www.ps17queens.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2e:7f:70:20:06:74:ba:c5:bb:5c:96:8a:e2:a9:c3:28:33 was issued on by Let's Encrypt.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ps17queens.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2e:7f:70:20:06:74:ba:c5:bb:5c:96:8a:e2:a9:c3:28:33
Serial Number (int): 277159240815905351822783283242283579942963
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1e:e1:20:2b:7e:6a:5e:43:5e:b7:74:e0:d9:84:9d:0b:75:6d:f8:cc
Fingerprint (sha256): b6:75:70:97:b4:9a:6e:32:d0:fc:7b:5c:a5:2f:c7:ee:14:d4:2f:42:7c:f4:ad:e6:9c:c3:b1:d6:d8:92:97:2d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ps17queens.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ps17queens.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1.southampton.k12.nj.us
3.southampton.k12.nj.us
admin.1.southampton.k12.nj.us
admin.3.southampton.k12.nj.us
admin.baileyton.greenek12.org
admin.benporatyosef.org
admin.cdms.greenek12.org
admin.church.faithmarietta.org
admin.colegioguadalupedetulpetlac.edu.mx
admin.crawfordschools.org
admin.doak.greenek12.org
admin.ebdesilva.org
admin.edcenter.greenek12.org
admin.elportal.ljsd.org
admin.es.crawfordschools.org
admin.faithmarietta.org
admin.friarspoint.coahomak12.org
admin.fulton.northbergen.k12.nj.us
admin.hubbardhighschool.org
admin.jordan.ljsd.org
admin.legacy.colegioedlio.org
admin.ljsd.org
admin.longfellow.bcsd.com
admin.lyon.coahomak12.org
admin.macy.ljsd.org
admin.marylyonpiloths.org
admin.mcdonald.greenek12.org
admin.mckinley.northbergen.k12.nj.us
admin.meadowgreen.ljsd.org
admin.ms.crawfordschools.org
admin.nolachuckey.greenek12.org
admin.olita.ljsd.org
admin.ottway.greenek12.org
admin.ranchostarbuck.ljsd.org
admin.rosevillecharter.org
admin.schmidelementaryschool.org
admin.school.faithmarietta.org
admin.southampton.k12.nj.us
admin.spokanevalleytech.org
admin.valparaisocces.valpo.k12.in.us
admin.valparaisoces.valpo.k12.in.us
admin.valparaisohigh.valpo.k12.in.us
admin.valparaisomes.valpo.k12.in.us
admin.valparaisopes.valpo.k12.in.us
admin.valparaisotjms.valpo.k12.in.us
admin.valpo.k12.in.us
admin.wghs.greenek12.org
adultschool.portervilleschools.org
avrlacademy.org
beaconacademyil.org
benporatyosef.org
campcreek.greenek12.org
ccjshs.coahomak12.org
cdms.greenek12.org
chuckey.greenek12.org
cristoreysanjose.org
doak.greenek12.org
edcenter.greenek12.org
es.crawfordschools.org
franklin.northbergen.k12.nj.us
horacemann.northbergen.k12.nj.us
hs.crawfordschools.org
jonestown.coahomak12.org
kingstonspringsccs.net
longfellow.bcsd.com
mcdonald.greenek12.org
mpusd.k12.ca.us
ms.crawfordschools.org
nolachuckey.greenek12.org
ottway.greenek12.org
palmlanecharterschool.org
pleasantviewccs.net
schmidelementaryschool.org
sherard.coahomak12.org
spokanevalleytech.org
sycamoremiddleccs.net
thhs.qc.edu
valparaisobfms.valpo.k12.in.us
valparaisofles.valpo.k12.in.us
valparaisohes.valpo.k12.in.us
valparaisones.valpo.k12.in.us
valparaisotjes.valpo.k12.in.us
wghs.greenek12.org
wnymcs.com
www.beaconacademyil.org
www.bousd.us
www.greenek12.org
www.incarnatewordhs.org
www.jhcommunityschool.org
www.marylyonpiloths.org
www.mpusd.k12.ca.us
www.northbergen.k12.nj.us
www.ps17queens.com
www.schmidelementaryschool.org
www.spokanevalleytech.org
www.valpo.k12.in.us
www.wnymcs.com

Other certificates including the domain name ps17queens.com

(limited to 100 certificates)
admin.ljef.ljsd.org
www.holyfamilycatholicacademy.net
1.southampton.k12.nj.us
admin.avrlacademy.org
benchmarkbobcats.org
1.southampton.k12.nj.us
www.crawfordschools.org
cra.freeholdtwp.k12.nj.us
1.southampton.k12.nj.us
admin.bands.dekalbcentral.net
admin.aes.acsc.net
2.southampton.k12.nj.us
admin.es.lorenaisd.net
1.southampton.k12.nj.us
admin.benchmarkbobcats.org
admin.coahomak12.org
www.southernwakeacademy.org
shs.lskysd.ca
church.faithmarietta.org
admin.ersk.acsc.net
grandview.adsb.on.ca
www.cristoreysanjose.org
admin.acsc.net
admin.bands.dekalbcentral.net
admin.chuckey.greenek12.org
2.southampton.k12.nj.us
1.southampton.k12.nj.us
debusk.greenek12.org
admin.ps17queens.com
admin.ups.lskysd.ca
harpethhighccs.net
coahomak12.org
www.rosemont78.org
admin.acsc.net
1.southampton.k12.nj.us
www.mstmaatroosevelt.org
www.ps17queens.com
www.ckchicago.org
2.southampton.k12.nj.us
westcheathamccs.net
admin.colegioedlio.org
1.southampton.k12.nj.us
1.southampton.k12.nj.us
admin.benchmarkbobcats.org
admin.avrlacademy.org
oglesby.cps.edu
ckcs.lskysd.ca
faithmarietta.org
2.southampton.k12.nj.us
sunnybraemiddleschool.org
1.southampton.k12.nj.us
1.southampton.k12.nj.us
admin.rosemont78.org
www.swake.org
ups.lskysd.ca
1.southampton.k12.nj.us
www.cardinalritterprep.net
admin.elportal.ljsd.org
www.cardinalritterprep.org

Certificate

The complete raw certificate details for www.ps17queens.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQbTHb+2z7
rfYVCl+ph5m8FJJOEgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5pV3R4RBg
n18RTHnTD9fS27JxyeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGrmQF3Z/h2
e6StagubO+pVwFzG8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK7wAhJO8e
l2z375LDd2VIwrdWQP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlWZ1AdjOKf
RiY0ckFuu/DYkuvkNKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5Tu7zbek/
MR/JMR9nceWyZ2Mund+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzwWzBvTD8F
7q6ckUbIgpeo7stn7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuaivjW/P+Tm
64XjXNjP9F1W8+5tlcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ4Iudx/o3
Q4E2w6Aud9PYyV05pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/h0omUmCI
DiQVG30eHhb3OIP3bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUnohkUi6ik
D4me6o58sq/IQVmyem1M/E0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277159240815905351822783283242283579942963
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-01 01:05:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-30 01:05:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ps17queens.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2590 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1.southampton.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3.southampton.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.1.southampton.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.3.southampton.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.baileyton.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.benporatyosef.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cdms.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.church.faithmarietta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.colegioguadalupedetulpetlac.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.crawfordschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.doak.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ebdesilva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.edcenter.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.elportal.ljsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.es.crawfordschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.faithmarietta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.friarspoint.coahomak12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fulton.northbergen.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hubbardhighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jordan.ljsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.legacy.colegioedlio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ljsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.longfellow.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lyon.coahomak12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.macy.ljsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.marylyonpiloths.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mcdonald.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mckinley.northbergen.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.meadowgreen.ljsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ms.crawfordschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nolachuckey.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.olita.ljsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ottway.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ranchostarbuck.ljsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rosevillecharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.schmidelementaryschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.school.faithmarietta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.southampton.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.spokanevalleytech.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.valparaisocces.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.valparaisoces.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.valparaisohigh.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.valparaisomes.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.valparaisopes.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.valparaisotjms.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wghs.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adultschool.portervilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avrlacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beaconacademyil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benporatyosef.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campcreek.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccjshs.coahomak12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdms.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chuckey.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cristoreysanjose.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doak.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edcenter.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.crawfordschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franklin.northbergen.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horacemann.northbergen.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.crawfordschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jonestown.coahomak12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingstonspringsccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longfellow.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdonald.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.crawfordschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nolachuckey.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ottway.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palmlanecharterschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pleasantviewccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schmidelementaryschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sherard.coahomak12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spokanevalleytech.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sycamoremiddleccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thhs.qc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valparaisobfms.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valparaisofles.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valparaisohes.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valparaisones.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valparaisotjes.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wghs.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wnymcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beaconacademyil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bousd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.incarnatewordhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhcommunityschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marylyonpiloths.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mpusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northbergen.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps17queens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schmidelementaryschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spokanevalleytech.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wnymcs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016592e0cded0000040300483046022100cc28fa4c1cc234bdcb9c8cc75c0a95995b74deb83822b77ffd2a918e4aded202022100aa26de317939dfb8c3421311436f50651dc8923da961ef7090a059919f2c05560077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016592e0ce460000040300483046022100f07bd10483e07d5c1ea8262ebb389fc0d9b97f7d893ed3dc1f243dd3d0519b1c022100d76ba71288ec5d923c27593d87e5099d7517dc13d2f2a5dd32e67391186fcdfc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006a13d4fc04e8de84dc6628bb18f503938830d277c23f29b4055c004706220d54dc73f560a86eeb0a1e1958e17617fca0c2e9b26ea8dcf342021f27ff21e6171bcff1447c089df44084531823a445c8c2dbc3ef6b475015874b1d9adea72cbfa308f64d14cef53c1f6d6fed42776436a8f9e5a682ef8ae067932506f15eb9d8db8030066dfc164de81179d75c7ca2366f5ceb66b44f79b4a07d9b386a2b56531297362344879d4b5a2bb26937aa9fd13943a99435097805a162bdade16126e780931e6402da3e682b38c01bd3f2cf62839137ca864e6f4e33ab6e727343eccdaa9e2f1fc10a2b59f1092e21f1a96eabbb1ccd00ef74bce83bc0ffd9cbcc933c70