pac.aquinashs.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9c:bb:27:98:58:7e:83:04:c3:37:0c:ac:1b:bc:fb:8a:24 was issued on by Let's Encrypt.

With 55 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pac.aquinashs.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9c:bb:27:98:58:7e:83:04:c3:37:0c:ac:1b:bc:fb:8a:24
Serial Number (int): 314669678259673893925988234780337248111140
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 26:9c:3b:2d:f8:f3:40:8a:70:83:2d:a1:d3:d9:d6:59:99:ad:07:c9
Fingerprint (sha256): b6:ab:00:fa:66:71:65:ac:42:41:bd:4e:6a:7b:6e:5f:9c:ac:71:5e:46:f2:65:d3:e1:fd:7d:a4:5e:1a:d3:c5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate pac.aquinashs.net

55

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pac.aquinashs.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.artsinactioncharter.org
admin.ccs.coloma.org
admin.chs.coloma.org
admin.cjh.coloma.org
admin.garvey.k12.ca.us
admin.kellycollegeprep.org
admin.olgscott.net
admin.pac.aquinashs.net
admin.prospectridgeacademy.org
admin.rice.garvey.k12.ca.us
admin.sanchez.garvey.k12.ca.us
admin.st.louisschool.org
admin.stleocatholic.com
admin.stlouisschool.org
admin.templeint.garvey.k12.ca.us
admin.validatingaffirmingschools.org
admin.waldorfatlanta.org
admin.willard.garvey.k12.ca.us
artsinactioncharter.org
ccs.coloma.org
ces.coloma.org
chs.coloma.org
cis.coloma.org
cjh.coloma.org
coloma.org
dougherty.k12.ga.us
jcchs.org
kellycollegeprep.org
mvista.garvey.k12.ca.us
pac.aquinashs.net
rice.garvey.k12.ca.us
sanchez.garvey.k12.ca.us
saspasadena.org
st.louisschool.org
templeint.garvey.k12.ca.us
validatingaffirmingschools.org
willard.garvey.k12.ca.us
www.artsinactioncharter.org
www.balloustay.com
www.ccs.coloma.org
www.coloma.org
www.garvey.k12.ca.us
www.gesd.us
www.jcchs.org
www.kellycollegeprep.org
www.olgscott.net
www.prospectridgeacademy.org
www.pvphs.com
www.richland.k12.mo.us
www.saspasadena.org
www.sjsbr.org
www.stleocatholic.com
www.stlouisschool.org
www.validatingaffirmingschools.org
www.waldorfatlanta.org

Other certificates including the domain name aquinashs.net

(limited to 100 certificates)
mail.sbdiocese.org
scalefundercert.net
admin.amschool.edu.sv
admin.amschool.edu.sv
scalefundercert.net
scalefundercert.net
mail.sbdiocese.org
scalefundercert.net
admin.ces.coloma.org
scalefundercert.net
admin.amschool.edu.sv
scalefundercert.net
admin.amschool.edu.sv
athletics.aquinashs.net
mail.sbdiocese.org
mail.sbdiocese.org
admin.arete.prsd.us
www.aquinashs.net
admin.amschool.edu.sv
admin.artsinactioncharter.org
scalefundercert.net
scalefundercert.net
scalefundercert.net
mis.edu.mx
admin.stggcs.org
admin.pride.lindenusd.com
www.bhswca.com
www.clanyc.org
admin.amschool.edu.sv
athletics.aquinashs.net
scalefundercert.net
scalefundercert.net
scalefundercert.net
scalefundercert.net
scalefundercert.net
scalefundercert.net
lvmhs.lucernevalleyunified.org
scalefundercert.net
mail.sbdiocese.org
admin.amschool.edu.sv
scalefundercert.net
admin.amschool.edu.sv
mail.sbdiocese.org
mail.sbdiocese.org
acsaregionxv.org
admin.aquinashs.net
admin.bitely.garvey.k12.ca.us
scalefundercert.net
scalefundercert.net
scalefundercert.net
scalefundercert.net
scalefundercert.net
www.carbonvalleyacademy.org
scalefundercert.net
scalefundercert.net
peterson.mx
es.notredameacademy.org
vs.aceroschools.org
scalefundercert.net
mail.sbdiocese.org
aceroschools.org
admin.artsinactioncharter.org
scalefundercert.net
www.somonauk.net
mail.sbdiocese.org
mail.sbdiocese.org
mail.sbdiocese.org
sfunder6cert.net
www.st.louisschool.org
scalefundercert.net
admin.cove.prioritycharterschools.org
admin.amschool.edu.sv
scalefundercert.net
mail.sbdiocese.org
admin.sfxcatholicschool.org
scalefundercert.net
scalefundercert.net
mail.sbdiocese.org
scalefundercert.net
workstudyicacristorey.org
scalefundercert.net
en-merida.mis.edu.mx
scalefundercert.net
admin.cfn.edu.mx
pac.aquinashs.net
mail.sbdiocese.org
admin.eagles.lucernevalleyunified.org
mail.sbdiocese.org
admin.amschool.edu.sv
scalefundercert.net
admin.amschool.edu.sv
admin.family.mypagosaschools.com
admin.amschool.edu.sv
scalefundercert.net
admin.socialjusticemclc.org
claytonvalley.org
admin.aquinashs.net
scalefundercert.net
mail.sbdiocese.org
spencemanagementgroup.com

Certificate

The complete raw certificate details for pac.aquinashs.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314669678259673893925988234780337248111140
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-11 01:07:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-10 01:07:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pac.aquinashs.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1274 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.artsinactioncharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ccs.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.chs.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cjh.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kellycollegeprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.olgscott.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pac.aquinashs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.prospectridgeacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rice.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sanchez.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.st.louisschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stleocatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stlouisschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.templeint.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.validatingaffirmingschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.waldorfatlanta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.willard.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artsinactioncharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccs.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ces.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chs.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cis.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cjh.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dougherty.k12.ga.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcchs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kellycollegeprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvista.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pac.aquinashs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rice.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanchez.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saspasadena.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st.louisschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'templeint.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'validatingaffirmingschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willard.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artsinactioncharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.balloustay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccs.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gesd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jcchs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kellycollegeprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olgscott.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prospectridgeacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pvphs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richland.k12.mo.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saspasadena.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjsbr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stleocatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stlouisschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.validatingaffirmingschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waldorfatlanta.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a0a2607f800000403004730450220702955d1bb8c40a71d35d62fa3eec471f859e2471826346b035acfbcc39c209e022100edd17cc2f89dc649773b7b09aa614adf20f62b9252741990fd7ae15b7d6a1be3007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a0a26067b0000040300483046022100b6826bde930dd6d1d3b5e2d20664f95a7dc99c397be4545e9a63e2977360dad2022100b0c98090b6971a1146c52d96375592fd235a88f09fa9e39d8280f5b9cb3d75ca
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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