www.charlottechoicecharter.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a0:36:ba:19:51:d1:c2:97:af:8f:ad:4c:36:07:9a:d6:fc was issued on by Let's Encrypt.

With 53 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.charlottechoicecharter.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a0:36:ba:19:51:d1:c2:97:af:8f:ad:4c:36:07:9a:d6:fc
Serial Number (int): 315854781095161605899012058392563921114876
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 87:c6:4d:ff:63:e6:e8:a8:89:f3:99:5c:4b:e9:0d:bf:e2:fb:f5:9f
Fingerprint (sha256): b5:31:a2:01:f6:6b:fa:ed:84:9f:12:1c:ab:21:02:85:53:a7:04:cf:7a:84:ef:e8:4c:0b:60:21:32:7c:f5:5a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.charlottechoicecharter.org

53

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.charlottechoicecharter.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.alpinevista.tcsdk8.org
admin.cherry.tcsdk8.org
admin.cypress.tcsdk8.org
admin.garden.tcsdk8.org
admin.godwinschools.org
admin.heritage.tcsdk8.org
admin.hs.godwinschools.org
admin.kohn.tcsdk8.org
admin.learning-center.godwinschools.org
admin.lincoln.tcsdk8.org
admin.liveoak.tcsdk8.org
admin.lostules.tcsdk8.org
admin.maple.tcsdk8.org
admin.missionvalley.tcsdk8.org
admin.ms.godwinschools.org
admin.mulcahy.tcsdk8.org
admin.north.godwinschools.org
admin.orchardviewschool.org
admin.pleasant.tcsdk8.org
admin.roosevelt.tcsdk8.org
admin.staff.godwinschools.org
admin.tcsdk8.org
admin.west.godwinschools.org
admin.wilson.tcsdk8.org
alpinevista.tcsdk8.org
charlottechoicecharter.org
cherry.tcsdk8.org
cypress.tcsdk8.org
garden.tcsdk8.org
godwinschools.org
heritage.tcsdk8.org
hs.godwinschools.org
kohn.tcsdk8.org
learning-center.godwinschools.org
lincoln.tcsdk8.org
liveoak.tcsdk8.org
lostules.tcsdk8.org
maple.tcsdk8.org
missionvalley.tcsdk8.org
ms.godwinschools.org
mulcahy.tcsdk8.org
north.godwinschools.org
orchardviewschool.org
pleasant.tcsdk8.org
roosevelt.tcsdk8.org
staff.godwinschools.org
tcsdk8.org
west.godwinschools.org
wilson.tcsdk8.org
www.charlottechoicecharter.org
www.godwinschools.org
www.orchardviewschool.org
www.tcsdk8.org

Other certificates including the domain name charlottechoicecharter.org

(limited to 100 certificates)
www.bradleyschools.org
5.bellevilleschools.org
admin.charlottechoicecharter.org
www.nolafsme.org
www.hwrsd.org
www.nccs.k12.nc.us
ac21.clps.org
admin.charlottechoicecharter.org
www.hwrsd.org
ac21.clps.org
5.bellevilleschools.org
www.bendist25.org
5.bellevilleschools.org
5.bellevilleschools.org
5.bellevilleschools.org
www.hwrsd.org
admin.charlottechoicecharter.org
admin.aes.cvsd.org
dietz.crandall-isd.net
mas.mpusd.net
admin.hs.gsd.wednet.edu
5.bellevilleschools.org
admin.rems.cherokee.k12.nc.us
cet.edu.mx
ldes.tcs.k12.nc.us
5.bellevilleschools.org
5.bellevilleschools.org
moreno.bhusd.k12.ca.us
5.bellevilleschools.org
admin.aristoiclassical.org
admin.charlottechoicecharter.org
5.bellevilleschools.org
alt.crandall-isd.net
www.lasgs.net
www.mdsummerschool.com
zoraellisjh.net
www.thomasolaeta.school
admin.ddaa.arthuracademy.org
admin.bes.cvsd.org
hartorah.org
5.bellevilleschools.org
adulted.sanjacinto.k12.ca.us
5.bellevilleschools.org
waa.arthuracademy.org
5.bellevilleschools.org
ac21.clps.org
hsp.clps.org
admin.bcca.bibbed.org
admin.bcca.bibbed.org
www.lcelions.net
admin.komarekschool.org
www.colegioedgarmorin.edu.mx
www.charlottechoicecharter.org
admin.charlottechoicecharter.org
ces.shelbycs.org
admin.charlottechoicecharter.org
www.stroseschoolwilmington.org
saintdominicschool.com
admin.charlottechoicecharter.org
ac21.clps.org
admin.mes.cvsd.org
invictusprep.com
admin.ves.monroe.k12.tn.us
tpes.monroe.k12.tn.us
admin.charlottechoicecharter.org
admin.godwinschools.org
charlottechoicecharter.org
ac21.clps.org
www.stjosephpomona.org
hwrsd.org
invictusprep.org
admin.colonies.sunrisesd.ca
charlottechoicecharter.org
5.bellevilleschools.org

Certificate

The complete raw certificate details for www.charlottechoicecharter.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILbDCCClSgAwIBAgISA6A2uhlR0cKXr4+tTDYHmtb8MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjMwOTQ0NDFaFw0x
OTA4MjEwOTQ0NDFaMCkxJzAlBgNVBAMTHnd3dy5jaGFybG90dGVjaG9pY2VjaGFy
dGVyLm9yZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK2shenuZt6M
UG0x2/ts+632FQpfqYeZvBSSThIBLbBZ4fODBV4SJe7hDrakpTCrEdtnc3DQLStR
uaVd0eEQYJ9fEUx50w/X0tuyccnsn5V33VF+1cOGhq8jH/DBPmRoaGkD9F2Ad1wx
q5kBd2f4dnukrWoLmzvqVcBcxvFQwHZ2obFK2x66Unn4ms4soYXj5C980IPzpmkJ
Cu8AISTvHpds9++Sw3dlSMK3VkD9iY1fPdmHfrSGTpwJNo8g5b9zGFylxopQcq0J
VmdQHYzin0YmNHJBbrvw2JLr5DSptn981Gr8N7JQro2Vh5CB2TaWjbcX7K6SLVCK
uU7u823pPzEfyTEfZ3HlsmdjLp3fkm4Hy3/esD4VQWq67KdRzUfiJKMra+TzDUQc
8Fswb0w/Be6unJFGyIKXqO7LZ+29CDVz2IDU+8xV/1DQnFo/mmifirvDCleBBBLm
or41vz/k5uuF41zYz/RdVvPubZXCYCYRlMhMpQlLQEaoT6I1M0J64dYlEjETSNpY
ieCLncf6N0OBNsOgLnfT2MldOaRYDHUi2DURkE8kEUmkm0Nx5n2Yv6UIxclKIYgO
/4dKJlJgiA4kFRt9Hh4W9ziD92yYrF2SuKhK5+WQ5inVIDQtxkvssK0wAWI9DfhF
J6IZFIuopA+JnuqOfLKvyEFZsnptTPxNAgMBAAGjggdrMIIHZzAOBgNVHQ8BAf8E
BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQC
MAAwHQYDVR0OBBYEFC9ryE1sLC4y8gAg/y1NbFr8brq7MB8GA1UdIwQYMBaAFKhK
amMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYi
aHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYj
aHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wggUfBgNVHREEggUW
MIIFEoIcYWRtaW4uYWxwaW5ldmlzdGEudGNzZGs4Lm9yZ4IXYWRtaW4uY2hlcnJ5
LnRjc2RrOC5vcmeCGGFkbWluLmN5cHJlc3MudGNzZGs4Lm9yZ4IXYWRtaW4uZ2Fy
ZGVuLnRjc2RrOC5vcmeCF2FkbWluLmdvZHdpbnNjaG9vbHMub3JnghlhZG1pbi5o
ZXJpdGFnZS50Y3Nkazgub3JnghphZG1pbi5ocy5nb2R3aW5zY2hvb2xzLm9yZ4IV
YWRtaW4ua29obi50Y3Nkazgub3JngidhZG1pbi5sZWFybmluZy1jZW50ZXIuZ29k
d2luc2Nob29scy5vcmeCGGFkbWluLmxpbmNvbG4udGNzZGs4Lm9yZ4IYYWRtaW4u
bGl2ZW9hay50Y3Nkazgub3JnghlhZG1pbi5sb3N0dWxlcy50Y3Nkazgub3JnghZh
ZG1pbi5tYXBsZS50Y3Nkazgub3Jngh5hZG1pbi5taXNzaW9udmFsbGV5LnRjc2Rr
OC5vcmeCGmFkbWluLm1zLmdvZHdpbnNjaG9vbHMub3JnghhhZG1pbi5tdWxjYWh5
LnRjc2RrOC5vcmeCHWFkbWluLm5vcnRoLmdvZHdpbnNjaG9vbHMub3JnghthZG1p
bi5vcmNoYXJkdmlld3NjaG9vbC5vcmeCGWFkbWluLnBsZWFzYW50LnRjc2RrOC5v
cmeCGmFkbWluLnJvb3NldmVsdC50Y3Nkazgub3Jngh1hZG1pbi5zdGFmZi5nb2R3
aW5zY2hvb2xzLm9yZ4IQYWRtaW4udGNzZGs4Lm9yZ4IcYWRtaW4ud2VzdC5nb2R3
aW5zY2hvb2xzLm9yZ4IXYWRtaW4ud2lsc29uLnRjc2RrOC5vcmeCFmFscGluZXZp
c3RhLnRjc2RrOC5vcmeCGmNoYXJsb3R0ZWNob2ljZWNoYXJ0ZXIub3JnghFjaGVy
cnkudGNzZGs4Lm9yZ4ISY3lwcmVzcy50Y3Nkazgub3JnghFnYXJkZW4udGNzZGs4
Lm9yZ4IRZ29kd2luc2Nob29scy5vcmeCE2hlcml0YWdlLnRjc2RrOC5vcmeCFGhz
LmdvZHdpbnNjaG9vbHMub3Jngg9rb2huLnRjc2RrOC5vcmeCIWxlYXJuaW5nLWNl
bnRlci5nb2R3aW5zY2hvb2xzLm9yZ4ISbGluY29sbi50Y3Nkazgub3JnghJsaXZl
b2FrLnRjc2RrOC5vcmeCE2xvc3R1bGVzLnRjc2RrOC5vcmeCEG1hcGxlLnRjc2Rr
OC5vcmeCGG1pc3Npb252YWxsZXkudGNzZGs4Lm9yZ4IUbXMuZ29kd2luc2Nob29s
cy5vcmeCEm11bGNhaHkudGNzZGs4Lm9yZ4IXbm9ydGguZ29kd2luc2Nob29scy5v
cmeCFW9yY2hhcmR2aWV3c2Nob29sLm9yZ4ITcGxlYXNhbnQudGNzZGs4Lm9yZ4IU
cm9vc2V2ZWx0LnRjc2RrOC5vcmeCF3N0YWZmLmdvZHdpbnNjaG9vbHMub3Jnggp0
Y3Nkazgub3JnghZ3ZXN0LmdvZHdpbnNjaG9vbHMub3JnghF3aWxzb24udGNzZGs4
Lm9yZ4Ied3d3LmNoYXJsb3R0ZWNob2ljZWNoYXJ0ZXIub3JnghV3d3cuZ29kd2lu
c2Nob29scy5vcmeCGXd3dy5vcmNoYXJkdmlld3NjaG9vbC5vcmeCDnd3dy50Y3Nk
azgub3JnMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI
KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHW
eQIEAgSB9QSB8gDwAHUA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4A
AAFq5EsA8QAABAMARjBEAiB1jBBDLYsDVkoLDDd3AhdIZtrvMEy+qHIvvTEoGZD1
QQIgMBYbGwRHymV3wS4nUMvZinTfLzOFnFJr1VJbb5NxPbIAdwBj8tvN6DvMLM8L
coQnV2szpI1hd4+9daY4scdoVEvYjQAAAWrkSv8jAAAEAwBIMEYCIQDsxmxZRwcg
VOSuwE6U2X0GLW+xQOhJAhGQLPh74kV1GwIhALn0Lo7qSe4vU4CzTYA4fhysIf/X
NIwWuQMdJAn2g8gnMA0GCSqGSIb3DQEBCwUAA4IBAQAu9/qE532Mjmdp3Tb+S+ZL
Usrv7vegQm41R3U7YD3dRLHJXOugnJXT5Vvx54S5f3UysIJ5vMDF8hqTvoB4KHEF
VZK12uq0WWHL1eBDMpPjqosNh9N+6NpD8X2rT5joGaZlmdMowVtFZLn7QJAClkCF
GoldyayJChmhovmqhQoMHncUxiGgz2NZv6Dtamn+OUoS03wn0oRgC0EB/dPFeNox
4nDOK3at+YP8s6xmsbIfq96x6CC3LnDZq/0+2rOr858GPSStJheM4zvDqHmCvFDZ
oSfAk9l/l3Oc60UkpYvm+AExQSoAjAEVen0rTrEKYtLkEsLGu8ZkVfEihA80/WQu
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQbTHb+2z7
rfYVCl+ph5m8FJJOEgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5pV3R4RBg
n18RTHnTD9fS27JxyeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGrmQF3Z/h2
e6StagubO+pVwFzG8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK7wAhJO8e
l2z375LDd2VIwrdWQP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlWZ1AdjOKf
RiY0ckFuu/DYkuvkNKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5Tu7zbek/
MR/JMR9nceWyZ2Mund+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzwWzBvTD8F
7q6ckUbIgpeo7stn7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuaivjW/P+Tm
64XjXNjP9F1W8+5tlcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ4Iudx/o3
Q4E2w6Aud9PYyV05pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/h0omUmCI
DiQVG30eHhb3OIP3bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUnohkUi6ik
D4me6o58sq/IQVmyem1M/E0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315854781095161605899012058392563921114876
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-23 09:44:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-21 09:44:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.charlottechoicecharter.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1302 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.alpinevista.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cherry.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cypress.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.garden.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.godwinschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.heritage.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hs.godwinschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kohn.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.learning-center.godwinschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lincoln.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.liveoak.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lostules.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.maple.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.missionvalley.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ms.godwinschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mulcahy.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.north.godwinschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.orchardviewschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pleasant.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.roosevelt.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.staff.godwinschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.west.godwinschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wilson.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpinevista.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charlottechoicecharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cherry.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cypress.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garden.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'godwinschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heritage.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.godwinschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kohn.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learning-center.godwinschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincoln.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveoak.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lostules.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maple.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missionvalley.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.godwinschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mulcahy.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'north.godwinschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orchardviewschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pleasant.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roosevelt.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staff.godwinschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'west.godwinschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wilson.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charlottechoicecharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.godwinschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orchardviewschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tcsdk8.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016ae44b00f100000403004630440220758c10432d8b03564a0b0c377702174866daef304cbea8722fbd31281990f541022030161b1b0447ca6577c12e2750cbd98a74df2f33859c526bd5525b6f93713db200770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016ae44aff230000040300483046022100ecc66c5947072054e4aec04e94d97d062d6fb140e8490211902cf87be245751b022100b9f42e8eea49ee2f5380b34d80387e1cac21ffd7348c16b9031d2409f683c827
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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