www.markedtreeschools.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fa:c1:22:03:8b:f1:81:a7:5e:ea:06:99:65:0e:11:1d:b3 was issued on by Let's Encrypt.

With 74 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.markedtreeschools.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fa:c1:22:03:8b:f1:81:a7:5e:ea:06:99:65:0e:11:1d:b3
Serial Number (int): 346664167138729720782946643727793402224051
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 26:52:e1:8a:76:e5:d6:0e:7e:3b:5b:ab:fe:d9:a3:59:c3:ba:25:ad
Fingerprint (sha256): 9d:57:24:7d:64:11:a2:c8:f3:d3:13:4a:f1:89:fe:2d:2e:52:36:81:ce:9f:54:5e:b3:d4:1a:21:18:b0:2f:cb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.markedtreeschools.com

74

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.markedtreeschools.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

activities.madrid.k12.ia.us
admin.activities.madrid.k12.ia.us
admin.cornellsd.org
admin.cse.gatewayk12.org
admin.dss.desotoschools.com
admin.el.madrid.k12.ia.us
admin.es.cornellsd.org
admin.ev.gatewayk12.org
admin.galileogalilei.edu.mx
admin.galtadultschool.com
admin.gatewayk12.org
admin.ghs.gatewayk12.org
admin.gms.gatewayk12.org
admin.hs.cornellsd.org
admin.ideapcs.org
admin.jrsr.madrid.k12.ia.us
admin.k8.pickettk12.net
admin.madrid.k12.ia.us
admin.markedtreeschools.com
admin.msms.gatewayk12.org
admin.palihigh.org
admin.pchs.pickettk12.net
admin.pickettk12.net
admin.ram.gatewayk12.org
admin.ranchitoavees.org
admin.stmarysspokane.com
admin.up.gatewayk12.org
admin.wearelibertyranch.com
admin.youngsvilleacademy.org
cse.gatewayk12.org
dss.desotoschools.com
el.madrid.k12.ia.us
es.cornell.k12.pa.us
es.cornellsd.org
ev.gatewayk12.org
galileogalilei.edu.mx
ghs.gatewayk12.org
gms.gatewayk12.org
hs.cornell.k12.pa.us
hs.cornellsd.org
jrsr.madrid.k12.ia.us
k8.pickettk12.net
msms.gatewayk12.org
parish.stmarysspokane.com
parish.stmarysspokane.org
pchs.pickettk12.net
pdhs.rbusd.org
ram.gatewayk12.org
ranchitoavees.org
school.stmarysspokane.com
school.stmarysspokane.org
stmarysspokane.com
stmarysspokane.org
up.gatewayk12.org
www.admin.grupograven.com.mx
www.athlosreno.org
www.bpsd.us
www.cornell.k12.pa.us
www.cornellsd.org
www.galileogalilei.edu.mx
www.galtadultschool.com
www.gatewayk12.org
www.grupograven.com.mx
www.ideapcs.org
www.madrid.k12.ia.us
www.markedtreeschools.com
www.palihigh.org
www.pickettk12.net
www.ranchitoavees.org
www.stmarysspokane.com
www.stmarysspokane.org
www.wearelibertyranch.com
www.youngsvilleacademy.org
youngsvilleacademy.org

Other certificates including the domain name markedtreeschools.com

(limited to 100 certificates)
markedtreeschools.com
www.ps52si.org
admin.troupisd.org
activities.madrid.k12.ia.us
admin.elementary.troupisd.org
admin.desotoschools.com
markedtreeschools.com
markedtreeschools.com
www.markedtreeschools.com
activities.madrid.k12.ia.us
admin.altavista.rbusd.org
www.overtoncountyschools.net
activities.madrid.k12.ia.us
markedtreeschools.com
admin.gulfstreamschool.org
admin.high.troupisd.org
markedtreeschools.com

Certificate

The complete raw certificate details for www.markedtreeschools.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQbTHb+2z7
rfYVCl+ph5m8FJJOEgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5pV3R4RBg
n18RTHnTD9fS27JxyeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGrmQF3Z/h2
e6StagubO+pVwFzG8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK7wAhJO8e
l2z375LDd2VIwrdWQP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlWZ1AdjOKf
RiY0ckFuu/DYkuvkNKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5Tu7zbek/
MR/JMR9nceWyZ2Mund+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzwWzBvTD8F
7q6ckUbIgpeo7stn7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuaivjW/P+Tm
64XjXNjP9F1W8+5tlcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ4Iudx/o3
Q4E2w6Aud9PYyV05pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/h0omUmCI
DiQVG30eHhb3OIP3bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUnohkUi6ik
D4me6o58sq/IQVmyem1M/E0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346664167138729720782946643727793402224051
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-11 01:18:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-09 01:18:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.markedtreeschools.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1744 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activities.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.activities.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cornellsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cse.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dss.desotoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.el.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.es.cornellsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ev.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.galileogalilei.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.galtadultschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ghs.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gms.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hs.cornellsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ideapcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jrsr.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.k8.pickettk12.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.markedtreeschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.msms.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.palihigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pchs.pickettk12.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pickettk12.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ram.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ranchitoavees.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stmarysspokane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.up.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wearelibertyranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.youngsvilleacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cse.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dss.desotoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'el.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.cornell.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.cornellsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ev.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galileogalilei.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghs.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gms.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.cornell.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.cornellsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jrsr.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k8.pickettk12.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msms.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parish.stmarysspokane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parish.stmarysspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pchs.pickettk12.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdhs.rbusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ram.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranchitoavees.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.stmarysspokane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.stmarysspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysspokane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'up.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.admin.grupograven.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athlosreno.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bpsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornell.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornellsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.galileogalilei.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.galtadultschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grupograven.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ideapcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.markedtreeschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.palihigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pickettk12.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ranchitoavees.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysspokane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wearelibertyranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youngsvilleacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youngsvilleacademy.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016bded2e8b400000403004830460221008b3f6dc62135fb6c944d1ab278294f32bf2bb9fb09fbaa60b0a2802081862819022100b3f9012566930c07f26ef20be160cf6face1adc5ad055f9cbbf9ff8c628cb68f00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016bded2e896000004030046304402207a7c7ad3da3c36c4f59ba95f238817b682cf14988b68ac44ca836ee22017212402205cd89d7c875c4c4a60b73a69918aa1983722ad8760826e63dd3dc8370ff26cf9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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