www.st.louisschool.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:46:53:6a:5f:79:2c:54:06:1a:05:87:0e:59:c1:f3:db:8d was issued on by Let's Encrypt.

With 71 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.st.louisschool.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:46:53:6a:5f:79:2c:54:06:1a:05:87:0e:59:c1:f3:db:8d
Serial Number (int): 285267501723292824021637435728123217042317
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d1:ed:47:48:e7:4c:5b:72:09:05:23:64:d6:7f:06:8c:3d:42:44:2c
Fingerprint (sha256): 91:b3:9f:03:10:5f:da:6c:85:21:b1:cd:6e:68:75:8f:c3:e8:99:06:58:f3:76:07:53:b4:f8:48:be:17:ac:5d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.st.louisschool.org

71

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.st.louisschool.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.artsinactioncharter.org
admin.carbonvalleyacademy.org
admin.ccs.coloma.org
admin.chs.coloma.org
admin.cjh.coloma.org
admin.clanyc.org
admin.garvey.k12.ca.us
admin.glenwood.lindenusd.com
admin.kellycollegeprep.org
admin.lhs.lindenusd.com
admin.lindenel.lindenusd.com
admin.olgscott.net
admin.pac.aquinashs.net
admin.pride.lindenusd.com
admin.prospectridgeacademy.org
admin.rice.garvey.k12.ca.us
admin.sanchez.garvey.k12.ca.us
admin.st.louisschool.org
admin.stleocatholic.com
admin.stlouisschool.org
admin.templeint.garvey.k12.ca.us
admin.validatingaffirmingschools.org
admin.waldorfatlanta.org
admin.waterloo.lindenusd.com
admin.waverly.lindenusd.com
admin.willard.garvey.k12.ca.us
artsinactioncharter.org
carbonvalleyacademy.org
ccs.coloma.org
ces.coloma.org
chs.coloma.org
cis.coloma.org
cjh.coloma.org
clanyc.org
coloma.org
dougherty.k12.ga.us
jcchs.org
kellycollegeprep.org
mvista.garvey.k12.ca.us
pac.aquinashs.net
peterson.mx
rice.garvey.k12.ca.us
sanchez.garvey.k12.ca.us
saspasadena.org
st.louisschool.org
templeint.garvey.k12.ca.us
validatingaffirmingschools.org
willard.garvey.k12.ca.us
workstudyicacristorey.org
www.artsinactioncharter.org
www.balloustay.com
www.carbonvalleyacademy.org
www.ccs.coloma.org
www.clanyc.org
www.coloma.org
www.garvey.k12.ca.us
www.gesd.us
www.jcchs.org
www.kellycollegeprep.org
www.olgscott.net
www.peterson.mx
www.prospectridgeacademy.org
www.pvphs.com
www.richland.k12.mo.us
www.saspasadena.org
www.sjsbr.org
www.st.louisschool.org
www.stleocatholic.com
www.stlouisschool.org
www.validatingaffirmingschools.org
www.waldorfatlanta.org

Other certificates including the domain name louisschool.org

(limited to 100 certificates)
admin.ccs.coloma.org
admin.kcusd.com
admin.ccti.pgsd.ms
admin.ccti.pgsd.ms
admin.ccti.pgsd.ms
www.ptcbus.org
admin.ccti.pgsd.ms
admin.ces.coloma.org
st.louisschool.org
admin.ccti.pgsd.ms
acacia.fullertonsd.org
admin.ccti.pgsd.ms
acacia.fullertonsd.org
admin.artsinactioncharter.org
acacia.fullertonsd.org
admin.pride.lindenusd.com
www.stlouis-batesville.org
www.clanyc.org
admin.cjh.coloma.org
admin.ccti.pgsd.ms
acacia.fullertonsd.org
admin.adultschool.uusd.net
admin.moxee.evsd90.org
admin.chms.mx
admin.adulted.kcusd.com
admin.ccti.pgsd.ms
vanalstyneisd.org
admin.aquinashs.net
admin.ccti.pgsd.ms
admin.bitely.garvey.k12.ca.us
koepsell.solake.org
fhs.frankfortschools.org
acacia.fullertonsd.org
acacia.fullertonsd.org
www.carbonvalleyacademy.org
ccti.pgsd.ms
peterson.mx
st.louisschool.org
admin.artsinactioncharter.org
admin.vanalstyneisd.org
admin.sqhs.monroe.k12.tn.us
www.st.louisschool.org
admin.adultschool.uusd.net
admin.centroculturaljalilgibran.edu.mx
admin.adultschool.uusd.net
admin.st.louisschool.org
workstudyicacristorey.org
vapa.mvusd.net
acacia.fullertonsd.org
admin.adultschool.uusd.net
weec.dcs.edu
pac.aquinashs.net
admin.ccti.pgsd.ms
admin.adultschool.uusd.net
acacia.fullertonsd.org
cet.edu.mx
admin.ms.vanalstyneisd.org
admin.artsinactioncharter.org
spencemanagementgroup.com
admin.chms.mx
admin.adultschool.uusd.net
admin.adultschool.uusd.net
www.indianola.k12.ok.us
www.centroculturaljalilgibran.edu.mx
www.leusd.k12.ca.us
admin.rice.garvey.k12.ca.us
fhs.gvusd.org
acacia.fullertonsd.org
admin.adultschool.uusd.net
saspasadena.org
admin.greatwestern.kcusd.com
admin.aquinashs.net
admin.aquinashs.net
ps086.com
admin.balloustay.com
admin.cvhs.cv.k12.ca.us
www.monte-rosa.mx

Certificate

The complete raw certificate details for www.st.louisschool.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285267501723292824021637435728123217042317
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-05 09:42:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-03 09:42:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.st.louisschool.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1657 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.artsinactioncharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.carbonvalleyacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ccs.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.chs.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cjh.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.clanyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.glenwood.lindenusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kellycollegeprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lhs.lindenusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lindenel.lindenusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.olgscott.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pac.aquinashs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pride.lindenusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.prospectridgeacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rice.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sanchez.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.st.louisschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stleocatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stlouisschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.templeint.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.validatingaffirmingschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.waldorfatlanta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.waterloo.lindenusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.waverly.lindenusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.willard.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artsinactioncharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carbonvalleyacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccs.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ces.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chs.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cis.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cjh.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clanyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dougherty.k12.ga.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcchs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kellycollegeprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvista.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pac.aquinashs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peterson.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rice.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanchez.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saspasadena.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st.louisschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'templeint.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'validatingaffirmingschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willard.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workstudyicacristorey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artsinactioncharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.balloustay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carbonvalleyacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccs.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clanyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gesd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jcchs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kellycollegeprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olgscott.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peterson.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prospectridgeacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pvphs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richland.k12.mo.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saspasadena.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjsbr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st.louisschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stleocatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stlouisschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.validatingaffirmingschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waldorfatlanta.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a879687dd000004030047304502203bc97447e6a5ebdf8a9a37735b9eb1ac158b45a1ae642addec70474ae55d7e9a0221009590feb01d88fbb209b21c7e4e077ab9daf77b4d50c313f26d92a70d7be285c400750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a879687d7000004030046304402202f871de328c3e653e27f160882a473d5f391491502fde9a81ddc8e6969b1cc2d022031bbdf5bb55b2031d39ef5e9d3c770d179d6eead3c5cfb011fe9b47dff405ff3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0011d62a9cd1314860314248d44a4789c34c2d904ad09b12b863efaf2c199c9ad4bde4d3ad2a21b786d16b256480c5a1cd0eb16f5c59b167500988bf17ef931c1b1e133aac11f74e27b755bfc4ecaf942a7a48741b9df9bdbc8960ad00c4bd8adbeb79ccd12eb5c8c48c1cfac3171d9cf0b2abb9022ea01b3fd4f190165bf980e5650869c53c30ecb7f88120429f612d245c96aefe5a0f057027fa5c1d8d7aaeb901cdacc8b980daad05f55d5973c54f6b2b12a05a13a837350984d55025429470993bfd92d0799de3b46773dd6afb975571d77bf26bf76a98d65e277cfe418715178474303b5f158b39a3ffc57174ec7551a9e371df964d37672e700036ddfce6