admin.hilohs.k12.hi.us

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:56:a0:16:9d:46:03:92:79:3b:d4:bf:e0:72:41:ae:03:e1 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.hilohs.k12.hi.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:56:a0:16:9d:46:03:92:79:3b:d4:bf:e0:72:41:ae:03:e1
Serial Number (int): 290813935250223306783614272055640220107745
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 12:a4:93:70:0c:4a:5e:96:7d:69:43:07:46:42:ad:0c:c5:db:07:cf
Fingerprint (sha256): a3:33:8d:ce:b0:aa:34:9c:21:3f:9d:eb:21:27:97:ef:70:af:74:d3:44:ee:64:27:01:ad:76:7a:9d:19:8f:b8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate admin.hilohs.k12.hi.us

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.hilohs.k12.hi.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adairsvillehigh.bartow.k12.ga.us
admin.akinseagles.org
admin.bpsd.k12.ca.us
admin.clhscadets.com
admin.emery.bpsd.k12.ca.us
admin.gilbert.bpsd.k12.ca.us
admin.guerrerothompson.org
admin.haaheo.org
admin.halb.org
admin.hickam.k12.hi.us
admin.hilohs.k12.hi.us
admin.johnadamsacademy.org
admin.kalama.k12.hi.us
admin.lecontems.net
admin.lincolnparkpublicschools.com
admin.missionviejochristian.com
admin.newhope-christianschool.org
admin.pendleton.bpsd.k12.ca.us
admin.ramonaschool.org
admin.stjoebruins.com
admin.stpatrickcatholicschool.org
admin.tekoacharterschool.org
admin.valenciavikings.com
admin.wheeler.k12.hi.us
admin.whitaker.bpsd.k12.ca.us
akinseagles.org
bartowacademy.bartow.k12.ga.us
bpsd.k12.ca.us
carjes.sanjacinto.k12.ca.us
clhscadets.com
corey.bpsd.k12.ca.us
daes.sanjacinto.k12.ca.us
ehes.sanjacinto.k12.ca.us
emery.bpsd.k12.ca.us
gilbert.bpsd.k12.ca.us
guerrerothompson.org
haaheo.org
hickam.k12.hi.us
iroquois.k12.hi.us
jaees.sanjacinto.k12.ca.us
johnadamsacademy.com
johnadamsacademy.org
kahuluischool.k12.hi.us
konawaenamiddle.k12.hi.us
lecontems.net
lee.tkschools.org
lincoln.johnadamsacademy.com
lincoln.johnadamsacademy.org
mces.sanjacinto.k12.ca.us
mcfall.tkschools.org
missionviejochristian.com
mvhs.sanjacinto.k12.ca.us
mvms.sanjacinto.k12.ca.us
newhope-christianschool.org
nmms.sanjacinto.k12.ca.us
page.tkschools.org
pendleton.bpsd.k12.ca.us
phes.sanjacinto.k12.ca.us
ramonaschool.org
roseville.johnadamsacademy.com
roseville.johnadamsacademy.org
sjes.sanjacinto.k12.ca.us
sjhs.sanjacinto.k12.ca.us
sjla.sanjacinto.k12.ca.us
stjoebruins.com
stpatrickcatholicschool.org
tkhs.tkschools.org
tkms.tkschools.org
valenciavikings.com
whitaker.bpsd.k12.ca.us
woodland.bartow.k12.ga.us
www.akinseagles.org
www.bishopdubourg.org
www.bmhs.us
www.bpsd.k12.ca.us
www.clhscadets.com
www.cpdlf.org
www.cristoreydallas.org
www.cristoreysanjose.org
www.guerrerothompson.org
www.haaheo.org
www.haledon.org
www.hickam.k12.hi.us
www.hilohs.k12.hi.us
www.johnadamsacademy.com
www.johnadamsacademy.org
www.kalama.k12.hi.us
www.lecontems.net
www.missionviejochristian.com
www.mrhs.net
www.ourshepherd.net
www.ppas.org
www.ramonaschool.org
www.sanjacinto.k12.ca.us
www.stjoebruins.com
www.stpatrickcatholicschool.org
www.tkschools.org
www.valenciavikings.com
www.wheeler.k12.hi.us

Other certificates including the domain name k12.hi.us

(limited to 100 certificates)
acsaregion13.org
www.colegioguadalupedetulpetlac.edu.mx
www.kaaawaschool.k12.hi.us
www.kis.k12.hi.us
registration.k12.hi.us
www.cks.k12.hi.us
lilinote.k12.hi.us
www.whis.k12.hi.us
*.budget.k12.hi.us
kahuluischool.k12.hi.us
www.ecsss.k12.hi.us
admin.allsaintsjupiter.org
pueo1.k12.hi.us
hs.unitedsd.net
www.rlsms.k12.hi.us
waiakeahigh.k12.hi.us
lokelani.k12.hi.us
CSDPMT2.k12.hi.us
www.maunawili.k12.hi.us
www.kulael.k12.hi.us
ociss1.k12.hi.us
admin.ahuimanu.k12.hi.us
rostersonline.k12.hi.us
mckinley.k12.hi.us
admin.sallasmahone.gocats.org
wes.bibbed.org
mauido2.k12.hi.us
www.kulael.k12.hi.us
www.pope.k12.hi.us
www.kuhioschool.k12.hi.us
kuhioschool.k12.hi.us
www.kuhioschool.k12.hi.us
0-3.texasdhhresources.org
admin.alhs.nyc
www.lehua.k12.hi.us
mokulele.k12.hi.us
m.ecsssonline.k12.hi.us
www.lihikaielementary.k12.hi.us
second.exteraschools.org
www.oahornets.org
www.cristoreysandiego.org
www.maunawili.k12.hi.us
lotusnotes.k12.hi.us
www.ewa.k12.hi.us
traveler3.k12.hi.us
admin.akinseagles.org
admin.akinseagles.org
aliamanu.k12.hi.us
admin.newbernmiddle.gocats.org
admin.lorena.exteraschools.org
www.kulael.k12.hi.us
admin.ahs.ardmoreschools.org
www.ewa.k12.hi.us
kauaido1.k12.hi.us
www.helemano.k12.hi.us
www.doepassword.k12.hi.us
www.maunawili.k12.hi.us
servicelogs.demo.ecsssonline.k12.hi.us
academywest.hamadyhawks.net
hawdo1.k12.hi.us
admin.ahs.ardmoreschools.org
lotusnotes.k12.hi.us
www.ewa.k12.hi.us
admin.alhs.nyc
admin.ahs.ardmoreschools.org
admin.allenparkschools.com
sunset.k12.hi.us
hphs.flo2.k12.sc.us
www.kapalama.k12.hi.us
admin.allsaintsjupiter.org
whitaker.bpsd.k12.ca.us
www.kulael.k12.hi.us
admin.milmauka.k12.hi.us
admin.mokapu.k12.hi.us
www.pope.k12.hi.us
admin.sd925.org
kekahaschool.k12.hi.us
admin.aechs.mcallenisd.org
ehr.k12.hi.us
admin.calmecaacademy.com
www.kauluwela.k12.hi.us
www.kuhioschool.k12.hi.us
admin.adulteducation.pleasantonusd.net
www.fernschool.k12.hi.us
admin.allsaintsjupiter.org
www.rlsms.k12.hi.us
waiakeahigh.k12.hi.us
www.kaimiloa.k12.hi.us
digital808storytellers.k12.hi.us
standardstoolkit.k12.hi.us
admin.alc.ucboe.us
barbers.k12.hi.us
nes.k12.hi.us
lotusnotes.k12.hi.us
www.doepassword.k12.hi.us
ssesonline.k12.hi.us
puukukui.k12.hi.us
pauoa.k12.hi.us
www.kaimiloa.k12.hi.us
lokelani.k12.hi.us

Certificate

The complete raw certificate details for admin.hilohs.k12.hi.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290813935250223306783614272055640220107745
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-22 10:57:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-23 10:57:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.hilohs.k12.hi.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2388 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adairsvillehigh.bartow.k12.ga.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.akinseagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bpsd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.clhscadets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.emery.bpsd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gilbert.bpsd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.guerrerothompson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.haaheo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.halb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hickam.k12.hi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hilohs.k12.hi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.johnadamsacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kalama.k12.hi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lecontems.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lincolnparkpublicschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.missionviejochristian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.newhope-christianschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pendleton.bpsd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ramonaschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stjoebruins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stpatrickcatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tekoacharterschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.valenciavikings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wheeler.k12.hi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.whitaker.bpsd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akinseagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bartowacademy.bartow.k12.ga.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bpsd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carjes.sanjacinto.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clhscadets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corey.bpsd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daes.sanjacinto.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehes.sanjacinto.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emery.bpsd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gilbert.bpsd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guerrerothompson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haaheo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hickam.k12.hi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iroquois.k12.hi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaees.sanjacinto.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnadamsacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnadamsacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kahuluischool.k12.hi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konawaenamiddle.k12.hi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lecontems.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lee.tkschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincoln.johnadamsacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincoln.johnadamsacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mces.sanjacinto.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcfall.tkschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missionviejochristian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvhs.sanjacinto.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvms.sanjacinto.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newhope-christianschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmms.sanjacinto.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'page.tkschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pendleton.bpsd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phes.sanjacinto.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramonaschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roseville.johnadamsacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roseville.johnadamsacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjes.sanjacinto.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjhs.sanjacinto.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjla.sanjacinto.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjoebruins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpatrickcatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tkhs.tkschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tkms.tkschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valenciavikings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitaker.bpsd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodland.bartow.k12.ga.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akinseagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bishopdubourg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmhs.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bpsd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clhscadets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpdlf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cristoreydallas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cristoreysanjose.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guerrerothompson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haaheo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haledon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hickam.k12.hi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hilohs.k12.hi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnadamsacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnadamsacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kalama.k12.hi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lecontems.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missionviejochristian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mrhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourshepherd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ppas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ramonaschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanjacinto.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjoebruins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpatrickcatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tkschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valenciavikings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wheeler.k12.hi.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001691511556c0000040300483046022100bc87b36bbf005d99014df5597ace3482f740412c191cf00d838f0a1505fccaf2022100d6cff963e8087ef2bebfce43f8445d5e2fed659e2e2a648c34e3c67e22e9f5d400770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169151155bc0000040300483046022100be9bcf3c94fd2501ff3e09c9b024bddadb631c611d3ba6d95e9730c8f13e0e430221009994fa898f1e0586482df224c143eb461fdf85e2307ffdbe67bb98617cb39d86
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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