bchs.ppsb.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:67:f8:f9:6e:03:16:f8:b8:94:c9:79:63:e5:c7:ce:ad:41 was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bchs.ppsb.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:67:f8:f9:6e:03:16:f8:b8:94:c9:79:63:e5:c7:ce:ad:41
Serial Number (int): 296716885244319686229864873699767248399681
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 30:92:9a:2f:6c:06:d4:7e:91:0b:eb:af:f0:75:cc:37:80:a8:9b:2a
Fingerprint (sha256): a4:f6:c7:87:3e:a4:44:01:1d:0f:15:ad:43:fc:0e:d1:76:12:4c:35:89:bb:ab:4b:e0:51:62:1e:53:fc:e5:82

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bchs.ppsb.org

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bchs.ppsb.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.alamo.otsegops.org
admin.aspermontisd.com
admin.carverschool.us
admin.cathedralchapelschool.org
admin.dse.otsegops.org
admin.hemethigh.com
admin.ohs.otsegops.org
admin.oms.otsegops.org
admin.otsegops.org
admin.pacek-8.com
admin.stfinnbarr.org
admin.stjulianacatholiccommunity.org
admin.stjulianaschool.org
admin.valentineschool.org
admin.wms.rsu14.org
admin.wps.rsu14.org
admin.wse.otsegops.org
alamo.otsegops.org
aspermontisd.com
athletics.rsu14.org
bchs.ppsb.org
bcms.ppsb.org
bcps.ppsb.org
bves.ppsb.org
carverschool.us
cathedralchapelschool.org
dse.otsegops.org
eastprimary.kiskiarea.org
hemethigh.com
highschool.kiskiarea.org
hs.ogisd.net
int.ogisd.net
intermediate.kiskiarea.org
jh.ogisd.net
jrsr.mthcs.org
jsms.rsu14.org
jsms.windhamraymondschools.org
kiskiarea.org
lng.otsegops.org
manchester.rsu14.org
manchester.windhamraymondschools.org
north.mthcs.org
northprimary.kiskiarea.org
ogisd.org
ohs.otsegops.org
oms.otsegops.org
pacek-8.com
pacek-8.org
phs.ppsb.org
pplc.ppsb.org
pri.ogisd.net
res.rsu14.org
res.windhamraymondschools.org
southprimary.kiskiarea.org
spes.ppsb.org
sphs.ppsb.org
stfinnbarr.org
stjulianacatholiccommunity.org
stjulianaschool.org
upperelementary.kiskiarea.org
valentineschool.org
whs.rsu14.org
whs.windhamraymondschools.org
windhamraymondschools.org
wms.rsu14.org
wms.windhamraymondschools.org
wps.rsu14.org
wps.windhamraymondschools.org
wse.otsegops.org
www.aspermontisd.com
www.birminghamcharter.com
www.carverschool.us
www.cathedralchapelschool.org
www.crhss.org
www.cristoreysac.org
www.cristoreysacramento.org
www.hemethigh.com
www.kiskiarea.org
www.laicharter.org
www.mthcs.org
www.ogisd.net
www.ogisd.org
www.otsegops.org
www.pacek-8.com
www.pacek-8.org
www.ppsb.org
www.rsu14.org
www.stfinnbarr.org
www.stjulianacatholiccommunity.org
www.stjulianachurch.org
www.stjulianaschool.org
www.tsd.state.tx.us
www.valentineschool.org
www.windhamraymondschools.org

Other certificates including the domain name ppsb.org

(limited to 100 certificates)
aac.woccisd.net
admin.bme.manorisd.net
admin.wjh.wintersisd.org
admin.alamo.otsegops.org
www.ppsb.org
admin.dms.manorisd.net
admin.wcms.mpusd.net
admin.dms.manorisd.net
carver.bryanisd.org
admin.alamo.otsegops.org
admin.jsms.rsu14.org
aac.woccisd.net
admin.wjh.wintersisd.org
admin.cathedralchapelschool.org
eastprimary.kiskiarea.org
admin.dms.manorisd.net
admin.mshs.manorisd.net
www.hancockhs.org
acecharterhigh.org
www.nhstitans.org
sni.cloudflaressl.com
admin.educationfoundation.bryanisd.org
bces.ppsb.org
admin.alamo.otsegops.org
admin.lng.otsegops.org
admin.whs.rsu14.org
aac.woccisd.net
www.rsu14.org
www.otsegops.org
hs.saisd.us
admin.alamo.otsegops.org
www.buffsci.org
ohs.otsegops.org
admin.acecharterhigh.org
*.ppsb.org
admin.daviswolves.org
admin.nhstitans.org
admin.athletics.rsu14.org
*.ppsb.org
aac.woccisd.net
admin.echs.woccisd.net
www.cristoreysacramento.org
aac.woccisd.net
admin.alamo.otsegops.org
northprimary.kiskiarea.org
eq.equitasacademy.org
admin.alamo.otsegops.org
admin.athletics.rsu14.org
mcharris.bryanisd.org
admin.hancockhs.org
laicharter.org
bchs.ppsb.org
acecharterhigh.org
mhs.manorisd.net
admin.stfinnbarr.org
jsms.rsu14.org
admin.pme.manorisd.net
acecharterhigh.org
admin.alamo.otsegops.org
admin.rsu14.org
admin.res.rsu14.org
acecharterhigh.org
eq5.equitasacademy.org
acecharterhigh.org
exteraschools.org
aac.woccisd.net
aac.woccisd.net
woodlandms.bartow.k12.ga.us
bces.ppsb.org
admin.alamo.otsegops.org
jsms.rsu14.org
bces.ppsb.org
aac.woccisd.net
aac.woccisd.net
acecharterhigh.org
acecharterhigh.org
www.otsegops.org
intermediate.kiskiarea.org
aac.woccisd.net
admin.alamo.otsegops.org
admin.whs.rsu14.org
acecharterhigh.org
lng.otsegops.org
aac.woccisd.net
admin.ohs.otsegops.org
bchs.ppsb.org
bces.ppsb.org

Certificate

The complete raw certificate details for bchs.ppsb.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOGTCCDQGgAwIBAgISA2f4+W4DFvi4lMl5Y+XHzq1BMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MTcxMDE0NThaFw0x
OTEwMTUxMDE0NThaMBgxFjAUBgNVBAMTDWJjaHMucHBzYi5vcmcwggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQCtrIXp7mbejFBtMdv7bPut9hUKX6mHmbwU
kk4SAS2wWeHzgwVeEiXu4Q62pKUwqxHbZ3Nw0C0rUbmlXdHhEGCfXxFMedMP19Lb
snHJ7J+Vd91RftXDhoavIx/wwT5kaGhpA/RdgHdcMauZAXdn+HZ7pK1qC5s76lXA
XMbxUMB2dqGxStseulJ5+JrOLKGF4+QvfNCD86ZpCQrvACEk7x6XbPfvksN3ZUjC
t1ZA/YmNXz3Zh360hk6cCTaPIOW/cxhcpcaKUHKtCVZnUB2M4p9GJjRyQW678NiS
6+Q0qbZ/fNRq/DeyUK6NlYeQgdk2lo23F+yuki1QirlO7vNt6T8xH8kxH2dx5bJn
Yy6d35JuB8t/3rA+FUFquuynUc1H4iSjK2vk8w1EHPBbMG9MPwXurpyRRsiCl6ju
y2ftvQg1c9iA1PvMVf9Q0JxaP5pon4q7wwpXgQQS5qK+Nb8/5ObrheNc2M/0XVbz
7m2VwmAmEZTITKUJS0BGqE+iNTNCeuHWJRIxE0jaWIngi53H+jdDgTbDoC5309jJ
XTmkWAx1Itg1EZBPJBFJpJtDceZ9mL+lCMXJSiGIDv+HSiZSYIgOJBUbfR4eFvc4
g/dsmKxdkrioSuflkOYp1SA0LcZL7LCtMAFiPQ34RSeiGRSLqKQPiZ7qjnyyr8hB
WbJ6bUz8TQIDAQABo4IKKTCCCiUwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQva8hN
bCwuMvIAIP8tTWxa/G66uzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js
oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14
My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMIIH3AYDVR0RBIIH0zCCB8+CGGFkbWluLmFsYW1v
Lm90c2Vnb3BzLm9yZ4IWYWRtaW4uYXNwZXJtb250aXNkLmNvbYIVYWRtaW4uY2Fy
dmVyc2Nob29sLnVzgh9hZG1pbi5jYXRoZWRyYWxjaGFwZWxzY2hvb2wub3JnghZh
ZG1pbi5kc2Uub3RzZWdvcHMub3JnghNhZG1pbi5oZW1ldGhpZ2guY29tghZhZG1p
bi5vaHMub3RzZWdvcHMub3JnghZhZG1pbi5vbXMub3RzZWdvcHMub3JnghJhZG1p
bi5vdHNlZ29wcy5vcmeCEWFkbWluLnBhY2VrLTguY29tghRhZG1pbi5zdGZpbm5i
YXJyLm9yZ4IkYWRtaW4uc3RqdWxpYW5hY2F0aG9saWNjb21tdW5pdHkub3Jnghlh
ZG1pbi5zdGp1bGlhbmFzY2hvb2wub3JnghlhZG1pbi52YWxlbnRpbmVzY2hvb2wu
b3JnghNhZG1pbi53bXMucnN1MTQub3JnghNhZG1pbi53cHMucnN1MTQub3JnghZh
ZG1pbi53c2Uub3RzZWdvcHMub3JnghJhbGFtby5vdHNlZ29wcy5vcmeCEGFzcGVy
bW9udGlzZC5jb22CE2F0aGxldGljcy5yc3UxNC5vcmeCDWJjaHMucHBzYi5vcmeC
DWJjbXMucHBzYi5vcmeCDWJjcHMucHBzYi5vcmeCDWJ2ZXMucHBzYi5vcmeCD2Nh
cnZlcnNjaG9vbC51c4IZY2F0aGVkcmFsY2hhcGVsc2Nob29sLm9yZ4IQZHNlLm90
c2Vnb3BzLm9yZ4IZZWFzdHByaW1hcnkua2lza2lhcmVhLm9yZ4INaGVtZXRoaWdo
LmNvbYIYaGlnaHNjaG9vbC5raXNraWFyZWEub3Jnggxocy5vZ2lzZC5uZXSCDWlu
dC5vZ2lzZC5uZXSCGmludGVybWVkaWF0ZS5raXNraWFyZWEub3JnggxqaC5vZ2lz
ZC5uZXSCDmpyc3IubXRoY3Mub3Jngg5qc21zLnJzdTE0Lm9yZ4IeanNtcy53aW5k
aGFtcmF5bW9uZHNjaG9vbHMub3Jngg1raXNraWFyZWEub3JnghBsbmcub3RzZWdv
cHMub3JnghRtYW5jaGVzdGVyLnJzdTE0Lm9yZ4IkbWFuY2hlc3Rlci53aW5kaGFt
cmF5bW9uZHNjaG9vbHMub3Jngg9ub3J0aC5tdGhjcy5vcmeCGm5vcnRocHJpbWFy
eS5raXNraWFyZWEub3JngglvZ2lzZC5vcmeCEG9ocy5vdHNlZ29wcy5vcmeCEG9t
cy5vdHNlZ29wcy5vcmeCC3BhY2VrLTguY29tggtwYWNlay04Lm9yZ4IMcGhzLnBw
c2Iub3Jngg1wcGxjLnBwc2Iub3Jngg1wcmkub2dpc2QubmV0gg1yZXMucnN1MTQu
b3Jngh1yZXMud2luZGhhbXJheW1vbmRzY2hvb2xzLm9yZ4Iac291dGhwcmltYXJ5
Lmtpc2tpYXJlYS5vcmeCDXNwZXMucHBzYi5vcmeCDXNwaHMucHBzYi5vcmeCDnN0
ZmlubmJhcnIub3Jngh5zdGp1bGlhbmFjYXRob2xpY2NvbW11bml0eS5vcmeCE3N0
anVsaWFuYXNjaG9vbC5vcmeCHXVwcGVyZWxlbWVudGFyeS5raXNraWFyZWEub3Jn
ghN2YWxlbnRpbmVzY2hvb2wub3Jngg13aHMucnN1MTQub3Jngh13aHMud2luZGhh
bXJheW1vbmRzY2hvb2xzLm9yZ4IZd2luZGhhbXJheW1vbmRzY2hvb2xzLm9yZ4IN
d21zLnJzdTE0Lm9yZ4Idd21zLndpbmRoYW1yYXltb25kc2Nob29scy5vcmeCDXdw
cy5yc3UxNC5vcmeCHXdwcy53aW5kaGFtcmF5bW9uZHNjaG9vbHMub3JnghB3c2Uu
b3RzZWdvcHMub3JnghR3d3cuYXNwZXJtb250aXNkLmNvbYIZd3d3LmJpcm1pbmdo
YW1jaGFydGVyLmNvbYITd3d3LmNhcnZlcnNjaG9vbC51c4Idd3d3LmNhdGhlZHJh
bGNoYXBlbHNjaG9vbC5vcmeCDXd3dy5jcmhzcy5vcmeCFHd3dy5jcmlzdG9yZXlz
YWMub3Jnght3d3cuY3Jpc3RvcmV5c2FjcmFtZW50by5vcmeCEXd3dy5oZW1ldGhp
Z2guY29tghF3d3cua2lza2lhcmVhLm9yZ4ISd3d3LmxhaWNoYXJ0ZXIub3Jngg13
d3cubXRoY3Mub3Jngg13d3cub2dpc2QubmV0gg13d3cub2dpc2Qub3JnghB3d3cu
b3RzZWdvcHMub3Jngg93d3cucGFjZWstOC5jb22CD3d3dy5wYWNlay04Lm9yZ4IM
d3d3LnBwc2Iub3Jngg13d3cucnN1MTQub3JnghJ3d3cuc3RmaW5uYmFyci5vcmeC
Ind3dy5zdGp1bGlhbmFjYXRob2xpY2NvbW11bml0eS5vcmeCF3d3dy5zdGp1bGlh
bmFjaHVyY2gub3Jnghd3d3cuc3RqdWxpYW5hc2Nob29sLm9yZ4ITd3d3LnRzZC5z
dGF0ZS50eC51c4IXd3d3LnZhbGVudGluZXNjaG9vbC5vcmeCHXd3dy53aW5kaGFt
cmF5bW9uZHNjaG9vbHMub3JnMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQB
gt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn
MIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcA4mlLribo6UAJ6IYbtjuD1D7n/nSI
+6SPKJMBnd3x2/4AAAFr/6R8CwAABAMASDBGAiEA4o0gfl7cuGfJyeTvnzttV+CV
J0MBiUPSs993OmMFEjgCIQCWZGzWFMMn8SX2t1B+9X0BTdZXeEAy0h42aEZzA4zV
zgB2ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABa/+kfCwAAAQD
AEcwRQIgLKSiN8WFsIgi9GwI7DWijEmPYSdU05W6qzeoqUsi9+oCIQCLvI7uorZy
/QD9j56Foq3QZ3TEoPpNpFNP22ydtsxQ1DANBgkqhkiG9w0BAQsFAAOCAQEAVrzx
cdlCsHcUSFP0coEaVwC4pESw0GxyC0QElXcoEMJ82oCljVHbG54YLeCK5SWlajZS
aaAwssmskdwrWGRBB7Rrs32wRNYIWbhAeDKtat8DFmEfBIK6bRGDaDdM/OCR/TtH
K4qRspBoIoxY0y7UQBTBjTHhBiv4Ju1DEJe5m5S2+JNu2svTjsCpkhdfoMsG4+B7
VYcDDrozhRTqpPMYwoiomqdi1yM1B7PV1mv5JD2iIadGEhcOQi9vBoxcxqS4Zqrj
Bs87IikeyNRpV4K6yIz+YrnCN5jxirp1eyq0lQPPO918P/DyPnBEpgWDp0LhykYH
YFvFoZY8hDzX3a2U6A==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQbTHb+2z7
rfYVCl+ph5m8FJJOEgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5pV3R4RBg
n18RTHnTD9fS27JxyeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGrmQF3Z/h2
e6StagubO+pVwFzG8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK7wAhJO8e
l2z375LDd2VIwrdWQP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlWZ1AdjOKf
RiY0ckFuu/DYkuvkNKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5Tu7zbek/
MR/JMR9nceWyZ2Mund+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzwWzBvTD8F
7q6ckUbIgpeo7stn7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuaivjW/P+Tm
64XjXNjP9F1W8+5tlcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ4Iudx/o3
Q4E2w6Aud9PYyV05pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/h0omUmCI
DiQVG30eHhb3OIP3bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUnohkUi6ik
D4me6o58sq/IQVmyem1M/E0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296716885244319686229864873699767248399681
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-17 10:14:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-15 10:14:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bchs.ppsb.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2003 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.alamo.otsegops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.aspermontisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.carverschool.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cathedralchapelschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dse.otsegops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hemethigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ohs.otsegops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.oms.otsegops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.otsegops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pacek-8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stfinnbarr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stjulianacatholiccommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stjulianaschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.valentineschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wms.rsu14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wps.rsu14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wse.otsegops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alamo.otsegops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspermontisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athletics.rsu14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bchs.ppsb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcms.ppsb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcps.ppsb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bves.ppsb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carverschool.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cathedralchapelschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dse.otsegops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastprimary.kiskiarea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemethigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highschool.kiskiarea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.ogisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int.ogisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intermediate.kiskiarea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jh.ogisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jrsr.mthcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jsms.rsu14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jsms.windhamraymondschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiskiarea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lng.otsegops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manchester.rsu14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manchester.windhamraymondschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'north.mthcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northprimary.kiskiarea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ogisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohs.otsegops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oms.otsegops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacek-8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacek-8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phs.ppsb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pplc.ppsb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pri.ogisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'res.rsu14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'res.windhamraymondschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southprimary.kiskiarea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spes.ppsb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sphs.ppsb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stfinnbarr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjulianacatholiccommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjulianaschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upperelementary.kiskiarea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valentineschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whs.rsu14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whs.windhamraymondschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windhamraymondschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wms.rsu14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wms.windhamraymondschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wps.rsu14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wps.windhamraymondschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wse.otsegops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aspermontisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.birminghamcharter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carverschool.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cathedralchapelschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crhss.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cristoreysac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cristoreysacramento.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hemethigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiskiarea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laicharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mthcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ogisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ogisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otsegops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pacek-8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pacek-8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ppsb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rsu14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stfinnbarr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjulianacatholiccommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjulianachurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjulianaschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tsd.state.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valentineschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.windhamraymondschools.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016bffa47c0b0000040300483046022100e28d207e5edcb867c9c9e4ef9f3b6d57e0952743018943d2b3df773a6305123802210096646cd614c327f125f6b7507ef57d014dd657784032d21e36684673038cd5ce007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016bffa47c2c000004030047304502202ca4a237c585b08822f46c08ec35a28c498f612754d395baab37a8a94b22f7ea0221008bbc8eeea2b672fd00fd8f9e85a2add06774c4a0fa4da4534fdb6c9db6cc50d4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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