admin.dss.desotoschools.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ca:65:99:9e:b4:bf:70:d8:6e:36:8c:43:13:dd:0e:21:35 was issued on by Let's Encrypt.

With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.dss.desotoschools.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ca:65:99:9e:b4:bf:70:d8:6e:36:8c:43:13:dd:0e:21:35
Serial Number (int): 330208945581244976579427233123218261680437
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 80:47:b0:bb:7b:5c:47:09:4f:ab:de:ef:cc:5c:73:a9:42:24:01:be
Fingerprint (sha256): b1:ff:3e:ba:55:1b:e7:4b:b7:5b:17:c4:f5:25:42:37:c1:fb:bd:bc:c4:7d:43:76:f9:a9:e9:84:94:2d:4d:fe

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate admin.dss.desotoschools.com

72

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.dss.desotoschools.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

activities.madrid.k12.ia.us
admin.activities.madrid.k12.ia.us
admin.cornellsd.org
admin.cse.gatewayk12.org
admin.dss.desotoschools.com
admin.el.madrid.k12.ia.us
admin.es.cornellsd.org
admin.ev.gatewayk12.org
admin.galileogalilei.edu.mx
admin.galtadultschool.com
admin.gatewayk12.org
admin.ghs.gatewayk12.org
admin.gms.gatewayk12.org
admin.hs.cornellsd.org
admin.ideapcs.org
admin.jrsr.madrid.k12.ia.us
admin.k8.pickettk12.net
admin.madrid.k12.ia.us
admin.msms.gatewayk12.org
admin.palihigh.org
admin.pchs.pickettk12.net
admin.pickettk12.net
admin.ram.gatewayk12.org
admin.ranchitoavees.org
admin.stmarysspokane.com
admin.up.gatewayk12.org
admin.wearelibertyranch.com
admin.youngsvilleacademy.org
cse.gatewayk12.org
dss.desotoschools.com
el.madrid.k12.ia.us
es.cornell.k12.pa.us
es.cornellsd.org
ev.gatewayk12.org
galileogalilei.edu.mx
ghs.gatewayk12.org
gms.gatewayk12.org
hs.cornell.k12.pa.us
hs.cornellsd.org
jrsr.madrid.k12.ia.us
k8.pickettk12.net
msms.gatewayk12.org
parish.stmarysspokane.com
parish.stmarysspokane.org
pchs.pickettk12.net
pdhs.rbusd.org
ram.gatewayk12.org
ranchitoavees.org
school.stmarysspokane.com
school.stmarysspokane.org
stmarysspokane.com
stmarysspokane.org
up.gatewayk12.org
www.admin.grupograven.com.mx
www.athlosreno.org
www.bpsd.us
www.cornell.k12.pa.us
www.cornellsd.org
www.galileogalilei.edu.mx
www.galtadultschool.com
www.gatewayk12.org
www.grupograven.com.mx
www.ideapcs.org
www.madrid.k12.ia.us
www.palihigh.org
www.pickettk12.net
www.ranchitoavees.org
www.stmarysspokane.com
www.stmarysspokane.org
www.wearelibertyranch.com
www.youngsvilleacademy.org
youngsvilleacademy.org

Other certificates including the domain name desotoschools.com

(limited to 100 certificates)
*.schoology.com
desotoschools.com
schoology.com
email.desoto.k12.fl.us
admin.bes.hampton1.org
peterson.edu.mx
*.desotoschools.com
*.schoology.com
newellelementaryschool.wearecms.com
schoology.com
admin.randolphmiddleschool.wearecms.com
nes.desotoschools.com
desotoschools.com
schoology.com
follett.desotoschools.com
schoology.com
schoology.com
desotoschools.com
desotoschools.com
*.schoology.com
wes.desotoschools.com
schoology.com
schoology.com
*.desotoschools.com
www.ps52si.org
email.desoto.k12.fl.us
*.schoology.com
cet.edu.mx
dms.desotoschools.com
email.desoto.k12.fl.us
schoology.com
admin.troupisd.org
desotoschools.com
*.schoology.com
gradebook.desotoschools.com
schoology.com
schoology.com
schoology.com
desotoschools.com
email.desoto.k12.fl.us
activities.madrid.k12.ia.us
schoology.com
schoology.com
admin.bes.hampton1.org
*.schoology.com
wes.desotoschools.com
dhs.desotoschools.com
schoology.com
schoology.com
admin.elementary.troupisd.org
fortiems.desotoschools.com
admin.desotoschools.com
desotoschools.com
email.desoto.k12.fl.us
*.schoology.com
schoology.com
*.schoology.com
admin.ashleyparkprek8school.wearecms.com
schoology.com
desotoschools.com
schoology.com
schoology.com
*.schoology.com
schoology.com
schoology.com
schoology.com
desotoschools.com
email.desoto.k12.fl.us
www.markedtreeschools.com
activities.madrid.k12.ia.us
*.schoology.com
*.schoology.com
admin.altavista.rbusd.org
admin.dss.desotoschools.com
schoology.com
email.desoto.k12.fl.us
schoology.com
*.schoology.com
dss.desotoschools.com
schoology.com
ssec.stanlycountyschools.org
admin.bes.hampton1.org
www.overtoncountyschools.net
fsc.desotoschools.com
activities.madrid.k12.ia.us
schoology.com
desotoschools.com
schoology.com
admin.bes.hampton1.org
schoology.com
admin.gulfstreamschool.org
admin.wjsd.org
*.desotoschools.com
schoology.com
nes.desotoschools.com
schoology.com
admin.high.troupisd.org
admin.bes.hampton1.org
mes.desotoschools.com
dhs.desotoschools.com

Certificate

The complete raw certificate details for admin.dss.desotoschools.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330208945581244976579427233123218261680437
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-10 01:12:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-08 01:12:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.dss.desotoschools.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1688 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activities.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.activities.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cornellsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cse.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dss.desotoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.el.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.es.cornellsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ev.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.galileogalilei.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.galtadultschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ghs.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gms.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hs.cornellsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ideapcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jrsr.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.k8.pickettk12.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.msms.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.palihigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pchs.pickettk12.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pickettk12.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ram.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ranchitoavees.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stmarysspokane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.up.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wearelibertyranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.youngsvilleacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cse.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dss.desotoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'el.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.cornell.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.cornellsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ev.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galileogalilei.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghs.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gms.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.cornell.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.cornellsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jrsr.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k8.pickettk12.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msms.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parish.stmarysspokane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parish.stmarysspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pchs.pickettk12.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdhs.rbusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ram.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranchitoavees.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.stmarysspokane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.stmarysspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysspokane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'up.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.admin.grupograven.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athlosreno.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bpsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornell.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornellsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.galileogalilei.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.galtadultschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grupograven.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ideapcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.palihigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pickettk12.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ranchitoavees.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysspokane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wearelibertyranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youngsvilleacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youngsvilleacademy.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016bd9a72737000004030047304502206ccb23a2caeda0225a9b13952bba6761c93f5182cb7409a2f614b91e56a88354022100a1c4517bedfef52c389a2cb6a8d12c4ab5da8af1e85b0c819ff573bdf63c2a2f007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016bd9a727500000040300463044022054344359458c72819baeb3441fb79e1110195b0a0303b9276f3733f26d438902022006c05f7596731c9a0d198833cea84759cfe0881a95000ff1a6423a910e092f7b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000fe7a63fb01c681337485edfce24d6d43b27446973cc3df85f7e9d187a15e9e0742a2a95380600756960a3883ec0cfafb63e03f7dc94c45dc3d413c47b166c40d419a9411812cfabf517b035ce1c09978c33a84235d2e93a76df90b440bbe21a6f960f8245a28d5a24e3e50315cf053f880f31939f7943c43b44978bf17e27df4de9ae34532a31777c85dd364bbdc2a426335b2ae6e4c63f404d24560eb8ec5fdc770674f1a9a28f9aa7e229294948a4af4cc1e6857ea91107f5d69f087fca4b32a4892b45e293189ff720a9f6ef1510dff3a2d6e6ce78504c4216e5186fa5c2d8a2b650230213a5c9709ca511b710121fe0f6281752d09d49c841226c3ce983