stmmsa.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ff:26:87:a6:a0:9a:34:31:31:97:97:3b:9a:9d:35:04:f8 was issued on by Let's Encrypt.

With 71 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stmmsa.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ff:26:87:a6:a0:9a:34:31:31:97:97:3b:9a:9d:35:04:f8
Serial Number (int): 348160076363640001124357882564686267090168
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d7:b4:a6:7a:02:2d:77:63:37:cc:f4:4e:e7:43:be:51:d3:c4:19:cd
Fingerprint (sha256): 98:9c:73:69:d4:a2:b9:38:e7:ba:17:3c:7c:56:a6:40:6e:f3:50:7e:84:51:70:2c:df:b3:8a:b6:e1:18:19:c4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate stmmsa.org

71

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stmmsa.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ace.pusd.org
admin.alcott.pusd.org
admin.barfield.pusd.org
admin.bn.durand.k12.mi.us
admin.bookertwashington.kippneworleans.org
admin.bradleyschools.org
admin.centralcityacademy.kippneworleans.org
admin.churchill.hsd153.org
admin.dellagoacademy.org
admin.diamondranch.pusd.org
admin.es.nscougars.com
admin.garey.pusd.org
admin.hes.huntingtonisd.com
admin.hhs.huntingtonisd.com
admin.hs.durand.k12.mi.us
admin.hs.nscougars.com
admin.hubbardisd.com
admin.jeffersonschools.org
admin.jhs.jeffersonschools.org
admin.jms.jeffersonschools.org
admin.kingsley.pusd.org
admin.kit.mynhusd.org
admin.lopez.pusd.org
admin.mesacharter.org
admin.montvue.pusd.org
admin.ms.moodyisd.org
admin.ms.nscougars.com
admin.nbfacademy.org
admin.nscougars.com
admin.parkwest.pusd.org
admin.popcs.org
admin.ranchhills.pusd.org
admin.resedahs.net
admin.sacredheartacademy.org
admin.sanjose.pusd.org
arroyo.pusd.org
bn.durand.k12.mi.us
bookertwashington.kippneworleans.org
centralcityacademy.kippneworleans.org
cfn.edu.mx
diamondpoint.pusd.org
es.nscougars.com
ganesha.pusd.org
hs.durand.k12.mi.us
hs.hpisd.org
hs.moodyisd.org
hs.nscougars.com
jameshart.hsd153.org
jeffersonschools.org
jhs.jeffersonschools.org
jms.jeffersonschools.org
kellogg.pusd.org
kit.mynhusd.org
lincoln.pusd.org
marshall.pusd.org
ms.nscougars.com
nes.jeffersonschools.org
nhuman.edu.mx
nscougars.com
parkwest.pusd.org
plummerpanthers.org
popcs.org
ranchhills.pusd.org
sanjose.pusd.org
ses.jeffersonschools.org
stmmsa.org
www.inspiredteachingschool.org
www.jeffersonschools.org
www.nhuman.edu.mx
www.nscougars.com
www.sacredheartacademy.org

Other certificates including the domain name stmmsa.org

(limited to 100 certificates)
www.bartlettschools.org
admin.bayhaven.org
6gc.mead354.org
admin.bayhaven.org
shepherdstown.mbgsd.org
www.nolafsme.org
stmmsa.org
stmmsa.org
admin.elmwood.mbgsd.org
www.nccs.k12.nc.us
stmmsa.org
ac21.clps.org
admin.bayhaven.org
ac21.clps.org
6gc.mead354.org
ac21.clps.org
admin.bayhaven.org
www.bendist25.org
upperallen.mbgsd.org
admin.cfn.edu.mx
admin.bayhaven.org
portrichmondhs.org
stmmsa.org
admin.portrichmondhs.org
admin.bayhaven.org
admin.bayhaven.org
ms.gsd.wednet.edu
admin.stmmsa.org
admin.bayhaven.org
cet.edu.mx
admin.bayhaven.org
monroe.k12.tn.us
admin.ahs.cherokee.k12.nc.us
moreno.bhusd.k12.ca.us
admin.bayhaven.org
admin.bayhaven.org
admin.bayhaven.org
admin.highschool.mbgsd.org
admin.bayhaven.org
www.mdsummerschool.com
admin.gulfstreamschool.org
admin.fges.davidson.k12.nc.us
stmmsa.org
zoraellisjh.net
www.thomasolaeta.school
admin.bayhaven.org
popejohn.org
stmmsa.org
www.usd465.com
ac21.clps.org
ace.pusd.org
hsp.clps.org
admin.bcca.bibbed.org
crumpton.mpusd.net
admin.broadstreet.mbgsd.org
admin.bcca.bibbed.org
www.colegioedgarmorin.edu.mx
admin.upperallen.mbgsd.org
stmmsa.org
admin.bayhaven.org
ces.shelbycs.org
admin.bayhaven.org
www.stroseschoolwilmington.org
saintdominicschool.com
ac21.clps.org
pes.cherokee.k12.nc.us
stmmsa.org
stmmsa.org
invictusprep.com
admin.bayhaven.org
ac21.clps.org
www.stjosephpomona.org
admin.middleschool.mbgsd.org
invictusprep.org
stmmsa.org

Certificate

The complete raw certificate details for stmmsa.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINbzCCDFegAwIBAgISA/8mh6agmjQxMZeXO5qdNQT4MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA4MjAwNTU3MTVaFw0x
ODExMTgwNTU3MTVaMBUxEzARBgNVBAMTCnN0bW1zYS5vcmcwggIiMA0GCSqGSIb3
DQEBAQUAA4ICDwAwggIKAoICAQCtrIXp7mbejFBtMdv7bPut9hUKX6mHmbwUkk4S
AS2wWeHzgwVeEiXu4Q62pKUwqxHbZ3Nw0C0rUbmlXdHhEGCfXxFMedMP19LbsnHJ
7J+Vd91RftXDhoavIx/wwT5kaGhpA/RdgHdcMauZAXdn+HZ7pK1qC5s76lXAXMbx
UMB2dqGxStseulJ5+JrOLKGF4+QvfNCD86ZpCQrvACEk7x6XbPfvksN3ZUjCt1ZA
/YmNXz3Zh360hk6cCTaPIOW/cxhcpcaKUHKtCVZnUB2M4p9GJjRyQW678NiS6+Q0
qbZ/fNRq/DeyUK6NlYeQgdk2lo23F+yuki1QirlO7vNt6T8xH8kxH2dx5bJnYy6d
35JuB8t/3rA+FUFquuynUc1H4iSjK2vk8w1EHPBbMG9MPwXurpyRRsiCl6juy2ft
vQg1c9iA1PvMVf9Q0JxaP5pon4q7wwpXgQQS5qK+Nb8/5ObrheNc2M/0XVbz7m2V
wmAmEZTITKUJS0BGqE+iNTNCeuHWJRIxE0jaWIngi53H+jdDgTbDoC5309jJXTmk
WAx1Itg1EZBPJBFJpJtDceZ9mL+lCMXJSiGIDv+HSiZSYIgOJBUbfR4eFvc4g/ds
mKxdkrioSuflkOYp1SA0LcZL7LCtMAFiPQ34RSeiGRSLqKQPiZ7qjnyyr8hBWbJ6
bUz8TQIDAQABo4IJgjCCCX4wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQva8hNbCwu
MvIAIP8tTWxa/G66uzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv
BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s
ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s
ZXRzZW5jcnlwdC5vcmcvMIIGhQYDVR0RBIIGfDCCBniCDGFjZS5wdXNkLm9yZ4IV
YWRtaW4uYWxjb3R0LnB1c2Qub3JnghdhZG1pbi5iYXJmaWVsZC5wdXNkLm9yZ4IZ
YWRtaW4uYm4uZHVyYW5kLmsxMi5taS51c4IqYWRtaW4uYm9va2VydHdhc2hpbmd0
b24ua2lwcG5ld29ybGVhbnMub3JnghhhZG1pbi5icmFkbGV5c2Nob29scy5vcmeC
K2FkbWluLmNlbnRyYWxjaXR5YWNhZGVteS5raXBwbmV3b3JsZWFucy5vcmeCGmFk
bWluLmNodXJjaGlsbC5oc2QxNTMub3JnghhhZG1pbi5kZWxsYWdvYWNhZGVteS5v
cmeCG2FkbWluLmRpYW1vbmRyYW5jaC5wdXNkLm9yZ4IWYWRtaW4uZXMubnNjb3Vn
YXJzLmNvbYIUYWRtaW4uZ2FyZXkucHVzZC5vcmeCG2FkbWluLmhlcy5odW50aW5n
dG9uaXNkLmNvbYIbYWRtaW4uaGhzLmh1bnRpbmd0b25pc2QuY29tghlhZG1pbi5o
cy5kdXJhbmQuazEyLm1pLnVzghZhZG1pbi5ocy5uc2NvdWdhcnMuY29tghRhZG1p
bi5odWJiYXJkaXNkLmNvbYIaYWRtaW4uamVmZmVyc29uc2Nob29scy5vcmeCHmFk
bWluLmpocy5qZWZmZXJzb25zY2hvb2xzLm9yZ4IeYWRtaW4uam1zLmplZmZlcnNv
bnNjaG9vbHMub3JnghdhZG1pbi5raW5nc2xleS5wdXNkLm9yZ4IVYWRtaW4ua2l0
Lm15bmh1c2Qub3JnghRhZG1pbi5sb3Blei5wdXNkLm9yZ4IVYWRtaW4ubWVzYWNo
YXJ0ZXIub3JnghZhZG1pbi5tb250dnVlLnB1c2Qub3JnghVhZG1pbi5tcy5tb29k
eWlzZC5vcmeCFmFkbWluLm1zLm5zY291Z2Fycy5jb22CFGFkbWluLm5iZmFjYWRl
bXkub3JnghNhZG1pbi5uc2NvdWdhcnMuY29tghdhZG1pbi5wYXJrd2VzdC5wdXNk
Lm9yZ4IPYWRtaW4ucG9wY3Mub3JnghlhZG1pbi5yYW5jaGhpbGxzLnB1c2Qub3Jn
ghJhZG1pbi5yZXNlZGFocy5uZXSCHGFkbWluLnNhY3JlZGhlYXJ0YWNhZGVteS5v
cmeCFmFkbWluLnNhbmpvc2UucHVzZC5vcmeCD2Fycm95by5wdXNkLm9yZ4ITYm4u
ZHVyYW5kLmsxMi5taS51c4IkYm9va2VydHdhc2hpbmd0b24ua2lwcG5ld29ybGVh
bnMub3JngiVjZW50cmFsY2l0eWFjYWRlbXkua2lwcG5ld29ybGVhbnMub3Jnggpj
Zm4uZWR1Lm14ghVkaWFtb25kcG9pbnQucHVzZC5vcmeCEGVzLm5zY291Z2Fycy5j
b22CEGdhbmVzaGEucHVzZC5vcmeCE2hzLmR1cmFuZC5rMTIubWkudXOCDGhzLmhw
aXNkLm9yZ4IPaHMubW9vZHlpc2Qub3JnghBocy5uc2NvdWdhcnMuY29tghRqYW1l
c2hhcnQuaHNkMTUzLm9yZ4IUamVmZmVyc29uc2Nob29scy5vcmeCGGpocy5qZWZm
ZXJzb25zY2hvb2xzLm9yZ4IYam1zLmplZmZlcnNvbnNjaG9vbHMub3JnghBrZWxs
b2dnLnB1c2Qub3Jngg9raXQubXluaHVzZC5vcmeCEGxpbmNvbG4ucHVzZC5vcmeC
EW1hcnNoYWxsLnB1c2Qub3JnghBtcy5uc2NvdWdhcnMuY29tghhuZXMuamVmZmVy
c29uc2Nob29scy5vcmeCDW5odW1hbi5lZHUubXiCDW5zY291Z2Fycy5jb22CEXBh
cmt3ZXN0LnB1c2Qub3JnghNwbHVtbWVycGFudGhlcnMub3Jngglwb3Bjcy5vcmeC
E3JhbmNoaGlsbHMucHVzZC5vcmeCEHNhbmpvc2UucHVzZC5vcmeCGHNlcy5qZWZm
ZXJzb25zY2hvb2xzLm9yZ4IKc3RtbXNhLm9yZ4Ied3d3Lmluc3BpcmVkdGVhY2hp
bmdzY2hvb2wub3Jnghh3d3cuamVmZmVyc29uc2Nob29scy5vcmeCEXd3dy5uaHVt
YW4uZWR1Lm14ghF3d3cubnNjb3VnYXJzLmNvbYIad3d3LnNhY3JlZGhlYXJ0YWNh
ZGVteS5vcmcwgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEB
MIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYI
KwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGll
ZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNl
IHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xl
dHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzCCAQIGCisGAQQB1nkCBAIEgfMEgfAA
7gB1AMEWSuCnctLUOS3ICsEHcNTwxJvemRpIQMH6B1Fk9jNgAAABZVYflSwAAAQD
AEYwRAIgNfkN1gZSJJVU2hGociRlTmbW5a6XvZ4xosV3Lc+lJkUCICn6pCEHmlXI
gNZlYIXawDNsv9+DzjZ9YkY7RYukZxywAHUAKTxRllTIOWW6qlD8WAfUt2+/WHop
ctykwwz05UVH9HgAAAFlVh+YGwAABAMARjBEAiAU+KMrnvUf7+TyWUCRmC10RNYY
EZGsKg0dOXtyrbR5BQIgHF/+DQF5Opx9N01Aj5QpKPPeoyDEVJ1XoHZj74F6og8w
DQYJKoZIhvcNAQELBQADggEBAHEMTBmc0gZAnBMODQtmhQU3xLbAnQHS0bYDZ/JV
3w2eFx1laYhl93jA8tkkCeVoQ5hx319h0MMwheOviQ2NGWz9nN99NNyLd4Nj5jyE
mr+CIZ+7rJB7l5XJAUZO4xfJbd6dteIRAEy/WDjK3+cDAf8zPeqzWTHZFey26ae4
AoXMSMtRxii7lvDI02VXap0qIiXSAFrjo/P3Gbh+6vxro9RkqYlW1j9WdbFcr60+
imyRry/Oh95n0Nc9Ty0TXq0aReKT2kWCDmc74+vhWygdjYB6rVyO6+3vVx7hQL07
Zlw5pmKv/9zko76xa3hF33iEaBtqLY/jGiC1VFSeaXP8BnI=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 348160076363640001124357882564686267090168
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-20 05:57:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-18 05:57:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stmmsa.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1660 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ace.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.alcott.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.barfield.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bn.durand.k12.mi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bookertwashington.kippneworleans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.centralcityacademy.kippneworleans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.churchill.hsd153.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dellagoacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.diamondranch.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.es.nscougars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.garey.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hes.huntingtonisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hhs.huntingtonisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hs.durand.k12.mi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hs.nscougars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hubbardisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jeffersonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jhs.jeffersonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jms.jeffersonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kingsley.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kit.mynhusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lopez.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mesacharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.montvue.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ms.moodyisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ms.nscougars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nbfacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nscougars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.parkwest.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.popcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ranchhills.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.resedahs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sacredheartacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sanjose.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arroyo.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bn.durand.k12.mi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookertwashington.kippneworleans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralcityacademy.kippneworleans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfn.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondpoint.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.nscougars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ganesha.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.durand.k12.mi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.hpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.moodyisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.nscougars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jameshart.hsd153.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeffersonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhs.jeffersonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jms.jeffersonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kellogg.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kit.mynhusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincoln.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marshall.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.nscougars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nes.jeffersonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhuman.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nscougars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkwest.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plummerpanthers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranchhills.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanjose.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ses.jeffersonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmmsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inspiredteachingschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jeffersonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhuman.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nscougars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredheartacademy.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f6336000000165561f952c0000040300463044022035f90dd60652249554da11a87224654e66d6e5ae97bd9e31a2c5772dcfa52645022029faa421079a55c880d6656085dac0336cbfdf83ce367d62463b458ba4671cb0007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165561f981b0000040300463044022014f8a32b9ef51fefe4f2594091982d7444d6181191ac2a0d1d397b72adb4790502201c5ffe0d01793a9c7d374d408f942928f3dea320c4549d57a07663ef817aa20f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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