laicharter.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fb:2e:b4:0d:8b:44:b0:e5:aa:a6:47:d4:db:a5:6e:b2:86 was issued on by Let's Encrypt.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=laicharter.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fb:2e:b4:0d:8b:44:b0:e5:aa:a6:47:d4:db:a5:6e:b2:86
Serial Number (int): 346809811268382234941441850512361730781830
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f2:a0:8f:ec:ea:e3:0b:cb:3b:eb:29:e2:41:12:52:2e:a9:74:b2:71
Fingerprint (sha256): a3:c0:32:ea:e5:48:ed:b7:e7:3b:77:3b:17:6b:9f:7d:e9:2e:27:ae:15:e2:7c:ca:77:a0:91:45:e1:30:c4:4c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate laicharter.org

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for laicharter.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.alamo.otsegops.org
admin.aspermontisd.com
admin.carverschool.us
admin.cathedralchapelschool.org
admin.dse.otsegops.org
admin.hemethigh.com
admin.ohs.otsegops.org
admin.oms.otsegops.org
admin.otsegops.org
admin.pacek-8.com
admin.stfinnbarr.org
admin.stjulianacatholiccommunity.org
admin.stjulianaschool.org
admin.valentineschool.org
admin.wms.rsu14.org
admin.wps.rsu14.org
admin.wse.otsegops.org
alamo.otsegops.org
aspermontisd.com
athletics.rsu14.org
bchs.ppsb.org
bcms.ppsb.org
bcps.ppsb.org
bves.ppsb.org
carverschool.us
cathedralchapelschool.org
dse.otsegops.org
eastprimary.kiskiarea.org
hemethigh.com
highschool.kiskiarea.org
hs.ogisd.net
int.ogisd.net
intermediate.kiskiarea.org
jh.ogisd.net
jrsr.mthcs.org
jsms.rsu14.org
jsms.windhamraymondschools.org
kiskiarea.org
laicharter.org
lng.otsegops.org
manchester.rsu14.org
manchester.windhamraymondschools.org
north.mthcs.org
northprimary.kiskiarea.org
ogisd.org
ohs.otsegops.org
oms.otsegops.org
pacek-8.com
pacek-8.org
phs.ppsb.org
pplc.ppsb.org
pri.ogisd.net
res.rsu14.org
res.windhamraymondschools.org
southprimary.kiskiarea.org
spes.ppsb.org
sphs.ppsb.org
stfinnbarr.org
stjulianacatholiccommunity.org
stjulianaschool.org
upperelementary.kiskiarea.org
valentineschool.org
whs.rsu14.org
whs.windhamraymondschools.org
windhamraymondschools.org
wms.rsu14.org
wms.windhamraymondschools.org
wps.rsu14.org
wps.windhamraymondschools.org
wse.otsegops.org
www.aspermontisd.com
www.birminghamcharter.com
www.carverschool.us
www.cathedralchapelschool.org
www.crhss.org
www.cristoreysac.org
www.cristoreysacramento.org
www.hemethigh.com
www.kiskiarea.org
www.laicharter.org
www.mthcs.org
www.ogisd.net
www.ogisd.org
www.otsegops.org
www.pacek-8.com
www.pacek-8.org
www.ppsb.org
www.rsu14.org
www.stfinnbarr.org
www.stjulianacatholiccommunity.org
www.stjulianachurch.org
www.stjulianaschool.org
www.tsd.state.tx.us
www.valentineschool.org
www.windhamraymondschools.org

Other certificates including the domain name laicharter.org

(limited to 100 certificates)
aac.woccisd.net
admin.wjh.wintersisd.org
admin.alamo.otsegops.org
admin.wcms.mpusd.net
admin.alamo.otsegops.org
admin.jsms.rsu14.org
aac.woccisd.net
admin.wjh.wintersisd.org
admin.cathedralchapelschool.org
eastprimary.kiskiarea.org
admin.alamo.otsegops.org
admin.lng.otsegops.org
admin.whs.rsu14.org
aac.woccisd.net
www.rsu14.org
www.otsegops.org
admin.alamo.otsegops.org
ohs.otsegops.org
admin.athletics.rsu14.org
aac.woccisd.net
admin.echs.woccisd.net
www.cristoreysacramento.org
aac.woccisd.net
admin.alamo.otsegops.org
northprimary.kiskiarea.org
admin.alamo.otsegops.org
admin.athletics.rsu14.org
laicharter.org
bchs.ppsb.org
admin.stfinnbarr.org
jsms.rsu14.org
*.laicharter.org
admin.alamo.otsegops.org
admin.rsu14.org
admin.res.rsu14.org
exteraschools.org
aac.woccisd.net
aac.woccisd.net
admin.alamo.otsegops.org
jsms.rsu14.org
aac.woccisd.net
aac.woccisd.net
www.otsegops.org
*.laicharter.org
intermediate.kiskiarea.org
aac.woccisd.net
admin.alamo.otsegops.org
admin.whs.rsu14.org
lng.otsegops.org
aac.woccisd.net
admin.ohs.otsegops.org

Certificate

The complete raw certificate details for laicharter.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346809811268382234941441850512361730781830
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-23 01:05:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-21 01:05:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'laicharter.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2019 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.alamo.otsegops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.aspermontisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.carverschool.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cathedralchapelschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dse.otsegops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hemethigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ohs.otsegops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.oms.otsegops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.otsegops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pacek-8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stfinnbarr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stjulianacatholiccommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stjulianaschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.valentineschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wms.rsu14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wps.rsu14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wse.otsegops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alamo.otsegops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspermontisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athletics.rsu14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bchs.ppsb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcms.ppsb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcps.ppsb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bves.ppsb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carverschool.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cathedralchapelschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dse.otsegops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastprimary.kiskiarea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemethigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highschool.kiskiarea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.ogisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int.ogisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intermediate.kiskiarea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jh.ogisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jrsr.mthcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jsms.rsu14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jsms.windhamraymondschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiskiarea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laicharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lng.otsegops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manchester.rsu14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manchester.windhamraymondschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'north.mthcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northprimary.kiskiarea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ogisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohs.otsegops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oms.otsegops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacek-8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacek-8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phs.ppsb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pplc.ppsb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pri.ogisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'res.rsu14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'res.windhamraymondschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southprimary.kiskiarea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spes.ppsb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sphs.ppsb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stfinnbarr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjulianacatholiccommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjulianaschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upperelementary.kiskiarea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valentineschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whs.rsu14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whs.windhamraymondschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windhamraymondschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wms.rsu14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wms.windhamraymondschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wps.rsu14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wps.windhamraymondschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wse.otsegops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aspermontisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.birminghamcharter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carverschool.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cathedralchapelschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crhss.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cristoreysac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cristoreysacramento.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hemethigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiskiarea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laicharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mthcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ogisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ogisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otsegops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pacek-8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pacek-8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ppsb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rsu14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stfinnbarr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjulianacatholiccommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjulianachurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjulianaschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tsd.state.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valentineschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.windhamraymondschools.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c1c9394760000040300483046022100c9df956cff9a44b70c60d089f7b678b14b3b933404c938cce0cd66ee9103914e022100ff44c28ea7bdff8321e4c3cf6751b8b4c9f6ed5cc1f82c6b1cc4c864fffc50da007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c1c9392a4000004030046304402205e9bb5087b8096b5c44ebe86c0e99d5fbdcfcc6747595f26e72db1078d61279902203dd0987fa948552e74b1ed3aa6ef734298e23956d4d27c3ef3a7355f8aba1303
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001ae1f83c964b92248452b524d0be68a384051dc38d7ed32dc4f1faa7af6df2bf457d51ebfaf484a4229e5c004ed655df0849a85e9f1e084116ccd967a0d698b800f8447897d5113139252395eda2a7271b2f92cee8be9cb2439c73d8cfb5dd0a30b5ac2109d1dc6dca6e29ee934fa0a30a6b16e041dd8842d8ccb141e02864e8c05adb4536a8186269aa0f4668db9be48567e00c8c9ca5feb5cb3645768f39e9749b20e32517c8314b2afa493604a821cd903f0d4d70c56f7ec9c3fe83d46d5eb85ed8b112fc3c9945c37e2c4a24fa2c39534562784a31e9e70cefa2cebb9f73069a3a0cefba2560c3772e344e8b06d985ea81e61c98a6f97fded1e09a325511