uai51c4INa2Fub2VsYW5pLm9yZ4IRbGFoYWluYWx1bmFocy5vcmeCG2xlb252
aWxsZWVsZW0uc2xwLmsxMi5sYS51c4ISbWFjYS5zbHAuazEyLmxhLnVzgg5tYWth
bGFwYWVsLm9yZ4Iebm9ydGhjZW50cmFsaGlnaC5zbHAuazEyLmxhLnVzghtub3J0
aGVhc3RlbGVtLnNscC5rMTIubGEudXOCF25vcnRoZWxlbS5zbHAuazEyLmxhLnVz
ghVub3J0aHNpZGVjYXRob2xpYy5vcmeCG29wZWxvdXNhc2hpZ2guc2xwLmsxMi5s
YS51c4IZb3BlbG91c2FzanIuc2xwLmsxMi5sYS51c4IacGFsbWV0dG9lbGVtLnNs
cC5rMTIubGEudXOCG3Bhcmt2aXN0YWVsZW0uc2xwLmsxMi5sYS51c4IbcGxhaXNh
bmNlZWxlbS5zbHAuazEyLmxhLnVzghtwb3J0YmFycmVlbGVtLnNscC5rMTIubGEu
dXOCG3BvcnRiYXJyZWhpZ2guc2xwLmsxMi5sYS51c4IHcWtlcy51c4IMcm9naWJz
b24ub3JnghJyb29zZXZlbHQudWNib2UudXOCDHJ3cy51Y2JvZS51c4IYcndzLnVu
aW9uLWNpdHkuazEyLm5qLnVzghRzaHMueWFka2luLmsxMi5uYy51c4ITc2xhdHMu
c2xwLmsxMi5sYS51c4IUc21zLnlhZGtpbi5rMTIubmMudXOCHXNvdXRoc3RyZWV0
ZWxlbS5zbHAuazEyLmxhLnVzghtzb3V0aHdlc3RlbGVtLnNscC5rMTIubGEudXOC
GHN1bnNldGVsZW0uc2xwLmsxMi5sYS51c4INdWNocy51Y2JvZS51c4IZdWNocy51
bmlvbi1jaXR5LmsxMi5uai51c4INdWhtcy51Y2JvZS51c4IZdWhtcy51bmlvbi1j
aXR5LmsxMi5uai51c4IRdmV0ZXJhbnMudWNib2UudXOCHXZldGVyYW5zLnVuaW9u
LWNpdHkuazEyLm5qLnVzghN3YXNoaW5ndG9uLnVjYm9lLnVzgh93YXNoaW5ndG9u
LnVuaW9uLWNpdHkuazEyLm5qLnVzgh53YXNoaW5ndG9uY2FyZWVyLnNscC5rMTIu
bGEudXOCHHdhc2hpbmd0b25lbGVtLnNscC5rMTIubGEudXOCG3dpbHNvbi51bmlv
bi1jaXR5LmsxMi5uai51c4INd3d3LmFyY2VkdS5teIIYd3d3LmJlbGxldnVlLXNj
aG9vbHMuY29tghN3d3cuaGJjc2QuazEyLmNhLnVzggx3d3cuaGJjc2QudXOCEXd3
dy5rYW5vZWxhbmkub3JnghJ3d3cubWFrYWxhcGFlbC5vcmeCEnd3dy5tY2Frbmln
aHRzLm9yZ4ILd3d3LnFrZXMudXOCEHd3dy5yb2dpYnNvbi5vcmeCFHd3dy55YWRr
aW4uazEyLm5jLnVzghR3eXMueWFka2luLmsxMi5uYy51c4IUeWVjLnlhZGtpbi5r
MTIubmMudXOCFHllcy55YWRraW4uazEyLm5jLnVzghR5c2EueWFka2luLmsxMi5u
Yy51czBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG
AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkC
BAIEgfUEgfIA8AB2AOJpS64m6OlACeiGG7Y7g9Q+5/50iPukjyiTAZ3d8dv+AAAB
aV0vNTEAAAQDAEcwRQIhAL+N1IN5UPoouN1XazSmE6C+eWT8sAPUK7s402tzg/xq
AiB3yZG0gTJqa3gnzjD0c4OtQpZ3+XRQKyLc/CLzUQCXfwB2ACk8UZZUyDlluqpQ
/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABaV0vNXsAAAQDAEcwRQIhAKtYpxCF09G+
9SD9LjUYHE3FrijUJtFcdWRnW93T+4WyAiASG/vnrkeX8zQZRR4CsbU2OE+JXDtW
/4FbNdcbXgjBEjANBgkqhkiG9w0BAQsFAAOCAQEARmhxm72Hxg/gCpF1OTS4V4xy
VhzdlHseFcR/c0cmYytt7i3dDJvlM90YbgFomoiEYrKvg8k0Q7dFLhdsikXtIEsp
IvL2UTz5O+X6aMz8rhrszkPz5gY44pu7QSfgVHlPBN7q0XVlgKR8IABoXd1xRWgx
AWhcE4MHTUfnCp8p8UDXCuH81ZOs8hNzPMEXDjkHeNpsfxIL2MLyA2MO6HqOe1qq
NbmxkbhNYUq3ZQjZyhRxFcLvPH+Wg98Fpl/AFC+2NlOIgTTkQQEasKdK6bLUYJGN
sForVBoEZrqt5XLa7r+afEpjWe1WjVNyywBz6PrNTZHIoyIzYB1fvhu+q+Etog==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287927927486555163471556870798447344169502
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-08 11:02:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-06 11:02:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bes.yadkin.k12.nc.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.arcedu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hbcsd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kanoelani.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lahainalunahs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.makalapael.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.qkes.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rogibson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.uhms.ucboe.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.veterans.ucboe.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.washington.ucboe.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.yadkin.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alc.ucboe.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alc.union-city.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcedu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beauchenehigh.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bes.yadkin.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caps.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralmiddle.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ces.yadkin.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpowell.ucboe.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebs.yadkin.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecc.ucboe.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecc.union-city.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edison.ucboe.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edison.union-city.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ems.ucboe.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ems.union-city.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eunicecareer.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eunicehigh.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eunicejr.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcs.yadkin.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fes.yadkin.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fhs.yadkin.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fms.yadkin.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gilmore.ucboe.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hudson.ucboe.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hudson.union-city.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jefferson.ucboe.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jefferson.union-city.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jes.yadkin.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jmfa.ucboe.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jmfa.union-city.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanoelani.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lahainalunahs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leonvilleelem.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maca.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makalapael.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcentralhigh.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northeastelem.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northelem.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northsidecatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opelousashigh.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opelousasjr.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palmettoelem.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkvistaelem.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plaisanceelem.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portbarreelem.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portbarrehigh.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qkes.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rogibson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roosevelt.ucboe.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rws.ucboe.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rws.union-city.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shs.yadkin.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slats.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms.yadkin.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southstreetelem.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southwestelem.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunsetelem.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uchs.ucboe.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uchs.union-city.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhms.ucboe.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhms.union-city.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veterans.ucboe.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veterans.union-city.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washington.ucboe.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washington.union-city.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washingtoncareer.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washingtonelem.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wilson.union-city.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arcedu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellevue-schools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcsd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kanoelani.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makalapael.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcaknights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qkes.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rogibson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yadkin.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wys.yadkin.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yec.yadkin.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yes.yadkin.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ysa.yadkin.k12.nc.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001695d2f35310000040300473045022100bf8dd4837950fa28b8dd576b34a613a0be7964fcb003d42bbb38d36b7383fc6a022077c991b481326a6b7827ce30f47383ad429677f974502b22dcfc22f35100977f007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001695d2f357b0000040300473045022100ab58a71085d3d1bef520fd2e35181c4dc5ae28d426d15c7564675bddd3fb85b20220121bfbe7ae4797f33419451e02b1b536384f895c3b56ff815b35d71b5e08c112
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004668719bbd87c60fe00a91753934b8578c72561cdd947b1e15c47f734726632b6dee2ddd0c9be533dd186e01689a888462b2af83c93443b7452e176c8a45ed204b2922f2f6513cf93be5fa68ccfcae1aecce43f3e60638e29bbb4127e054794f04deead1756580a47c2000685ddd7145683101685c1383074d47e70a9f29f140d70ae1fcd593acf213733cc1170e390778da6c7f120bd8c2f203630ee87a8e7b5aaa35b9b191b84d614ab76508d9ca147115c2ef3c7f9683df05a65fc0142fb63653888134e441011ab0a74ae9b2d460918db05a2b541a0466baade572daeebf9a7c4a6359ed568d5372cb0073e8facd4d91c8a32233601d5fbe1bbeabe12da2