arnaudvilleelem.slp.k12.la.us

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d5:14:85:03:d4:ba:a1:34:12:69:b3:3c:65:16:a4:38:68 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=arnaudvilleelem.slp.k12.la.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d5:14:85:03:d4:ba:a1:34:12:69:b3:3c:65:16:a4:38:68
Serial Number (int): 333844277162539874465868654567883022809192
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): af:e1:2b:17:d9:17:15:b7:b7:c8:0a:c5:f4:5b:df:c8:64:85:b6:f9
Fingerprint (sha256): ab:0c:43:20:0d:28:bb:4d:68:de:72:62:a8:ef:87:1d:56:b9:35:cf:e9:18:c7:59:75:20:1e:a4:08:97:fe:40

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate arnaudvilleelem.slp.k12.la.us

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for arnaudvilleelem.slp.k12.la.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abchandler.henderson.k12.ky.us
admin.br.needlesusd.org
admin.ccabr.org
admin.cds.needlesusd.org
admin.clarabartonhs.org
admin.cuhsd.org
admin.cves.needlesusd.org
admin.macademy.org
admin.needlesusd.org
admin.nicholsonstemacademy.org
admin.pacificschool.com
admin.pearlharborkai.org
admin.sssq.org
arnaudvilleelem.slp.k12.la.us
beauchenehigh.slp.k12.la.us
bendgate.henderson.k12.ky.us
bluffdale.summitacademyschools.org
boynton.cuhsd.org
br.needlesusd.org
branham.cuhsd.org
cace.cuhsd.org
cairo.henderson.k12.ky.us
camden.cuhsd.org
canktonelem.slp.k12.la.us
caps.slp.k12.la.us
ccas.ccusd.org
cds.needlesusd.org
centralacademy.henderson.k12.ky.us
centralmiddle.slp.k12.la.us
ces.ccs-nc.org
chs.ccs-nc.org
clarabartonhs.org
cms.ccs-nc.org
cves.needlesusd.org
delmar.cuhsd.org
draper.summitacademyschools.org
dws.weehawkenschools.net
eastelem.slp.k12.la.us
eastheights.henderson.k12.ky.us
ei.themethighschool.org
etc.needlesusd.org
gordonbernell.com
grandcoteauelem.slp.k12.la.us
groleeelem.slp.k12.la.us
hchs.henderson.k12.ky.us
highlandelem.slp.k12.la.us
independence.summitacademyschools.org
jefferson.henderson.k12.ky.us
krotzspringselem.slp.k12.la.us
lawtellelem.slp.k12.la.us
leigh.cuhsd.org
macademy.org
martell.troy.k12.mi.us
newhopebrooklyn.org
nhs.needlesusd.org
niagara.henderson.k12.ky.us
nicholsonstemacademy.org
nms.needlesusd.org
northmiddle.henderson.k12.ky.us
northwesthigh.slp.k12.la.us
pacificschool.com
pearlharborkai.org
prospect.cuhsd.org
sahs.summitacademyschools.org
southheights.henderson.k12.ky.us
southmiddle.henderson.k12.ky.us
spottsville.henderson.k12.ky.us
sssq.org
tbjelc.henderson.k12.ky.us
trinitystelementary.com
trs.weehawkenschools.net
vces.needlesusd.org
westmont.cuhsd.org
whs.weehawkenschools.net
www.boynton.cuhsd.org
www.branham.cuhsd.org
www.cace.cuhsd.org
www.ccabr.org
www.ccs-nc.org
www.clarabartonhs.org
www.cuhsd.org
www.delmar.cuhsd.org
www.epiphanyprep.org
www.gordonbernell.com
www.henderson.k12.ky.us
www.leigh.cuhsd.org
www.macademy.org
www.needlesusd.org
www.newhopebrooklyn.org
www.nicholsonstemacademy.org
www.notredameacademy.org
www.pacificschool.com
www.pearlharborkai.org
www.prospect.cuhsd.org
www.slhs.us
www.slp.k12.la.us
www.sssq.org
www.summitacademyschools.org
www.weehawkenschools.net
www.westmont.cuhsd.org

Other certificates including the domain name slp.k12.la.us

(limited to 100 certificates)
slp.k12.la.us
academy.swartzcreek.org
wes.bibbed.org
www.cranburyschool.org
admin.kernhighnetwork.com
second.exteraschools.org
cchs.ccusd.org
admin.lorena.exteraschools.org
academy.swartzcreek.org
abchandler.henderson.k12.ky.us
tcms.todd.kyschools.us
admin.hs.wvsd208.org
admin.alc.ucboe.us
cphs.ccusd.org
admin.tcms.todd.kyschools.us
admin.hudson.ucboe.us
academy.swartzcreek.org
*.slp.k12.la.us
academy.swartzcreek.org
www.healthystartacademy.com
ps.bsd29j.com
admin.mes.mayfield.kyschools.us
pschool.slp.k12.la.us
admin.alc.ucboe.us
admin.clarabartonhs.org
opelousasmiddle.slp.k12.la.us
mail.slp.k12.la.us
www.nicholsonstemacademy.org
abchandler.henderson.kyschools.us
abchandler.henderson.k12.ky.us
northsidecatholic.org
abchandler.henderson.k12.ky.us
breed.exteraschools.org
abchandler.henderson.kyschools.us
admin.second.exteraschools.org
clarabartonhs.org
admin.smithcountymiddle.smithcoedu.com
admin.smithcountyhigh.smithcoedu.com
admin.exteraschools.org
northwesthigh.slp.k12.la.us
abchandler.henderson.kyschools.us
www.pacificschool.com
camden.cuhsd.org
www.trinitystelementary.com
abchandler.henderson.kyschools.us
www.holynamesf.com
lawtellelem.slp.k12.la.us
*.slp.k12.la.us
admin.ei.themethighschool.org
academy.swartzcreek.org
6gc.owassops.org
abchandler.henderson.kyschools.us
lhs.lexingtonisd.net
admin.gilmore.ucboe.us
6gc.owassops.org
pschool.slp.k12.la.us
admin.alc.ucboe.us
pschool.slp.k12.la.us
trinitystelementary.com
abchandler.henderson.k12.ky.us
northelem.slp.k12.la.us
arnaudvilleelem.slp.k12.la.us
summer.materdeicatholic.org
admin.alc.ucboe.us
admin.adultlearning.sunrisesd.ca
admin.adultlearning.sunrisesd.ca
mail.slp.k12.la.us
admin.hsmp.org
www.notredameacademy.org
admin.arcedu.mx
academy.swartzcreek.org
www.chinaspringisd.net
abchandler.henderson.kyschools.us
admin.alc.ucboe.us
hr.slp.k12.la.us
admin.adultlearning.sunrisesd.ca
jh.iasd.cc
Alioweb.slp.k12.la.us
academy.swartzcreek.org
lacountycharterselpa.org
www.colegioangloamericanohgo.edu.mx
admin.arcedu.mx
admin.glenknoll.org
ocd.ccusd.org
arnaudvilleelem.slp.k12.la.us
*.slp.k12.la.us
6gc.owassops.org
www.ccs-nc.org
abchandler.henderson.k12.ky.us
admin.lahainalunahs.org
6gc.owassops.org
academy.swartzcreek.org
preschool.shelbycs.org
msdurham.org
sachs.org
bes.yadkin.k12.nc.us
second.exteraschools.org
www.summitacademyschools.org
admin.gilmore.ucboe.us
www.macademy.org

Certificate

The complete raw certificate details for arnaudvilleelem.slp.k12.la.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333844277162539874465868654567883022809192
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-05 09:43:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-03 09:43:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'arnaudvilleelem.slp.k12.la.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2375 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abchandler.henderson.k12.ky.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.br.needlesusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ccabr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cds.needlesusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.clarabartonhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cuhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cves.needlesusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.macademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.needlesusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nicholsonstemacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pacificschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pearlharborkai.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sssq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arnaudvilleelem.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beauchenehigh.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bendgate.henderson.k12.ky.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluffdale.summitacademyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boynton.cuhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'br.needlesusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branham.cuhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cace.cuhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cairo.henderson.k12.ky.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camden.cuhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canktonelem.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caps.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccas.ccusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cds.needlesusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralacademy.henderson.k12.ky.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralmiddle.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ces.ccs-nc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chs.ccs-nc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clarabartonhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.ccs-nc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cves.needlesusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delmar.cuhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'draper.summitacademyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dws.weehawkenschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastelem.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastheights.henderson.k12.ky.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ei.themethighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etc.needlesusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gordonbernell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandcoteauelem.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groleeelem.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hchs.henderson.k12.ky.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highlandelem.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'independence.summitacademyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jefferson.henderson.k12.ky.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krotzspringselem.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawtellelem.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leigh.cuhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martell.troy.k12.mi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newhopebrooklyn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhs.needlesusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niagara.henderson.k12.ky.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicholsonstemacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nms.needlesusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northmiddle.henderson.k12.ky.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northwesthigh.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacificschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pearlharborkai.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prospect.cuhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sahs.summitacademyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southheights.henderson.k12.ky.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southmiddle.henderson.k12.ky.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spottsville.henderson.k12.ky.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sssq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbjelc.henderson.k12.ky.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trinitystelementary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trs.weehawkenschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vces.needlesusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westmont.cuhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whs.weehawkenschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boynton.cuhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.branham.cuhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cace.cuhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccabr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccs-nc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clarabartonhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cuhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.delmar.cuhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epiphanyprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gordonbernell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.henderson.k12.ky.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leigh.cuhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.needlesusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newhopebrooklyn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nicholsonstemacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notredameacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pacificschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pearlharborkai.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prospect.cuhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slhs.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sssq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.summitacademyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weehawkenschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westmont.cuhsd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b273ca3330000040300483046022100d6f7188ad9bd0f8d436ef7bbef0d8dd449ed19d77ed12221c2774b32a33384710221009fb203aa7bf830a758a70b7c73514d42ea194f879fd77c72ce6fc011298fa670007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b273ca31f0000040300473045022100803415f848a82f70e82a4ccba427abd6e6af8dcebc96b09e1ed9b3aacf911962022040445d3d50cc02a120b52a328903c1b058d49c022816c5afc9c9b3cbe8c00824
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00310a2b63fe8918d77c7e72e801aaada32316d21c2b0c9a386cfcd47f716916e4735321138dfb776f30d414df6e06222f244781c89ef3091cfcaf3416f3b448bfbdfa59d520c62d84a2e1528544382bf15a62e24d377d4d480f9786c2840472ed35bb2ac51329e8e318f802df33ea864f5110915040c5c75f3ec11b97bc60777700e1314646292ed220c2982dc2578d730d471c35dc0ab797505cf3daad2971190af068bd528b3d0a192b06ae9bd0febb9d225c0fa58e617da375c3a918b5ad791a5535d4c1b9f06190d4fccaacc0e9bdadd948e8d76e8b4744029d699d7a030a22511110f937531b081b927a180a76eb7f215bfbea3786531979ad90d8747422