admin.cfh.edu.mx

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c9:47:cb:10:af:da:7b:ff:e6:61:43:92:79:c0:c2:3e:99 was issued on by Let's Encrypt.

With 69 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.cfh.edu.mx

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c9:47:cb:10:af:da:7b:ff:e6:61:43:92:79:c0:c2:3e:99
Serial Number (int): 329829043108803482429887821155024303701657
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3d:d2:27:c1:e0:d4:de:e8:ca:6c:7b:cf:94:2a:22:88:87:3d:93:2f
Fingerprint (sha256): a2:d9:4d:b7:11:63:5e:58:66:53:cf:ac:64:43:eb:f1:29:d8:62:92:d0:81:8a:ba:52:76:8a:d9:1d:40:5a:b2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate admin.cfh.edu.mx

69

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.cfh.edu.mx

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.cfh.edu.mx
admin.church.spxtulsa.org
admin.fullbrightelementary.org
admin.fulton.northbergen.k12.nj.us
admin.jaddams.org
admin.kennedy.northbergen.k12.nj.us
admin.lincoln.northbergen.k12.nj.us
admin.lincolnparkhs.org
admin.mckinley.northbergen.k12.nj.us
admin.nbhs.northbergen.k12.nj.us
admin.pinnaclecharter.org
admin.ps086.com
admin.school.spxtulsa.org
admin.sfrschool.org
arvin.kernhigh.org
bakersfield.kernhigh.org
bas.kernhigh.org
centennial.kernhigh.org
centralvalley.kernhigh.org
east.kernhigh.org
foothill.kernhigh.org
franklin.northbergen.k12.nj.us
frontier.kernhigh.org
fullbrightelementary.org
goldenvalley.kernhigh.org
highland.kernhigh.org
horacemann.northbergen.k12.nj.us
independence.kernhigh.org
jaddams.org
kennedy.northbergen.k12.nj.us
kernvalley.kernhigh.org
liberty.kernhigh.org
lincoln.northbergen.k12.nj.us
lincolnparkhs.org
miramonte.kernhigh.org
nbhs.northbergen.k12.nj.us
north.kernhigh.org
northbergen.k12.nj.us
nueva.kernhigh.org
pathwaytomyfuture.com
pathwaytomyfuture.net
pathwaytomyfuture.org
pinnaclecharter.org
ps086.com
ridgeview.kernhigh.org
roc.kernhigh.org
school.spxtulsa.org
shafter.kernhigh.org
south.kernhigh.org
stockdale.kernhigh.org
sunnybraemiddleschool.org
tierradelsol.kernhigh.org
vista.kernhigh.org
vistawest.kernhigh.org
wellness.kernhigh.org
west.kernhigh.org
www.cfh.edu.mx
www.fullbrightelementary.org
www.highlands.edu.mx
www.jaddams.org
www.lincolnparkhs.org
www.northbergen.k12.nj.us
www.pathwaytomyfuture.com
www.pathwaytomyfuture.net
www.pathwaytomyfuture.org
www.pinnaclecharter.org
www.ps086.com
www.sfrschool.org
www.sunnybraemiddleschool.org

Other certificates including the domain name cfh.edu.mx

(limited to 100 certificates)
admin.arvin.kernhigh.org
lapetiteboutique.cfh.edu.mx
cte.kernhigh.org
admin.arvin.kernhigh.org
admin.fulton.northbergen.k12.nj.us
www.ps086.com
ventureacademy.pylusd.org
admin.bas.kernhigh.org
cfh.edu.mx
admin.spxtulsa.org
www.sfrschool.org
admin.arvin.kernhigh.org
cfh.edu.mx
cfh.edu.mx
admin.church.spxtulsa.org
roc.kernhigh.org
admin.ajshs.asd.k12.pa.us
www.lincolnparkhs.org
cfh.edu.mx
admin.cfh.edu.mx
sfrschool.org
rembrandt-secondary.vanguardacademy.education
cfh.edu.mx
admin.arvin.kernhigh.org
admin.franklin.northbergen.k12.nj.us
cfh.edu.mx
admin.ajshs.asd.k12.pa.us
admin.arvin.kernhigh.org
admin.arvin.kernhigh.org
admin.cfh.edu.mx
admin.ajshs.asd.k12.pa.us
ps086.com
admin.arvin.kernhigh.org
admin.arvin.kernhigh.org
cfh.edu.mx
admin.cfh.edu.mx
admin.dimensions.org
admin.stockdale.kernhigh.org
admin.cfh.edu.mx
cfh.edu.mx
admin.arvin.kernhigh.org
admin.arvin.kernhigh.org
admin.arvin.kernhigh.org
admin.arvin.kernhigh.org
kennedy.northbergen.k12.nj.us
admin.arvin.kernhigh.org
pma.portervilleschools.org
admin.goldenvalley.kernhigh.org
admin.arvin.kernhigh.org

Certificate

The complete raw certificate details for admin.cfh.edu.mx in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQbTHb+2z7
rfYVCl+ph5m8FJJOEgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5pV3R4RBg
n18RTHnTD9fS27JxyeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGrmQF3Z/h2
e6StagubO+pVwFzG8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK7wAhJO8e
l2z375LDd2VIwrdWQP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlWZ1AdjOKf
RiY0ckFuu/DYkuvkNKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5Tu7zbek/
MR/JMR9nceWyZ2Mund+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzwWzBvTD8F
7q6ckUbIgpeo7stn7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuaivjW/P+Tm
64XjXNjP9F1W8+5tlcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ4Iudx/o3
Q4E2w6Aud9PYyV05pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/h0omUmCI
DiQVG30eHhb3OIP3bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUnohkUi6ik
D4me6o58sq/IQVmyem1M/E0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329829043108803482429887821155024303701657
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-18 09:44:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-16 09:44:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.cfh.edu.mx'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1682 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cfh.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.church.spxtulsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fullbrightelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fulton.northbergen.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jaddams.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kennedy.northbergen.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lincoln.northbergen.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lincolnparkhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mckinley.northbergen.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nbhs.northbergen.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pinnaclecharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ps086.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.school.spxtulsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sfrschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arvin.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakersfield.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bas.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centennial.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralvalley.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'east.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foothill.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franklin.northbergen.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frontier.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fullbrightelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldenvalley.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highland.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horacemann.northbergen.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'independence.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaddams.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kennedy.northbergen.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kernvalley.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liberty.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincoln.northbergen.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincolnparkhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miramonte.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbhs.northbergen.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'north.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northbergen.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nueva.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pathwaytomyfuture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pathwaytomyfuture.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pathwaytomyfuture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinnaclecharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps086.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ridgeview.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roc.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.spxtulsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shafter.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'south.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stockdale.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunnybraemiddleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tierradelsol.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vista.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vistawest.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellness.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'west.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cfh.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fullbrightelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highlands.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jaddams.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lincolnparkhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northbergen.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pathwaytomyfuture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pathwaytomyfuture.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pathwaytomyfuture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pinnaclecharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps086.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfrschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunnybraemiddleschool.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016aca8b09ed000004030047304502207b8bd7eee8fbad6006500a3a97b5e6175c3a4665e436e906d3a4bf6c94a89b1c022100a773c29d82e978a25df134f8b4e0d938f4f4c7040eedde042bcb4fd3593c7a30007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016aca8b09de0000040300483046022100b8d2b7ed36b1e6f369ff12b91c973c6a41847be989412220a0cdf30686acd9920221008ac34b662c01791c8825c34d9fedbf52355dba3ac28898f0d8d16917cb42ccc3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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