it.canoncityschools.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d5:0d:96:2d:dc:1d:12:7d:94:23:08:5f:69:58:f5:fa:1b was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=it.canoncityschools.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d5:0d:96:2d:dc:1d:12:7d:94:23:08:5f:69:58:f5:fa:1b
Serial Number (int): 333835061688062242124503867229433658472987
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): aa:b2:29:40:1a:4b:ce:27:bd:b4:e3:7b:1b:c0:4f:b0:4e:78:c4:15
Fingerprint (sha256): a6:fe:77:22:b0:7c:14:63:bf:e0:62:7e:06:3e:40:73:2b:81:c5:41:c8:0d:9e:34:67:ea:3e:d5:a3:34:e8:0f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate it.canoncityschools.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for it.canoncityschools.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aceroschools.org
acrma8.org
admin.alccobras.net
admin.annunciationcatholicschool.org
admin.churchill.edu.mx
admin.csdeagles.com
admin.fultonprep.net
admin.geaschool.com
admin.giddingsisd.net
admin.it.canoncityschools.org
admin.kapaamiddleschool.org
admin.kcusd.com
admin.marissa40.org
admin.maspethhighschool.org
admin.pclions.org
admin.publicservicehs.org
admin.racademy.org
admin.rivchristian.org
admin.scb.school
admin.school.seastucson.org
admin.sge.manorisd.net
admin.shseagles.org
admin.stpaschalbaylonschool.org
admin.veca.gocats.org
admin.waiahole.org
alccobras.net
altasierra.prsd.us
annunciationcatholicschool.org
cec.cpsbla.us
cottagehill.prsd.us
csdeagles.com
csdf.k12.ca.us
fhs.cpsbla.us
fle.cpsbla.us
franklincountyschoolsms.com
fultonprep.net
geaschool.com
it.canoncityschools.org
kapaamiddleschool.org
magnolia.prsd.us
marissa40.org
maspethhighschool.org
mhs.cpsbla.us
mustangsla.org
pclions.org
publicservicehs.org
racademy.org
rivchristian.org
scb.school
school.seastucson.org
sge.manorisd.net
shseagles.org
southeastrop.org
stpaschalbaylonschool.org
vhs.cpsbla.us
waiahole.org
www.acrma8.org
www.akibaacademy.org
www.alccobras.net
www.altasierra.prsd.us
www.annunciationcatholicschool.org
www.bac.wsisd.com
www.bisdtx.org
www.cbisd.com
www.centralisd.com
www.collegeunbound.org
www.comfort.txed.net
www.comfortisd.org
www.cottagehill.prsd.us
www.cpsbla.us
www.csdeagles.com
www.csdf.k12.ca.us
www.eaton-academy.com
www.edwhite.org
www.franklincountyschoolsms.com
www.fultonprep.net
www.geaschool.com
www.holyrosarycatholicschool.org
www.kapaamiddleschool.org
www.kcusd.com
www.lanevilleisd.org
www.leusd.k12.ca.us
www.magnolia.prsd.us
www.marissa40.org
www.maspethhighschool.org
www.mostblessedtrinityacademy.org
www.mustangsla.org
www.pclions.org
www.portrichmondhs.org
www.publicservicehs.org
www.racademy.org
www.rivchristian.org
www.scb.school
www.sfdslv.org
www.shseagles.org
www.stpaschalbaylonschool.org
www.taylorisd.org
www.waiahole.org
www.wvsd.com
www.wvsd.org

Other certificates including the domain name canoncityschools.org

(limited to 100 certificates)
activities.madrid.k12.ia.us
activities.madrid.k12.ia.us
www.cerratosd.org
*.anoka.k12.mn.us
admin.canoncityschools.org
admin.aes.fentressboe.com
*.schoology.com
*.schoology.com
campus.canoncityschools.org
aceroschools.org
admin.amschool.edu.sv
*.schoology.com
lpms.lincolnparkpublicschools.com
www.pullmanschools.org
activities.madrid.k12.ia.us
activities.madrid.k12.ia.us
*.schoology.com
activities.madrid.k12.ia.us
admin.amschool.edu.sv
admin.7gc.owassops.org
staff.canoncityschools.org
admin.rvs.monroe.k12.tn.us
*.schoology.com

*.schoology.com
admin.amschool.edu.sv
admin.aes.fentressboe.com
admin.arvin.kernhigh.org
*.schoology.com
admin.aes.fentressboe.com
cerratosd.org
aceroschools.org
admin.union.kyschools.us
admin.ivelem.apluscharterschools.org
*.schoology.com
admin.apluscharterschools.org
*.schoology.com
*.schoology.com
*.schoology.com
admin.amschool.edu.sv
*.schoology.com
admin.aes.fentressboe.com
admin.arvin.kernhigh.org
admin.apluscharterschools.org
staff.canoncityschools.org
activities.madrid.k12.ia.us
*.schoology.com
admin.arete.prsd.us
south.legacyprep.org
*.schoology.com

admin.amschool.edu.sv
activities.madrid.k12.ia.us
*.schoology.com
*.schoology.com
*.schoology.com
www.bhswca.com
*.schoology.com
*.schoology.com
spectrum.canoncityschools.org
admin.amschool.edu.sv
*.schoology.com
admin.veritasca.org
*.schoology.com
*.schoology.com
aceroschools.org
staff.canoncityschools.org
admin.apluscharterschools.org
gulfelementary.org
aceroschools.org
www.olsorrows.com
*.schoology.com
*.schoology.com
staff.canoncityschools.org
admin.gfusd.net
www.canoncityschools.org
lvmhs.lucernevalleyunified.org
admin.aes.fentressboe.com
*.schoology.com
aceroschools.org
staff.canoncityschools.org
admin.upstreamcollaborative.org
*.schoology.com
*.schoology.com
*.schoology.com
*.schoology.com
admin.fentressboe.com
admin.amschool.edu.sv
acrma8.org
admin.amschool.edu.sv
admin.el.madrid.k12.ia.us
*.schoology.com

*.schoology.com
activities.madrid.k12.ia.us
*.schoology.com
*.schoology.com
elementary.grovetonisd.net
*.schoology.com
*.schoology.com

Certificate

The complete raw certificate details for it.canoncityschools.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333835061688062242124503867229433658472987
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-15 01:02:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-13 01:02:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'it.canoncityschools.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2095 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aceroschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acrma8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.alccobras.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.annunciationcatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.churchill.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.csdeagles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fultonprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.geaschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.giddingsisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.it.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kapaamiddleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.marissa40.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.maspethhighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pclions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.publicservicehs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.racademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rivchristian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.scb.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.school.seastucson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sge.manorisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.shseagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stpaschalbaylonschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.veca.gocats.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.waiahole.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alccobras.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altasierra.prsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annunciationcatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cec.cpsbla.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cottagehill.prsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csdeagles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csdf.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fhs.cpsbla.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fle.cpsbla.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franklincountyschoolsms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fultonprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geaschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kapaamiddleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnolia.prsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marissa40.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maspethhighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhs.cpsbla.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mustangsla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pclions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publicservicehs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'racademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rivchristian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scb.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.seastucson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sge.manorisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shseagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southeastrop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpaschalbaylonschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vhs.cpsbla.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waiahole.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acrma8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akibaacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alccobras.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altasierra.prsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.annunciationcatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bac.wsisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bisdtx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegeunbound.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comfort.txed.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comfortisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cottagehill.prsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpsbla.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csdeagles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csdf.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eaton-academy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edwhite.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.franklincountyschoolsms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fultonprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geaschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyrosarycatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kapaamiddleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lanevilleisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magnolia.prsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marissa40.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maspethhighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mostblessedtrinityacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mustangsla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pclions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portrichmondhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.publicservicehs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.racademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rivchristian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scb.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfdslv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shseagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpaschalbaylonschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taylorisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waiahole.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wvsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wvsd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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