bcsdk12.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:32:89:c6:d5:09:ee:8e:30:99:f9:c9:ae:9c:98:0c:e4:d1 was issued on by Let's Encrypt.

With 45 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bcsdk12.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:32:89:c6:d5:09:ee:8e:30:99:f9:c9:ae:9c:98:0c:e4:d1
Serial Number (int): 278534112772468314853250686357917599065297
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f8:ab:e3:92:56:30:fa:9b:30:ba:48:59:06:c2:1d:81:7b:6d:03:a0
Fingerprint (sha256): 9a:2d:01:ea:c7:bc:bd:a4:41:d5:90:92:6f:3f:14:76:c8:74:21:3a:fe:2b:4b:0e:b0:8e:cb:f1:d5:dc:52:74

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bcsdk12.org

45

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bcsdk12.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.adultlearning.sunrisesd.ca
admin.anola.sunrisesd.ca
admin.bbhs.bbrook.org
admin.beausejour.sunrisesd.ca
admin.centennial.sunrisesd.ca
admin.chuckey.greenek12.org
admin.colonies.sunrisesd.ca
admin.ecoledugald.sunrisesd.ca
admin.edward.sunrisesd.ca
admin.friendshaverford.org
admin.gillis.sunrisesd.ca
admin.harrison.pusd.org
admin.hazelridge.sunrisesd.ca
admin.healthystartacademy.com
admin.lacdubonnet.sunrisesd.ca
admin.oakbank.sunrisesd.ca
admin.powerview.sunrisesd.ca
admin.sci.sunrisesd.ca
admin.sms.sunrisesd.ca
admin.sunrisesd.ca
admin.whitemouth.sunrisesd.ca
adultlearning.sunrisesd.ca
anola.sunrisesd.ca
bbel.bbrook.org
bcsdk12.org
beausejour.sunrisesd.ca
centennial.sunrisesd.ca
colonies.sunrisesd.ca
ecoledugald.sunrisesd.ca
edward.sunrisesd.ca
friendshaverford.org
gillis.sunrisesd.ca
hazelridge.sunrisesd.ca
lacdubonnet.sunrisesd.ca
oakbank.sunrisesd.ca
powerview.sunrisesd.ca
sci.sunrisesd.ca
sess.sd53.bc.ca
sms.sunrisesd.ca
sunrisesd.ca
whitemouth.sunrisesd.ca
www.arcataschooldistrict.org
www.bbrook.org
www.healthystartacademy.org
www.sunrisesd.ca

Other certificates including the domain name bcsdk12.org

(limited to 100 certificates)
easycare.ch.fcm.travel
admin.antonian.org
www.colingles.edu.mx
easycare.ch.fcm.travel
komarek94.org
colegiofrancoingles.edu.mx
easycare.ch.fcm.travel
admin.adultlearning.sunrisesd.ca
admin.hs.wvsd208.org
castle.sebastopolschools.org
easycare.ch.fcm.travel
admin.bhs.bcsdk12.org
admin.agu.ealas.org
easycare.ch.fcm.travel
bms.bcsdk12.org
ps.bsd29j.com
adams.cleburne.k12.tx.us
bhs.bcsdk12.org
www.sanjoseprep.org
easycare.ch.fcm.travel
bes.bcsdk12.org
admin.bhs.bcsdk12.org
easycare.ch.fcm.travel
bcsdk12.org
admin.agu.ealas.org
admin.agu.ealas.org
admin.keillerleaders.org
www.bcsdk12.org
easycare.ch.fcm.travel
*.bcsdk12.org
www.grandville.k12.mi.us
bcsdk12.org
www.holynamesf.com
admin.cole.eastsideusd.org
www.stnorbertschool.org
easycare.ch.fcm.travel
www.grandville.k12.mi.us
brookhaven.sebastopolschools.org
beek9.bcsdk12.org
admin.agu.ealas.org
admin.adultlearning.sunrisesd.ca
admin.adultlearning.sunrisesd.ca
easycare.ch.fcm.travel
admin.rsu14.org
www.watongapublicschools.com
adams.cleburne.k12.tx.us
academyofthecanyons.net
www.unionsquareacademy.org
easycare.ch.fcm.travel
itchome.lpisd.org
www.ciudaddelosninoscr.org
admin.adultlearning.sunrisesd.ca
jh.iasd.cc
sa.snowlineschools.com
admin.bme.snowlineschools.com
bcsdk12.org
bcsdk12.org
*.bcsdk12.org
adams.cleburne.k12.tx.us
adams.cleburne.k12.tx.us
bcsdk12.org
beek9.bcsdk12.org
preschool.shelbycs.org
bcsdk12.org
adams.cleburne.k12.tx.us
sachs.org
adams.cleburne.k12.tx.us
academyofthecanyons.net
admin.antonian.org
admin.antonian.org
samuelgompersms.net
easycare.ch.fcm.travel
lgusd.org
bhs.bcsdk12.org
admin.agu.ealas.org
bcsdk12.org
web.euroamericano.edu.mx
admin.agu.ealas.org
admin.aes.lammersvilleschooldistrict.net
northside.wisd.org
castle.sebastopolschools.org
admin.ike.iasd.cc
admin.antonian.org
easycare.ch.fcm.travel
ca.arrowacademy.org
academyofthecanyons.net
cranburyschool.org
adams.cleburne.k12.tx.us
adams.cleburne.k12.tx.us
easycare.ch.fcm.travel
doe.as
easycare.ch.fcm.travel
admin.kauffmanschool.org
newkcp.org
beek9.bcsdk12.org
admin.northside.wisd.org
ches.bcsdk12.org
adams.cleburne.k12.tx.us
easycare.ch.fcm.travel
www.sainte-school.org

Certificate

The complete raw certificate details for bcsdk12.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQbTHb+2z7
rfYVCl+ph5m8FJJOEgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5pV3R4RBg
n18RTHnTD9fS27JxyeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGrmQF3Z/h2
e6StagubO+pVwFzG8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK7wAhJO8e
l2z375LDd2VIwrdWQP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlWZ1AdjOKf
RiY0ckFuu/DYkuvkNKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5Tu7zbek/
MR/JMR9nceWyZ2Mund+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzwWzBvTD8F
7q6ckUbIgpeo7stn7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuaivjW/P+Tm
64XjXNjP9F1W8+5tlcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ4Iudx/o3
Q4E2w6Aud9PYyV05pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/h0omUmCI
DiQVG30eHhb3OIP3bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUnohkUi6ik
D4me6o58sq/IQVmyem1M/E0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278534112772468314853250686357917599065297
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-09 00:56:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-08 00:56:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bcsdk12.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.adultlearning.sunrisesd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.anola.sunrisesd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bbhs.bbrook.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.beausejour.sunrisesd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.centennial.sunrisesd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.chuckey.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.colonies.sunrisesd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ecoledugald.sunrisesd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.edward.sunrisesd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.friendshaverford.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gillis.sunrisesd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.harrison.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hazelridge.sunrisesd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.healthystartacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lacdubonnet.sunrisesd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.oakbank.sunrisesd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.powerview.sunrisesd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sci.sunrisesd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sms.sunrisesd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sunrisesd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.whitemouth.sunrisesd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adultlearning.sunrisesd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anola.sunrisesd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbel.bbrook.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beausejour.sunrisesd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centennial.sunrisesd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colonies.sunrisesd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecoledugald.sunrisesd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edward.sunrisesd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friendshaverford.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gillis.sunrisesd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hazelridge.sunrisesd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacdubonnet.sunrisesd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oakbank.sunrisesd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powerview.sunrisesd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sci.sunrisesd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sess.sd53.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms.sunrisesd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunrisesd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitemouth.sunrisesd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arcataschooldistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbrook.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthystartacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunrisesd.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000165bc0bcde80000040300473045022100ca67e28f94760b414649145fec3914afd7e0e796f3e074aa21214c5d55788c6502200b0b5ff17acfb2f61fef5d36570005e432b3d2643ab241d02645ffa0f64eaed5007600a4501269055a15545e6211ab37bc103f62ae5576a45e4b1714453e1b22106a2500000165bc0bcd1a0000040300473045022069ab58af7e86f6ae63ae77cc468954e831e9cad0e820d521d2eb041de82264dc022100d3af2fed27617827bb915ae9a73fcfd3a8c58d3261377ce79c63aab06e7eb5eb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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