www.upstreamcollaborative.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f8:39:f9:ba:a9:bb:34:50:f4:7f:7e:dd:28:dd:cc:7a:e6 was issued on by Let's Encrypt.

With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.upstreamcollaborative.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f8:39:f9:ba:a9:bb:34:50:f4:7f:7e:dd:28:dd:cc:7a:e6
Serial Number (int): 345803947455326676943023716849778963544806
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fd:42:41:f3:89:49:a3:ef:7a:ec:ef:db:88:19:44:76:3c:73:b8:4e
Fingerprint (sha256): b6:3d:3b:1a:6b:fd:1b:58:bd:40:99:d8:3d:69:b1:08:f1:7e:66:e6:46:95:96:fa:5e:80:16:11:4a:5b:72:61

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.upstreamcollaborative.org

72

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.upstreamcollaborative.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acrma8.org
admin.annunciationcatholicschool.org
admin.canoncityschools.org
admin.churchill.edu.mx
admin.csdeagles.com
admin.geaschool.com
admin.giddingsisd.net
admin.it.canoncityschools.org
admin.marissa40.org
admin.maspethhighschool.org
admin.publicservicehs.org
admin.rivchristian.org
admin.scb.school
admin.school.seastucson.org
admin.shseagles.org
admin.stpaschalbaylonschool.org
admin.upstreamcollaborative.org
admin.veritasca.org
admin.waiahole.org
altasierra.prsd.us
annunciationcatholicschool.org
cec.cpsbla.us
cottagehill.prsd.us
csdeagles.com
csdf.k12.ca.us
fhs.cpsbla.us
fle.cpsbla.us
geaschool.com
it.canoncityschools.org
magnolia.prsd.us
marissa40.org
maspethhighschool.org
mhs.cpsbla.us
publicservicehs.org
rivchristian.org
scb.school
sge.manorisd.net
shseagles.org
spectrum.canoncityschools.org
stpaschalbaylonschool.org
upstreamcollaborative.org
veritasca.org
vhs.cpsbla.us
waiahole.org
www.acrma8.org
www.akibaacademy.org
www.altasierra.prsd.us
www.annunciationcatholicschool.org
www.canoncityschools.org
www.collegeunbound.org
www.cottagehill.prsd.us
www.cpsbla.us
www.csdeagles.com
www.csdf.k12.ca.us
www.eaton-academy.com
www.geaschool.com
www.lanevilleisd.org
www.magnolia.prsd.us
www.manorisd.net
www.marissa40.org
www.maspethhighschool.org
www.mustangsla.org
www.portrichmondhs.org
www.publicservicehs.org
www.rivchristian.org
www.scb.school
www.shseagles.org
www.stpaschalbaylonschool.org
www.taylorisd.org
www.upstreamcollaborative.org
www.veritasca.org
www.waiahole.org

Other certificates including the domain name upstreamcollaborative.org

(limited to 100 certificates)
admin.canoncityschools.org
www.newtownhighschool.org
aceroschools.org
admin.comptoncreekmad.org
admin.kimmel.aasdcat.com
admin.rvs.monroe.k12.tn.us
admin.gordonsville.smithcoedu.com
aceroschools.org
145innovators.com
acrma8.org
www.kingcollegeprep.org
admin.avant.k12.ok.us
admin.gordonsvillehigh.smithcoedu.com
upstreamcollaborative.org
spectrum.canoncityschools.org
www.upstreamcollaborative.org
admin.veritasca.org
aceroschools.org
admin.newmiddleton.smithcoedu.com
aceroschools.org
www.canoncityschools.org
145innovators.com
www.okolona.k12.ms.us
admin.upstreamcollaborative.org
acrma8.org
www.ivyhigh.org
sac.gcsd.ms
www.grovetonisd.net
ewcc.taylorisd.org
admin.portrichmondhs.org
upstreamcollaborative.org
admin.eaton-academy.com
145innovators.com
acrma8.org
www.cri.edu.mx
www.dormanhigh.org
www.upstreamcollaborative.org
acrma8.org
145innovators.com
145lions.com
admin.mnths.manorisd.net
wms.csisd.org
aahs.aasdcat.com
acrma8.org
admin.shs.monroe.k12.tn.us
acrma8.org
www.grandville.k12.mi.us

Certificate

The complete raw certificate details for www.upstreamcollaborative.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345803947455326676943023716849778963544806
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-14 10:14:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-12 10:14:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.upstreamcollaborative.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1572 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acrma8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.annunciationcatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.churchill.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.csdeagles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.geaschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.giddingsisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.it.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.marissa40.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.maspethhighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.publicservicehs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rivchristian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.scb.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.school.seastucson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.shseagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stpaschalbaylonschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.upstreamcollaborative.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.veritasca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.waiahole.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altasierra.prsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annunciationcatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cec.cpsbla.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cottagehill.prsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csdeagles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csdf.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fhs.cpsbla.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fle.cpsbla.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geaschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnolia.prsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marissa40.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maspethhighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhs.cpsbla.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publicservicehs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rivchristian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scb.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sge.manorisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shseagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spectrum.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpaschalbaylonschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upstreamcollaborative.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veritasca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vhs.cpsbla.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waiahole.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acrma8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akibaacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altasierra.prsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.annunciationcatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegeunbound.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cottagehill.prsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpsbla.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csdeagles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csdf.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eaton-academy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geaschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lanevilleisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magnolia.prsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manorisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marissa40.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maspethhighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mustangsla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portrichmondhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.publicservicehs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rivchristian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scb.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shseagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpaschalbaylonschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taylorisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upstreamcollaborative.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.veritasca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waiahole.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016ab60ce49e000004030046304402205f044eb95004cccc777355990cc6dc913cc7240366a15565ad83774e1f13325102207004476b3ff08826f35a6ca78bc480cbc5601efd903d5f2c7444a38b4bf1cad500760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016ab60ce2980000040300473045022100bd4d28a418420394181aaaad8e0e0fb0d12bcf07f6954fde66222432978c327102201f7d6d45902fd6ba8568b9ea90301e72676910abd278ca8a81be16f23d786fe5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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