sgisd.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d7:6f:ff:1f:52:a7:9f:9e:3a:0b:6e:d8:31:35:f9:73:72 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sgisd.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d7:6f:ff:1f:52:a7:9f:9e:3a:0b:6e:d8:31:35:f9:73:72
Serial Number (int): 334646435661816845629856418426401255420786
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 03:6a:da:68:f1:85:9a:87:4f:7e:af:07:a8:04:9d:a5:e3:ff:41:ac
Fingerprint (sha256): a9:b9:01:59:09:c7:61:89:22:ce:5a:f5:56:65:55:4c:80:bd:d2:29:1d:a6:36:b3:df:03:ec:44:f8:ea:da:52

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sgisd.net

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sgisd.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acsaregion14.org
admin.academylongbeach.org
admin.acsaregion14.org
admin.allsaintsnorwalk.com
admin.bes.bisd-tx.org
admin.bhs.bisd-tx.org
admin.blanchedodd.net
admin.bms.bisd-tx.org
admin.camsch.org
admin.elementary.bridgeportisd.net
admin.es.somervilleisd.org
admin.ghs.gorhamschools.org
admin.gms.gorhamschools.org
admin.greatfalls.gorhamschools.org
admin.hartsacademy.org
admin.hattiedyer.net
admin.hgcschool.org
admin.high.bridgeportisd.net
admin.hs.somervilleisd.org
admin.intermediate.bridgeportisd.net
admin.jfk.edu.mx
admin.jrds.school
admin.kingdrew.net
admin.krumeec.net
admin.krumhs.net
admin.krumms.net
admin.lemc.lakelandsd.org
admin.lesc.lakelandsd.org
admin.lhs.lakelandsd.org
admin.marquezhs.net
admin.middle.bridgeportisd.net
admin.moxee.evsd90.org
admin.msab.msa.state.mn.us
admin.msad.msa.state.mn.us
admin.narragansett.gorhamschools.org
admin.pes.bisd-tx.org
admin.piopicoms.org
admin.village.gorhamschools.org
admin.visd.net
admin.zcs.k12.in.us
bes.bisd-tx.org
bhs.bisd-tx.org
blanchedodd.net
bms.bisd-tx.org
dodd.krumisd.net
dyer.krumisd.net
eec.krumisd.net
elementary.bridgeportisd.net
elementary.grovetonisd.net
es.somervilleisd.org
ghs.gorhamschools.org
gms.gorhamschools.org
gorhs.gorham.k12.me.us
greatfalls.gorhamschools.org
hattiedyer.net
hgcschool.org
high.bridgeportisd.net
hs.grovetonisd.net
intermediate.bridgeportisd.net
jrds.school
khs.krumisd.net
kms.krumisd.net
krumeec.net
krumhs.net
krumms.net
lemc.lakelandsd.org
lesc.lakelandsd.org
lhs.lakelandsd.org
marquezhs.net
middle.bridgeportisd.net
msab.msa.state.mn.us
msad.msa.state.mn.us
narragansett.gorhamschools.org
pes.bisd-tx.org
piopicoms.org
sgisd.net
village.gorhamschools.org
www.academylongbeach.org
www.acsaregion14.org
www.admin.colegiofrancoingles.edu.mx
www.allsaintsnorwalk.com
www.blanchedodd.net
www.cameron.k12.la.us
www.camsch.org
www.cienegaelementary.org
www.colegiofrancoingles.edu.mx
www.hartsacademy.org
www.hattiedyer.net
www.hgcschool.org
www.jfk.edu.mx
www.jrds.school
www.kingdrew.net
www.krumeec.net
www.krumhs.net
www.krumms.net
www.marquezhs.net
www.piopicoms.org
www.visd.net
www.zcs.k12.in.us

Other certificates including the domain name sgisd.net

(limited to 100 certificates)
acsaregion14.org
mail.sgisd.net
sgisd.net
acsaregion14.org
mail.sgisd.net
cms.wvsd.org
www.sgisd.net
sfrschool.org
acsaregion14.org
acsaregion14.org
www.sgisd.net
acsaregion14.org
www.ekhla.org
admin.sd44.org
mail.sgisd.net
admin.altavista.unionsd.org
www.cristoreyorangecounty.org
admin.lisbahamas.com
admin.altavista.unionsd.org
admin.altavista.unionsd.org
mail.sgisd.net
acsaregion14.org
admin.elementary.mypagosaschools.com
admin.eastvalleycentral.evsd90.org
acsaregion14.org
admin.bes.burnetcisd.net
sgisd.net
acsaregion14.org
sgisd.net
sgisd.net
admin.altavista.unionsd.org
www.arapaho.k12.ok.us
admin.d124.org
admin.altavista.unionsd.org
acsaregion14.org
mail.sgisd.net
mail.sgisd.net
acsaregion14.org
admin.hs.notredameacademy.org
admin.altavista.unionsd.org
sgisd.net
admin.altavista.unionsd.org
www.sgisd.net
sgisd.net
sgisd.net
mail.sgisd.net
admin.athenour.unionsd.org
admin.altavista.unionsd.org
athenour.unionsd.org
d124.org
admin.carlton.unionsd.org
admin.bes.burnetcisd.net
svts.wvsd.org
admin.bes.burnetcisd.net
earlylearning.wvsd.org
admin.altavista.unionsd.org
admin.burnetcisd.net
eagles.lucernevalleyunified.org
sgisd.net
sgisd.net
sgisd.net
mail.sgisd.net
sgisd.net

Certificate

The complete raw certificate details for sgisd.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334646435661816845629856418426401255420786
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-10 18:53:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-08 18:53:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sgisd.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2214 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acsaregion14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.academylongbeach.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.acsaregion14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.allsaintsnorwalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bes.bisd-tx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bhs.bisd-tx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.blanchedodd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bms.bisd-tx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.camsch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.elementary.bridgeportisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.es.somervilleisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ghs.gorhamschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gms.gorhamschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.greatfalls.gorhamschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hartsacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hattiedyer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hgcschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.high.bridgeportisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hs.somervilleisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.intermediate.bridgeportisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jfk.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jrds.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kingdrew.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.krumeec.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.krumhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.krumms.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lemc.lakelandsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lesc.lakelandsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lhs.lakelandsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.marquezhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.middle.bridgeportisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.moxee.evsd90.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.msab.msa.state.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.msad.msa.state.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.narragansett.gorhamschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pes.bisd-tx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.piopicoms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.village.gorhamschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.visd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bes.bisd-tx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhs.bisd-tx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blanchedodd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bms.bisd-tx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dodd.krumisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dyer.krumisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eec.krumisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elementary.bridgeportisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elementary.grovetonisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.somervilleisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghs.gorhamschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gms.gorhamschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gorhs.gorham.k12.me.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatfalls.gorhamschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hattiedyer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hgcschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'high.bridgeportisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.grovetonisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intermediate.bridgeportisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jrds.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khs.krumisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kms.krumisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krumeec.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krumhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krumms.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lemc.lakelandsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesc.lakelandsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lhs.lakelandsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marquezhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'middle.bridgeportisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msab.msa.state.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msad.msa.state.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'narragansett.gorhamschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pes.bisd-tx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piopicoms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'village.gorhamschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.academylongbeach.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acsaregion14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.admin.colegiofrancoingles.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allsaintsnorwalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blanchedodd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cameron.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.camsch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cienegaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegiofrancoingles.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hartsacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hattiedyer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hgcschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jfk.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jrds.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingdrew.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krumeec.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krumhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krumms.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marquezhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piopicoms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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