admin.mtvernon.bcsd.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ee:30:9b:d5:fe:c7:ab:6b:52:2a:51:83:9e:51:ae:7a:c4 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.mtvernon.bcsd.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ee:30:9b:d5:fe:c7:ab:6b:52:2a:51:83:9e:51:ae:7a:c4
Serial Number (int): 342388673212613836710844099906208025967300
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): eb:d4:90:c7:62:ba:c9:db:25:94:ac:52:46:1a:ca:a4:d7:00:b7:d5
Fingerprint (sha256): 95:a9:de:14:25:9b:58:f8:0c:6f:dc:30:ca:6a:fc:39:38:7a:cc:ff:e4:a5:b2:24:55:ac:a4:35:09:ae:fa:54

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate admin.mtvernon.bcsd.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.mtvernon.bcsd.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.bcsd.com
admin.casaloma.bcsd.com
admin.cato.bcsd.com
admin.chavez.bcsd.com
admin.chipman.bcsd.com
admin.collegeheights.bcsd.com
admin.dunnestemacademy.org
admin.eastview.gcschools.net
admin.eissler.bcsd.com
admin.emerson.bcsd.com
admin.euhs.exeter.k12.ca.us
admin.exeter.k12.ca.us
admin.fletcher.bcsd.com
admin.frankwest.bcsd.com
admin.fremont.bcsd.com
admin.garza.bcsd.com
admin.gcschools.net
admin.ghs.gcschools.net
admin.gms.gcschools.net
admin.gsdacademy.com
admin.halhenard.gcschools.net
admin.harding.bcsd.com
admin.harris.bcsd.com
admin.heather.scsdk8.org
admin.hermiston.k12.or.us
admin.highland.gcschools.net
admin.highschoolforartsandbusiness.org
admin.khs.exeter.k12.ca.us
admin.les.exeter.k12.ca.us
admin.mckinley.bcsd.com
admin.mtvernon.bcsd.com
admin.munsey.bcsd.com
admin.noble.bcsd.com
admin.notredameparish.org
admin.owensintermediate.bcsd.com
admin.owensprimary.bcsd.com
admin.pauly.bcsd.com
admin.rhes.exeter.k12.ca.us
admin.roosevelt.bcsd.com
admin.saltfork.org
admin.sierra.bcsd.com
admin.sjboces.org
admin.steinerschool.org
admin.stiern.bcsd.com
admin.tusculumview.gcschools.net
admin.voorhies.bcsd.com
admin.williams.bcsd.com
admin.wms.exeter.k12.ca.us
cas.centerusd.org
casaloma.bcsd.com
cato.bcsd.com
chipman.bcsd.com
collegeheights.bcsd.com
compton.bcsd.com
crammiddleschool.org
dunnestemacademy.org
eissler.bcsd.com
emerson.bcsd.com
euhs.exeter.k12.ca.us
evergreen.bcsd.com
exeter.k12.ca.us
faithmarietta.org
fletcher.bcsd.com
frankwest.bcsd.com
gsdacademy.com
harris.bcsd.com
high.saltfork.org
highschoolforartsandbusiness.org
hills.bcsd.com
horacemann.bcsd.com
jefferson.bcsd.com
juniorhigh.saltfork.org
khs.exeter.k12.ca.us
les.exeter.k12.ca.us
longfellow.bcsd.com
north.saltfork.org
notredameparish.org
owensprimary.bcsd.com
pioneer.bcsd.com
rhes.exeter.k12.ca.us
roosevelt.bcsd.com
saltfork.org
seal.bcsd.com
sjboces.org
south.saltfork.org
steinerschool.org
stiern.bcsd.com
washington.bcsd.com
wayside.bcsd.com
williams.bcsd.com
wms.exeter.k12.ca.us
www.bcsd.com
www.dunnestemacademy.org
www.exeter.k12.ca.us
www.gsdacademy.com
www.highschoolforartsandbusiness.org
www.notredameparish.org
www.saltfork.org
www.sjboces.org
www.steinerschool.org

Other certificates including the domain name bcsd.com

(limited to 100 certificates)
walshcps.org
admin-cuajimalpa.peterson.edu.mx
gutierrez.hcisd.org
bce.slvusd.org
*.bcsd.com
palomares.cv.k12.ca.us
admin.bcsd.com
www.cv.k12.ca.us
gfes.comalisd.org
admin-cuajimalpa.peterson.edu.mx
admin.proctor.cv.k12.ca.us
washington.bcsd.com
sunnyside.goldenruledallas.org
admin.veca.gocats.org
admin.gsdacademy.com
admin.rowlettacademy.org
www.dhs.dover.k12.nh.us
smartfind.bcsd.com
admin.bowie.hcisd.org
admin-cuajimalpa.peterson.edu.mx
www.msd120.org
admin.illinois.goldenruledallas.org
fremont.bcsd.com
www.rowlettacademy.org
admin.bclc.burke.k12.ga.us
Reportcard.bcsd.com
pioneer.bcsd.com
admin.nichols.bcsd.com
chs.comalisd.org
hles.comalisd.org
cses.comalisd.org
fes.comalisd.org
admin.wayside.bcsd.com
desoto.goldenruledallas.org
admin.fuesd.org
www.hilltopprep.org
admin.independent.cv.k12.ca.us
tpes.comalisd.org
www.btaallday.org
leonardeulerd.edu.mx
svms.comalisd.org
bcsd.com
www.wherelifehappens.org
admin.cano.hcisd.org
admin.crma5.org
dover.k12.nh.us
redwood.cv.k12.ca.us
admin.milam.hcisd.org
admin.evanshs.ccboe.net
admin.vannoy.cv.k12.ca.us
admin.compton.bcsd.com
admin.evergreen.bcsd.com
mvms.comalisd.org
116elementary.org
pg.goldenruledallas.org
admin.hills.bcsd.com
admin.alma.cv.k12.ca.us
admin.church.faithmarietta.org
www.teachersupportsite.com
crockett.hcisd.org
admin-cuajimalpa.peterson.edu.mx
voorhies.bcsd.com
bcsd.com
smartfind.bcsd.com
admin.longfellow.bcsd.com
admin.bonham.hcisd.org
burney.hattiesburgpsd.com
ballingerisd.net
sierra.bcsd.com
sequoia.bcsd.com
www.kcgpa.org
chs.comalisd.org
www.leavittms.net
admin.cornerstone.pvpusd.net
admin.redwood.cv.k12.ca.us
longfellow.bcsd.com
www.bce.slvusd.org
admin.athletics.goshenlocalschools.org
rvs.monroe.k12.tn.us
www.notredameparish.org
www.comalisd.org
admin.llc.lex3.org
admin.wayside.bcsd.com
admin.lunadabay.pvpusd.net
sequoia.bcsd.com
charter.slvusd.org
msd120.org
cses.comalisd.org
owensintermediate.bcsd.com
admin.casaloma.bcsd.com
painesville-city.k12.oh.us
admin.alma.cv.k12.ca.us
dvms.comalisd.org
slvusd.org
bcsd.com
stmss.org
admin.sle.slvusd.org
admin.athletics.goshenlocalschools.org
admin.harding.bcsd.com
cdc.comalisd.org

Certificate

The complete raw certificate details for admin.mtvernon.bcsd.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342388673212613836710844099906208025967300
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-27 10:51:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-27 10:51:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.mtvernon.bcsd.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2286 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.casaloma.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cato.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.chavez.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.chipman.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.collegeheights.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dunnestemacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eastview.gcschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eissler.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.emerson.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.euhs.exeter.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.exeter.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fletcher.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.frankwest.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fremont.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.garza.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gcschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ghs.gcschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gms.gcschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gsdacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.halhenard.gcschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.harding.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.harris.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.heather.scsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.highland.gcschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.highschoolforartsandbusiness.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.khs.exeter.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.les.exeter.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mckinley.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mtvernon.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.munsey.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.noble.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.notredameparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.owensintermediate.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.owensprimary.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pauly.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rhes.exeter.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.roosevelt.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.saltfork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sierra.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sjboces.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.steinerschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stiern.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tusculumview.gcschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.voorhies.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.williams.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wms.exeter.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cas.centerusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casaloma.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cato.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chipman.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegeheights.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compton.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crammiddleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dunnestemacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eissler.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emerson.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euhs.exeter.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evergreen.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exeter.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faithmarietta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fletcher.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frankwest.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsdacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harris.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'high.saltfork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highschoolforartsandbusiness.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hills.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horacemann.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jefferson.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juniorhigh.saltfork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khs.exeter.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'les.exeter.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longfellow.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'north.saltfork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notredameparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owensprimary.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pioneer.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhes.exeter.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roosevelt.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saltfork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seal.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjboces.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'south.saltfork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steinerschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stiern.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washington.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wayside.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'williams.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wms.exeter.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dunnestemacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exeter.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gsdacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highschoolforartsandbusiness.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notredameparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saltfork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjboces.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steinerschool.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (239 bytes)
							00ed007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001688f26e349000004030046304402203f100025eb6a7e545d23dfac55315dc76a05b9c5ffd3fdccb2d90622db1f70d902205b973b9f01c43a864901c585cdbacb712b46c5c3c95f24ffe15efdcda79bd4e000740063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001688f26e3760000040300453043021f78e6c23e08c9736f16b611c99322e7d9fda2abae06d2289b65b7f17f4ee0520220521bb493b6f7907b14f6acd7343a34b3f0d0a21dcce7a87d91aceba3c0111db8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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