acrma12.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:98:83:7a:4b:a0:4d:87:99:4b:66:37:35:5d:ec:3a:d4:17 was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=acrma12.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:98:83:7a:4b:a0:4d:87:99:4b:66:37:35:5d:ec:3a:d4:17
Serial Number (int): 313234541428809172165438128737893949821975
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5c:9d:60:12:d8:67:91:58:1d:c8:61:33:a2:b4:ce:86:b7:b6:ce:ea
Fingerprint (sha256): 9f:04:00:1f:42:d4:68:2f:02:36:7b:3e:6e:ae:1f:4b:73:0f:99:40:2d:9b:a5:61:89:b1:d4:eb:75:9e:8a:b0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate acrma12.org

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acrma12.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acrma12.org
admin.andrews.whittiercity.net
admin.apaches.k12.in.us
admin.arisehighschool.org
admin.baker5j.org
admin.berenacademy.org
admin.carnegieriverside.org
admin.carnegieschools.org
admin.carnegiewhittier.org
admin.casitaiedis.edu.mx
admin.cristoreymiami.org
admin.dexter.whittiercity.net
admin.edwards.whittiercity.net
admin.elpasocatholicschools.org
admin.ghs.lghs.k12.ca.us
admin.hac1.org
admin.hoover.whittiercity.net
admin.jackson.whittiercity.net
admin.lgas.lghs.k12.ca.us
admin.lghs.k12.ca.us
admin.lghs.lghs.k12.ca.us
admin.longfellow.whittiercity.net
admin.msta.whittiercity.net
admin.ojn.apaches.k12.in.us
admin.orangegrove.whittiercity.net
admin.phelan.whittiercity.net
admin.sjwschool.net
admin.sorensen.whittiercity.net
admin.theleadershipacademytyler.com
admin.westwhittier.whittiercity.net
admin.whs.apaches.k12.in.us
admin.wms.apaches.k12.in.us
andrews.whittiercity.net
arisehighschool.org
baker5j.org
berenacademy.org
bhs.baker5j.org
bms.baker5j.org
brooklyn.baker5j.org
carnegieriverside.org
carnegieschools.org
carnegiewhittier.org
casitaiedis.edu.mx
claytonvalley.org
colegiobenedictino.edu.mx
cristoreymiami.org
dexter.whittiercity.net
draper.summitacademyschools.org
eaglecap.baker5j.org
edwards.whittiercity.net
elpasocatholicschools.org
ghs.lghs.k12.ca.us
haines.baker5j.org
hoover.whittiercity.net
jackson.whittiercity.net
keating.baker5j.org
lgas.lghs.k12.ca.us
lghs.lghs.k12.ca.us
lms.lexingtonisd.net
longfellow.whittiercity.net
msta.whittiercity.net
ojn.apaches.k12.in.us
orangegrove.whittiercity.net
phelan.whittiercity.net
sjwschool.net
sorensen.whittiercity.net
theleadershipacademytyler.com
usd458.net
westwhittier.whittiercity.net
whs.apaches.k12.in.us
wms.apaches.k12.in.us
www.acrma12.org
www.apaches.k12.in.us
www.arisehighschool.org
www.baker5j.org
www.carnegieriverside.org
www.carnegieschools.org
www.carnegiewhittier.org
www.casitaiedis.edu.mx
www.colegioguadalupe.edu.mx
www.cristoreymiami.org
www.elpasocatholicschools.org
www.hac1.org
www.lghs.k12.ca.us
www.pcrpanthers.net
www.sjwschool.net
www.theleadershipacademytyler.com
www.usd458.net

Other certificates including the domain name acrma12.org

(limited to 100 certificates)
acrma12.org
acrma12.org
vallecitok12.com
acrma12.org
acrma12.org
acrma12.org
acrma12.org
www.sjwschool.net
acrma12.org
acrma12.org
admin.bhs.baker5j.org
acrma12.org
acrma12.org
www.psusd.k12.az.us
acrma12.org
westwhittier.whittiercity.net
bluffdale.summitacademyschools.org
acrma12.org
acrma12.org
acrma12.org
acrma12.org
ps.shisd.net
acrma12.org
acrma12.org
primarycenter.marsk12.org
acrma12.org
acrma12.org
www.springerschools.com
www.vallecitok12.com
www.georgegervinprepacademy.org
acrma12.org
sbi.baker5j.org
acrma12.org
acrma12.org
acrma12.org
admin.whittiercity.net
acrma12.org
acrma12.org
www.unioncity.k12.ok.us
acrma12.org
acrma12.org
acrma12.org

Certificate

The complete raw certificate details for acrma12.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQbTHb+2z7
rfYVCl+ph5m8FJJOEgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5pV3R4RBg
n18RTHnTD9fS27JxyeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGrmQF3Z/h2
e6StagubO+pVwFzG8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK7wAhJO8e
l2z375LDd2VIwrdWQP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlWZ1AdjOKf
RiY0ckFuu/DYkuvkNKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5Tu7zbek/
MR/JMR9nceWyZ2Mund+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzwWzBvTD8F
7q6ckUbIgpeo7stn7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuaivjW/P+Tm
64XjXNjP9F1W8+5tlcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ4Iudx/o3
Q4E2w6Aud9PYyV05pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/h0omUmCI
DiQVG30eHhb3OIP3bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUnohkUi6ik
D4me6o58sq/IQVmyem1M/E0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313234541428809172165438128737893949821975
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-13 10:52:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-13 10:52:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acrma12.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2183 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acrma12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.andrews.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.apaches.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.arisehighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.berenacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.carnegieriverside.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.carnegieschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.carnegiewhittier.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.casitaiedis.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cristoreymiami.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dexter.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.edwards.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.elpasocatholicschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ghs.lghs.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hac1.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hoover.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jackson.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lgas.lghs.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lghs.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lghs.lghs.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.longfellow.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.msta.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ojn.apaches.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.orangegrove.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.phelan.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sjwschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sorensen.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.theleadershipacademytyler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.westwhittier.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.whs.apaches.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wms.apaches.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrews.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arisehighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berenacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhs.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bms.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brooklyn.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carnegieriverside.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carnegieschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carnegiewhittier.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casitaiedis.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claytonvalley.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colegiobenedictino.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cristoreymiami.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dexter.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'draper.summitacademyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eaglecap.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edwards.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elpasocatholicschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghs.lghs.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haines.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoover.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jackson.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keating.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgas.lghs.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lghs.lghs.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lms.lexingtonisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longfellow.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msta.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ojn.apaches.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orangegrove.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phelan.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjwschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sorensen.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theleadershipacademytyler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usd458.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westwhittier.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whs.apaches.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wms.apaches.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acrma12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apaches.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arisehighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carnegieriverside.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carnegieschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carnegiewhittier.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casitaiedis.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegioguadalupe.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cristoreymiami.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elpasocatholicschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hac1.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lghs.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcrpanthers.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjwschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theleadershipacademytyler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usd458.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000168470e502f000004030046304402206592716454f522c7fc65589ffde4de3827e6c06e939e6e7e10800d3eef3afabb02205d52721bd5397b84500895c9edcdc76cc4e72bebf0dd9e1373c31087c904813400750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000168470e521b00000403004630440220759f5d5935509bfdfdf39c642cad7b51a07d7ef8c864bdb1c48949d8b8c95bd30220652b1a1815f882803ddabbbb7ed8abefb7af9262383fe331b47cff23522d1865
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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