acrma21.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fa:7a:a5:84:68:97:08:68:07:8f:08:65:36:de:e5:7f:9a was issued on by Let's Encrypt.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=acrma21.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fa:7a:a5:84:68:97:08:68:07:8f:08:65:36:de:e5:7f:9a
Serial Number (int): 346570474755547312771427437477957791481754
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 25:96:28:0e:ff:27:54:cf:14:be:66:fa:17:c4:90:fb:ec:f4:63:44
Fingerprint (sha256): 99:07:38:ff:b9:41:34:b2:52:ba:39:e1:9b:4d:1c:66:45:0c:fe:66:99:48:8e:ee:e6:85:df:9d:1b:84:10:1a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate acrma21.org

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acrma21.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acrma21.org
admin.alliancemit.org
admin.cerratohs.org
admin.faithhopeschool.org
admin.horatioschools.org
admin.moanaluahs.org
admin.nimitzelementary.com
admin.paschool.org
admin.sjsmendham.org
admin.spikemountain.org
admin.temeculavalleycharter.com
alliancemit.org
ba.tcs.k12.nc.us
bradoaks.monroviaschools.net
celc.monroviaschools.net
ceres.ewcsd.org
cerratohs.org
clifton.monroviaschools.net
cohs.monroviaschools.net
eastwhittier.ewcsd.org
evergreen.ewcsd.org
faithhopeschool.org
gordonsville.smithcoedu.com
granada.ewcsd.org
hes.lovejoyisd.net
hillview.ewcsd.org
horatioschools.org
lacolima.ewcsd.org
laurel.ewcsd.org
leffingwell.ewcsd.org
les.lovejoyisd.net
lhs.lovejoyisd.net
marinehs.org
mayflower.monroviaschools.net
mentalhealth.lexnyc.org
mhs.monroviaschools.net
moanaluahs.org
monroe.monroviaschools.net
mtpark.monroviaschools.net
mulberry.ewcsd.org
murphyranch.ewcsd.org
nimitzelementary.com
paschool.org
plymouth.monroviaschools.net
rbhs.rbhsd.org
santafe.monroviaschools.net
shs.rbhsd.org
sjsmendham.org
spikemountain.org
temeculavalleycharter.com
vocationalservices.lexnyc.org
wildrose.monroviaschools.net
willrogers.lynwood.k12.ca.us
wilson.lynwood.k12.ca.us
www.2summit.org
www.acrma21.org
www.alliancemit.org
www.chavezmiddle.org
www.chavezms.org
www.ewcsd.k12.ca.us
www.ewcsd.org
www.faithhopeschool.org
www.firebaughhs.org
www.horatioschools.org
www.hoslermiddle.org
www.lexnyc.org
www.lovejoyisd.net
www.lynwoodece.org
www.lynwoodhigh.org
www.lynwoodhs.org
www.lynwoodmiddle.org
www.lynwoodms.org
www.marinehs.org
www.marshallelementary.org
www.moanaluahs.org
www.monroviaschools.net
www.morriscatholic.org
www.nimitzelementary.com
www.northvilleschools.org
www.paschool.org
www.pvpusd.k12.ca.us
www.rbhsd.org
www.rogerselementary.org
www.rooseveltelementaryschool.org
www.rooseveltes.org
www.rosaparkses.org
www.sahs1.org
www.sjsmendham.org
www.spikemountain.org
www.stpaulhs.org
www.tcs.k12.nc.us
www.temeculavalleycharter.com
www.twainelementary.org
www.urbansd.com
www.washingtonbobcats.org
www.washingtonelementaryschool.org
www.wilsonelementaryschool.org

Other certificates including the domain name acrma21.org

(limited to 100 certificates)
acrma21.org
marktwain.lynwood.k12.ca.us
hes.huffmanisd.net
acrma21.org
acrma21.org
pathway.lynwood.k12.ca.us
academia.sanjorgeparroquiayacademia.org
acrma21.org
www.cerratohs.org
admin.cerratohs.org
ceres.ewcsd.org
www.sjsmendham.org
gordonsville.smithcoedu.com
abbott.lynwood.k12.ca.us
acrma21.org
www.bufordacademy.org
acrma21.org
acrma21.org
academia.sanjorgeparroquiayacademia.org
acrma21.org
acrma21.org
acrma21.org
mentalhealth.lexnyc.org
cyc4kids.org
acrma21.org
academia.sanjorgeparroquiayacademia.org
acrma21.org
cerratohs.org
onpoint.svsu.org
admin.carthage.smithcoedu.com
acrma21.org
acrma21.org
admin.stischoolcypress.org
www.faithhopeschool.org
www.acrma21.org
acrma21.org
rbhs.rbhsd.org
www.tcs.k12.nc.us
acrma21.org
vpes.obg3.k12.sc.us
bradoaks.monroviaschools.net

Certificate

The complete raw certificate details for acrma21.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346570474755547312771427437477957791481754
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-11 09:43:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-09 09:43:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acrma21.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2182 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acrma21.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.alliancemit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cerratohs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.faithhopeschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.horatioschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.moanaluahs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nimitzelementary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.paschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sjsmendham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.spikemountain.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.temeculavalleycharter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alliancemit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ba.tcs.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bradoaks.monroviaschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celc.monroviaschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceres.ewcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cerratohs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clifton.monroviaschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cohs.monroviaschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastwhittier.ewcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evergreen.ewcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faithhopeschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gordonsville.smithcoedu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'granada.ewcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hes.lovejoyisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillview.ewcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horatioschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacolima.ewcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laurel.ewcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leffingwell.ewcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'les.lovejoyisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lhs.lovejoyisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marinehs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayflower.monroviaschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mentalhealth.lexnyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhs.monroviaschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moanaluahs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monroe.monroviaschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtpark.monroviaschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mulberry.ewcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'murphyranch.ewcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nimitzelementary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plymouth.monroviaschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbhs.rbhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santafe.monroviaschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shs.rbhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjsmendham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spikemountain.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temeculavalleycharter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vocationalservices.lexnyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wildrose.monroviaschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willrogers.lynwood.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wilson.lynwood.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2summit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acrma21.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alliancemit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chavezmiddle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chavezms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ewcsd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ewcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faithhopeschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firebaughhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.horatioschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoslermiddle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lexnyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lovejoyisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lynwoodece.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lynwoodhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lynwoodhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lynwoodmiddle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lynwoodms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marinehs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marshallelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moanaluahs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monroviaschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morriscatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nimitzelementary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northvilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pvpusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rbhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rogerselementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rooseveltelementaryschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rooseveltes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosaparkses.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sahs1.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjsmendham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spikemountain.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpaulhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tcs.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.temeculavalleycharter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twainelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.urbansd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.washingtonbobcats.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.washingtonelementaryschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wilsonelementaryschool.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016be0a15b220000040300473045022100dfc3bb71d991109230022ecbb12dc87e6e5485e3885e9cd48c0c65a5fe2195d502207554069ef8a75a1f24608c18a64d7a3326bee258ed820597b53ea4d98cb497b7007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016be0a15b44000004030048304602210093d78e1a0ec482a61159ab10e5f3d092e3adafd4335a750dd63fdfbb2e11b5f0022100a19c3591afd9adaea54a11b839b659ca5afb6e9db4348d249c62aaf61196eb5d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002d597a9234b61a8ca52e1936175d805411b1d953f5b813112087a5427c033bd221525a837ab45f56cffe666944de9e19327ec119e5391e584c598bbda41e1d511a04d7d4aa194c40f6d2779f47c5d64f7f4b8e11a5034dd347b0d1794974aa7e599629b18ee2ca1bc25bf509099c5a3406081918a84593205f975eec5dd8e47368d8d9a57818b4aaf7b5186a9d4d453f309b7428ac3d412942694d95dccca9c9b9a4481469f7de8f0defe0f75d2c8c269690ecc5056762099031ac8b65e7ddd3a957d8c7d27dc24f15930c91aa6aa45f24157730c0c5818ee277d59ff879d47000ea22d5c01907d7dc114b8c30710e804c0be0f63532bbd5d663b499dad16222