aak.potsdam.k12.ny.us

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6c:51:50:1d:0e:7a:b7:a1:bf:97:3e:cc:13:b1:57:1c:52 was issued on by Let's Encrypt.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aak.potsdam.k12.ny.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6c:51:50:1d:0e:7a:b7:a1:bf:97:3e:cc:13:b1:57:1c:52
Serial Number (int): 298195436863486406915388213750745934535762
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 55:b5:95:b2:51:f8:d4:31:57:c1:c7:c9:d8:12:63:26:04:6f:d7:47
Fingerprint (sha256): b4:35:e7:e7:4d:b6:f5:3e:bf:10:2d:7f:1b:3c:5f:52:0f:db:37:46:9f:f3:8f:9c:56:61:73:b4:b9:d4:b9:0a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aak.potsdam.k12.ny.us

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aak.potsdam.k12.ny.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aak.potsdam.k12.ny.us
admin.aak.potsdam.k12.ny.us
admin.ahs.airportschools.com
admin.airportschools.com
admin.alexandercsd.org
admin.ava.airportschools.com
admin.berrienschools.org
admin.bls.lcdoe.org
admin.curiehs.org
admin.eastvalleyhs.net
admin.eyler.airportschools.com
admin.fes.lcdoe.org
admin.hrs.lcdoe.org
admin.kabbalahacademy.net
admin.lae.potsdam.k12.ny.us
admin.lcdoe.org
admin.lchs.lcdoe.org
admin.mlvrcs.org
admin.nce.airportschools.com
admin.nga.lcdoe.org
admin.phs.potsdam.k12.ny.us
admin.potsdam.k12.ny.us
admin.ritter.airportschools.com
admin.sle.lcdoe.org
admin.sterling.airportschools.com
admin.thevalleyacademy.net
admin.ujh.lcdoe.org
admin.wagar56.airportschools.com
admin.wagar78.airportschools.com
admin.wcr.centerusd.org
admin.windberschools.org
ahs.airportschools.com
airportschools.com
alexandercsd.org
ava.airportschools.com
berrienschools.com
berrienschools.org
bls.lcdoe.org
cmschl.org
csisd.org
curiehs.org
eastvalleyhs.net
elementary.alexandercsd.org
eurotexcoco.edu.mx
eyler.airportschools.com
fes.lcdoe.org
hrs.lcdoe.org
jatl.jubileeacademies.org
jd.jubileeacademies.org
jhp.jubileeacademies.org
jkv.jubileeacademies.org
jlv.jubileeacademies.org
jlw.jubileeacademies.org
jubileeacademies.org
lae.potsdam.k12.ny.us
lcdoe.org
lchs.lcdoe.org
lennox.k12.ca.us
middlehigh.alexandercsd.org
mlvrcs.org
nce.airportschools.com
nga.lcdoe.org
phs.potsdam.k12.ny.us
ritter.airportschools.com
sle.lcdoe.org
sterling.airportschools.com
thevalleyacademy.net
ujh.lcdoe.org
wagar56.airportschools.com
wagar78.airportschools.com
wcr.centerusd.org
windberschools.org
www.airportschools.com
www.alexandercsd.org
www.berrienschools.com
www.berrienschools.org
www.curiehs.org
www.eastvalleyhs.net
www.eurotexcoco.edu.mx
www.jubileeacademies.org
www.lcdoe.org
www.mlvrcs.org
www.potsdam.k12.ny.us
www.thevalleyacademy.net
www.windberschools.org

Other certificates including the domain name potsdam.k12.ny.us

(limited to 100 certificates)
help.potsdam.k12.ny.us
helpdesk.potsdam.k12.ny.us
www.eastvalleyhs.net
sv.gvusd.k12.ca.us
lae.potsdam.k12.ny.us
helpdesk.potsdam.k12.ny.us
admin.adulted.erusd.org
helpdesk.potsdam.k12.ny.us
help.potsdam.k12.ny.us
bps.berrienschools.org
admin.jww.jubileeacademies.org
helpdesk.potsdam.k12.ny.us
admin.berrienschools.org
aak.potsdam.k12.ny.us
aak.potsdam.k12.ny.us
helpdesk.potsdam.k12.ny.us
centerpreschool.centerusd.org
helpdesk.potsdam.k12.ny.us
help.potsdam.k12.ny.us
helpdesk.potsdam.k12.ny.us
helpdesk.potsdam.k12.ny.us
helpdesk.potsdam.k12.ny.us
landrum.sbcisd.net
helpdesk.potsdam.k12.ny.us
aak.potsdam.k12.ny.us
helpdesk.potsdam.k12.ny.us
dudley.centerusd.org
help.potsdam.k12.ny.us
admin.bes.berrienschools.org
helpdesk.potsdam.k12.ny.us
helpdesk.potsdam.k12.ny.us
help.potsdam.k12.ny.us
aak.potsdam.k12.ny.us
admin.centerpreschool.centerusd.org
instructionaltech.sbcisd.net
helpdesk.potsdam.k12.ny.us
helpdesk.potsdam.k12.ny.us
helpdesk.potsdam.k12.ny.us
aak.potsdam.k12.ny.us
helpdesk.potsdam.k12.ny.us
ochoaprep.erusd.org
*.potsdam.k12.ny.us
help.potsdam.k12.ny.us
aak.potsdam.k12.ny.us
help.potsdam.k12.ny.us
aak.potsdam.k12.ny.us
help.potsdam.k12.ny.us
aak.potsdam.k12.ny.us
admin.elementary.alexandercsd.org
aak.potsdam.k12.ny.us
helpdesk.potsdam.k12.ny.us
www.curiehs.org
admin.erusd.org
helpdesk.potsdam.k12.ny.us
helpdesk.potsdam.k12.ny.us
helpdesk.potsdam.k12.ny.us
aak.potsdam.k12.ny.us
helpdesk.potsdam.k12.ny.us
aak.potsdam.k12.ny.us
www.centerusd.org
help.potsdam.k12.ny.us
www.berrienschools.com
erhs.erusd.org
helpdesk.potsdam.k12.ny.us
helpdesk.potsdam.k12.ny.us
aak.potsdam.k12.ny.us
aak.potsdam.k12.ny.us
jlw.jubileeacademies.org
middlehigh.alexandercsd.org
helpdesk.potsdam.k12.ny.us
help.potsdam.k12.ny.us
helpdesk.potsdam.k12.ny.us
aak.potsdam.k12.ny.us
helpdesk.potsdam.k12.ny.us

Certificate

The complete raw certificate details for aak.potsdam.k12.ny.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298195436863486406915388213750745934535762
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-03 00:59:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-02 00:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aak.potsdam.k12.ny.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1944 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aak.potsdam.k12.ny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.aak.potsdam.k12.ny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ahs.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.alexandercsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ava.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.berrienschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bls.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.curiehs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eastvalleyhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eyler.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fes.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hrs.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kabbalahacademy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lae.potsdam.k12.ny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lchs.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mlvrcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nce.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nga.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.phs.potsdam.k12.ny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.potsdam.k12.ny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ritter.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sle.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sterling.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.thevalleyacademy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ujh.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wagar56.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wagar78.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wcr.centerusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.windberschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahs.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexandercsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ava.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berrienschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berrienschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bls.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmschl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curiehs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastvalleyhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elementary.alexandercsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eurotexcoco.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyler.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fes.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrs.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jatl.jubileeacademies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jd.jubileeacademies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhp.jubileeacademies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jkv.jubileeacademies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jlv.jubileeacademies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jlw.jubileeacademies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jubileeacademies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lae.potsdam.k12.ny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lchs.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lennox.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'middlehigh.alexandercsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlvrcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nce.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nga.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phs.potsdam.k12.ny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ritter.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sle.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sterling.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thevalleyacademy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ujh.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wagar56.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wagar78.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcr.centerusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windberschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alexandercsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berrienschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berrienschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.curiehs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastvalleyhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eurotexcoco.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jubileeacademies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mlvrcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.potsdam.k12.ny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thevalleyacademy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.windberschools.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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