bes.ballingerisd.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:04:01:41:ce:e9:f7:07:4f:ca:cd:fc:24:c9:44:53:42:da was issued on by Let's Encrypt.

With 44 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bes.ballingerisd.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:04:01:41:ce:e9:f7:07:4f:ca:cd:fc:24:c9:44:53:42:da
Serial Number (int): 262699658186969075328176299981965549060826
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e9:d3:d6:b8:a0:c3:71:fa:f0:c7:ab:66:d2:61:41:10:8d:3f:27:fe
Fingerprint (sha256): b4:6e:29:2e:5a:a3:8c:91:12:8d:a2:a0:cf:6f:7a:c3:f6:6c:b3:e0:71:44:f1:a4:26:34:2d:22:60:09:3f:47

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bes.ballingerisd.net

44

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bes.ballingerisd.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

academy.comalisd.org
acrma5.org
admin.acrma5.org
admin.amundsenhs.org
admin.ballingerisd.net
admin.bordentown.k12.nj.us
admin.crma5.org
admin.eue.mpsdnow.org
admin.fisher.southredford.org
admin.horizon.gobearsgo.net
admin.richardallenschools.com
admin.sjsbr.org
admin.vistagrande.pvpusd.net
ajshs.anacondaschools.org
amundsenhs.org
bes.ballingerisd.net
bhs.ballingerisd.net
cdc.comalisd.org
chms.comalisd.org
chs.comalisd.org
crma5.org
cv.k12.ca.us
elem.monessenschooldistrict.com
gres.comalisd.org
hort.bcsd.com
jres.comalisd.org
kpe.mpsdnow.org
kres.comalisd.org
mes.comalisd.org
mves.comalisd.org
nel.sau29.org
rces.comalisd.org
soleado.pvpusd.net
stzes.comalisd.org
svhs.comalisd.org
swprep.org
tpes.comalisd.org
www.acrma5.org
www.amundsenhs.org
www.ballingerisd.net
www.comalisd.org
www.crma5.org
www.lisaacademy.org
www.mtadams.wednet.edu

Other certificates including the domain name ballingerisd.net

(limited to 100 certificates)
athletics.godleyisd.net
admin.dover.k12.nh.us
dkies.org
www.hoganprep.net
www.kipling.edu.mx
ges.dover.k12.nh.us
admin.eceap.gsd.wednet.edu
bes.gobearsgo.net
gfes.comalisd.org
www.comalisd.org
cp.athenscityschools.net
jres.comalisd.org
admin.rowlettacademies.org
jacksoncoschools.com
ylms.org
admin.union.kyschools.us
filewave.ballingerisd.net
mtpcsd.org
*.ballingerisd.net
dms.dover.k12.nh.us
bhs.ballingerisd.net
www.alarqamislamicschool.org
svms.comalisd.org
admin.bhs.ballingerisd.net
admin.crma5.org
admin.jchs.jacksoncoschools.com
*.ballingerisd.net
cscisd.net
admin.dkies.org
admin.todd.kyschools.us
tbjelc.henderson.kyschools.us
sle.slvusd.org
www.msdathletics.com
ballingerisd.net
chs.comalisd.org
admin.wps.dover.k12.nh.us
admin.cornerstone.pvpusd.net
kpe.mpsdnow.org
1fairfield.org
mhs.mayfield.kyschools.us
*.ballingerisd.net
admin.olneycharter.org
admin.bes.ballingerisd.net
admin.eastview.gcschools.net
admin.saintpiusx.com
cecvac.com
admin.lunadabay.pvpusd.net
cses.comalisd.org
www.todd.kyschools.us
glendora.k12.ca.us
acrma5.org
mes.mayfield.kyschools.us
academy.comalisd.org
cdc.comalisd.org
svhs.comalisd.org
www.whitesburgchristianacademy.org
admin.bhs.ballingerisd.net
admin.jhs.ballingerisd.net
ajshs.anacondaschools.org
acrma5.org
admin.ges.dover.k12.nh.us
bes.ballingerisd.net
salem.mtpcsd.org
admin.pac.sboe.org
ballingerisd.net
hoganprep.net
admin.williampenn.bcsd.com
www.richardallenschools.com
admin.bles.lex3.org
admin.bhs.ballingerisd.net
admin.rapk3.richardallenschools.com
admin.bellamy.dover.k12.nh.us
admin.mes.mayfield.kyschools.us
www.union.kyschools.us
filewave.ballingerisd.net
admin.elkridge.whiteriver.wednet.edu
hs.cscisd.net
pantojacharter.org
admin.brhs.bordentown.k12.nj.us
monessenschooldistrict.com
admin.ctc.dover.k12.nh.us
admin.jacksoncoschools.com
admin.athletics.godleyisd.net
cdc.comalisd.org
hs.hoganprep.net
www.nestleavecharter.com
lunadabay.pvpusd.net
acrma5.org
gres.comalisd.org
cv.k12.ca.us
admin.cshs.cscisd.net
chms.comalisd.org
admin.mes.mayfield.kyschools.us
hles.comalisd.org
admin.athenscityschools.net
ses.comalisd.org
www.ballingerisd.net
bbes.comalisd.org
elc.whiteriver.wednet.edu
www.comalisd.org

Certificate

The complete raw certificate details for bes.ballingerisd.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJyDCCCLCgAwIBAgISAwQBQc7p9wdPys38JMlEU0LaMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMjgxMDQwMzRaFw0x
OTA0MjgxMDQwMzRaMB8xHTAbBgNVBAMTFGJlcy5iYWxsaW5nZXJpc2QubmV0MIIC
IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQbTHb+2z7rfYV
Cl+ph5m8FJJOEgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5pV3R4RBgn18R
THnTD9fS27JxyeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGrmQF3Z/h2e6St
agubO+pVwFzG8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK7wAhJO8el2z3
75LDd2VIwrdWQP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlWZ1AdjOKfRiY0
ckFuu/DYkuvkNKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5Tu7zbek/MR/J
MR9nceWyZ2Mund+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzwWzBvTD8F7q6c
kUbIgpeo7stn7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuaivjW/P+Tm64Xj
XNjP9F1W8+5tlcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ4Iudx/o3Q4E2
w6Aud9PYyV05pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/h0omUmCIDiQV
G30eHhb3OIP3bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUnohkUi6ikD4me
6o58sq/IQVmyem1M/E0CAwEAAaOCBdEwggXNMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
FgQUL2vITWwsLjLyACD/LU1sWvxuurswHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3
pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2Nz
cC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2Vy
dC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzCCA4cGA1UdEQSCA34wggN6ghRhY2Fk
ZW15LmNvbWFsaXNkLm9yZ4IKYWNybWE1Lm9yZ4IQYWRtaW4uYWNybWE1Lm9yZ4IU
YWRtaW4uYW11bmRzZW5ocy5vcmeCFmFkbWluLmJhbGxpbmdlcmlzZC5uZXSCGmFk
bWluLmJvcmRlbnRvd24uazEyLm5qLnVzgg9hZG1pbi5jcm1hNS5vcmeCFWFkbWlu
LmV1ZS5tcHNkbm93Lm9yZ4IdYWRtaW4uZmlzaGVyLnNvdXRocmVkZm9yZC5vcmeC
G2FkbWluLmhvcml6b24uZ29iZWFyc2dvLm5ldIIdYWRtaW4ucmljaGFyZGFsbGVu
c2Nob29scy5jb22CD2FkbWluLnNqc2JyLm9yZ4IcYWRtaW4udmlzdGFncmFuZGUu
cHZwdXNkLm5ldIIZYWpzaHMuYW5hY29uZGFzY2hvb2xzLm9yZ4IOYW11bmRzZW5o
cy5vcmeCFGJlcy5iYWxsaW5nZXJpc2QubmV0ghRiaHMuYmFsbGluZ2VyaXNkLm5l
dIIQY2RjLmNvbWFsaXNkLm9yZ4IRY2htcy5jb21hbGlzZC5vcmeCEGNocy5jb21h
bGlzZC5vcmeCCWNybWE1Lm9yZ4IMY3YuazEyLmNhLnVzgh9lbGVtLm1vbmVzc2Vu
c2Nob29sZGlzdHJpY3QuY29tghFncmVzLmNvbWFsaXNkLm9yZ4INaG9ydC5iY3Nk
LmNvbYIRanJlcy5jb21hbGlzZC5vcmeCD2twZS5tcHNkbm93Lm9yZ4IRa3Jlcy5j
b21hbGlzZC5vcmeCEG1lcy5jb21hbGlzZC5vcmeCEW12ZXMuY29tYWxpc2Qub3Jn
gg1uZWwuc2F1Mjkub3JnghFyY2VzLmNvbWFsaXNkLm9yZ4ISc29sZWFkby5wdnB1
c2QubmV0ghJzdHplcy5jb21hbGlzZC5vcmeCEXN2aHMuY29tYWxpc2Qub3Jnggpz
d3ByZXAub3JnghF0cGVzLmNvbWFsaXNkLm9yZ4IOd3d3LmFjcm1hNS5vcmeCEnd3
dy5hbXVuZHNlbmhzLm9yZ4IUd3d3LmJhbGxpbmdlcmlzZC5uZXSCEHd3dy5jb21h
bGlzZC5vcmeCDXd3dy5jcm1hNS5vcmeCE3d3dy5saXNhYWNhZGVteS5vcmeCFnd3
dy5tdGFkYW1zLndlZG5ldC5lZHUwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYB
BAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v
cmcwggECBgorBgEEAdZ5AgQCBIHzBIHwAO4AdQDiaUuuJujpQAnohhu2O4PUPuf+
dIj7pI8okwGd3fHb/gAAAWiUQtksAAAEAwBGMEQCIFSd0B4MrbGjCP7joFRuC5ue
5t4G9YY4uxk/ie3wfNc/AiBqhbV0egFh3aKEGvLHFzfW9S7nmkpGmpLeVLhsZsVx
0wB1ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABaJRC14IAAAQD
AEYwRAIgSruCLHdc6N9k7KtMsU4NjvVpezCvTYQJr65x68HgAl0CIG29ZX+ThiVs
DFifB47vPD8oJSSZpprLC7RY9gJprlKTMA0GCSqGSIb3DQEBCwUAA4IBAQBB5TEU
TLROp+QOsevtopYLbu2MFTtaMasMwjoSGLiqpHvVvAfjvOX4+UKEwxCIkZjWoFLp
5G/mcG13uuTIezVZqCMYR7lNbGAv7ywVkBaRplNm6OeD/BT+RB5yDgA64Ezzud0B
z1U6jueYMlIIi2BQP7NLiiNDQa7WbhnjJZmAPaJww8Q53H6R1OmRJ5VyAi/6u6Bu
bTv15OJy/fbp/2HpRO2o2Pm6hYY1zRHVdz6ngLLQxCR/lZxdYGb7Mk8zxgvVIRWJ
ensO2gf5MM+uPvCgwujpxuk9GYJdBopHPxr12fZ5vI3qsZsyH/RaJeKPbihsLG7H
rteg8uUwB1l75KFh
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQbTHb+2z7
rfYVCl+ph5m8FJJOEgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5pV3R4RBg
n18RTHnTD9fS27JxyeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGrmQF3Z/h2
e6StagubO+pVwFzG8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK7wAhJO8e
l2z375LDd2VIwrdWQP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlWZ1AdjOKf
RiY0ckFuu/DYkuvkNKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5Tu7zbek/
MR/JMR9nceWyZ2Mund+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzwWzBvTD8F
7q6ckUbIgpeo7stn7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuaivjW/P+Tm
64XjXNjP9F1W8+5tlcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ4Iudx/o3
Q4E2w6Aud9PYyV05pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/h0omUmCI
DiQVG30eHhb3OIP3bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUnohkUi6ik
D4me6o58sq/IQVmyem1M/E0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262699658186969075328176299981965549060826
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-28 10:40:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-28 10:40:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bes.ballingerisd.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (894 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academy.comalisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acrma5.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.acrma5.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.amundsenhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ballingerisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bordentown.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.crma5.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eue.mpsdnow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fisher.southredford.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.horizon.gobearsgo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.richardallenschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sjsbr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.vistagrande.pvpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajshs.anacondaschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amundsenhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bes.ballingerisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhs.ballingerisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdc.comalisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chms.comalisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chs.comalisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crma5.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cv.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elem.monessenschooldistrict.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gres.comalisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hort.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jres.comalisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpe.mpsdnow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kres.comalisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mes.comalisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mves.comalisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nel.sau29.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rces.comalisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soleado.pvpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stzes.comalisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svhs.comalisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpes.comalisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acrma5.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amundsenhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ballingerisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comalisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crma5.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lisaacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtadams.wednet.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001689442d92c00000403004630440220549dd01e0cadb1a308fee3a0546e0b9b9ee6de06f58638bb193f89edf07cd73f02206a85b5747a0161dda2841af2c71737d6f52ee79a4a469a92de54b86c66c571d3007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001689442d782000004030046304402204abb822c775ce8df64ecab4cb14e0d8ef5697b30af4d8409afae71ebc1e0025d02206dbd657f9386256c0c589f078eef3c3f28252499a69acb0bb458f60269ae5293
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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