nbfacademy.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cc:ae:60:43:7e:8e:a1:92:3b:2c:4f:44:ba:3d:1c:30:1c was issued on by Let's Encrypt.

With 69 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nbfacademy.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cc:ae:60:43:7e:8e:a1:92:3b:2c:4f:44:ba:3d:1c:30:1c
Serial Number (int): 330986246147865515312205590921668080709660
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b0:84:d6:15:a0:a6:4d:ce:ff:a0:02:a4:43:64:b1:35:2b:9f:4d:e6
Fingerprint (sha256): b6:d8:5b:22:6a:a2:d4:e7:29:f3:84:27:97:c4:3f:c3:62:c3:51:d9:49:6e:7f:c7:d0:2b:8e:ce:06:78:d8:f2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nbfacademy.org

69

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nbfacademy.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.ace.pusd.org
admin.arroyo.pusd.org
admin.believe.kippneworleans.org
admin.belmont.tcsk12.com
admin.burnsville.tcsk12.com
admin.careertech.tcsk12.com
admin.diamondpoint.pusd.org
admin.es.moodyisd.org
admin.fms.gonzalesusd.net
admin.ganesha.pusd.org
admin.his.huntingtonisd.com
admin.hms.huntingtonisd.com
admin.hsd153.org
admin.ies.tcsk12.com
admin.ims.tcsk12.com
admin.jameshart.hsd153.org
admin.kellogg.pusd.org
admin.leadership.kippneworleans.org
admin.lincoln.pusd.org
admin.marshall.pusd.org
admin.philadelphia.pusd.org
admin.roosevelt.pusd.org
admin.seeo.pusd.org
admin.shs.gonzalesusd.net
admin.spanish.pusd.org
admin.tchs.tcsk12.com
admin.tcsk12.com
admin.tms.tcsk12.com
admin.vejar.pusd.org
admin.washington.pusd.org
alcott.pusd.org
barfield.pusd.org
belmont.tcsk12.com
burnsville.tcsk12.com
careertech.tcsk12.com
centralcityprimary.kippneworleans.org
churchill.hsd153.org
dellagoacademy.org
demonfans.durangoschools.org
diamondranch.pusd.org
es.moodyisd.org
garey.pusd.org
hsd153.org
ies.tcsk12.com
ims.tcsk12.com
kingsley.pusd.org
kippneworleans.org
lopez.pusd.org
melrose.pylusd.org
montvue.pusd.org
nbfacademy.org
pantera.pusd.org
pomona.pusd.org
renaissance.kippneworleans.org
sacredheartacademy.org
sanantonio.pusd.org
simons.pusd.org
spanish.pusd.org
student.komarek94.org
tchs.tcsk12.com
tms.tcsk12.com
villageacademy.pusd.org
westmont.pusd.org
www.hubbardisd.com
www.melrose.pylusd.org
www.mesacharter.org
www.moodyisd.org
www.popcs.org
www.portlandvillageschool.org

Other certificates including the domain name nbfacademy.org

(limited to 100 certificates)
www.bradleyschools.org
oce.lifeschools.net
nbfacademy.org
ace.pusd.org
www.hwrsd.org
bradleyschools.org
admin.eag.zcs.k12.in.us
www.hwrsd.org
admin.morelandpreschool.moreland.org
admin.aes.cherokee.k12.nc.us
admin.cfn.edu.mx
nbfacademy.org
admin.mhs.cherokee.k12.nc.us
www.hwrsd.org
admin.centralcityprimary.kippneworleans.org
admin.aes.cvsd.org
admin.frsd12.org
latimer.moreland.org
frederickadouglass.kippneworleans.org
admin.allison.pusd.org
admin.aes.cherokee.k12.nc.us
admin.cvhs.cvsd.org
admin.hs.gsd.wednet.edu
admin.bchs.bradleyschools.org
ms.gsd.wednet.edu
admin.rems.cherokee.k12.nc.us
admin.aes.cvsd.org
admin.eag.zcs.k12.in.us
nbfacademy.org
ace.pusd.org
admin.ahs.cherokee.k12.nc.us
riverview.durangoschools.org
admin.nbfacademy.org
admin.frsd12.org
nbfacademy.org
ace.pusd.org
nbfacademy.org
admin.anderson.moreland.org
eceap.gsd.wednet.edu
admin.aes.cherokee.k12.nc.us
stmmsa.org
admin.centralcityprimary.kippneworleans.org
www.komarek94.org
nbfacademy.org
admin.bes.cvsd.org
admin.ges.cvsd.org
admin.ace.pusd.org
admin.elc.cvsd.org
ace.pusd.org
admin.armstrong.pusd.org
ace.pusd.org
admin.aes.cherokee.k12.nc.us
admin.resedahs.net
nbfacademy.org
admin.ace.pusd.org
ace.pusd.org
nbfacademy.org
admin.anderson.moreland.org
nbfacademy.org
nbfacademy.org
pes.cherokee.k12.nc.us
admin.bradfield.hpisd.org
admin.sh.hwrsd.org
admin.mes.cvsd.org
admin.hs.hpisd.org
admin.centralcityprimary.kippneworleans.org
mcems.cherokee.k12.nc.us
admin.centralcityprimary.kippneworleans.org
admin.ahs.cherokee.k12.nc.us
admin.cvsd.org
admin.mcems.cherokee.k12.nc.us
www.tcsk12.com
ace.pusd.org
admin.ace.pusd.org
admin.centralcityprimary.kippneworleans.org
ace.pusd.org
nbfacademy.org
admin.mms.cherokee.k12.nc.us
www.nbfacademy.org
admin.ace.pusd.org
hwrsd.org
admin.armstrong.pusd.org
admin.floridamesa.durangoschools.org
charlottechoicecharter.org

Certificate

The complete raw certificate details for nbfacademy.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINEzCCC/ugAwIBAgISA8yuYEN+jqGSOyxPRLo9HDAcMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA4MTgwMDU5MjhaFw0x
ODExMTYwMDU5MjhaMBkxFzAVBgNVBAMTDm5iZmFjYWRlbXkub3JnMIICIjANBgkq
hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQbTHb+2z7rfYVCl+ph5m8
FJJOEgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5pV3R4RBgn18RTHnTD9fS
27JxyeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGrmQF3Z/h2e6StagubO+pV
wFzG8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK7wAhJO8el2z375LDd2VI
wrdWQP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlWZ1AdjOKfRiY0ckFuu/DY
kuvkNKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5Tu7zbek/MR/JMR9nceWy
Z2Mund+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzwWzBvTD8F7q6ckUbIgpeo
7stn7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuaivjW/P+Tm64XjXNjP9F1W
8+5tlcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ4Iudx/o3Q4E2w6Aud9PY
yV05pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/h0omUmCIDiQVG30eHhb3
OIP3bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUnohkUi6ikD4me6o58sq/I
QVmyem1M/E0CAwEAAaOCCSIwggkeMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUL2vI
TWwsLjLyACD/LU1sWvxuurswHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo
7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnLzCCBiQGA1UdEQSCBhswggYXghJhZG1pbi5hY2Uu
cHVzZC5vcmeCFWFkbWluLmFycm95by5wdXNkLm9yZ4IgYWRtaW4uYmVsaWV2ZS5r
aXBwbmV3b3JsZWFucy5vcmeCGGFkbWluLmJlbG1vbnQudGNzazEyLmNvbYIbYWRt
aW4uYnVybnN2aWxsZS50Y3NrMTIuY29tghthZG1pbi5jYXJlZXJ0ZWNoLnRjc2sx
Mi5jb22CG2FkbWluLmRpYW1vbmRwb2ludC5wdXNkLm9yZ4IVYWRtaW4uZXMubW9v
ZHlpc2Qub3JnghlhZG1pbi5mbXMuZ29uemFsZXN1c2QubmV0ghZhZG1pbi5nYW5l
c2hhLnB1c2Qub3JnghthZG1pbi5oaXMuaHVudGluZ3RvbmlzZC5jb22CG2FkbWlu
Lmhtcy5odW50aW5ndG9uaXNkLmNvbYIQYWRtaW4uaHNkMTUzLm9yZ4IUYWRtaW4u
aWVzLnRjc2sxMi5jb22CFGFkbWluLmltcy50Y3NrMTIuY29tghphZG1pbi5qYW1l
c2hhcnQuaHNkMTUzLm9yZ4IWYWRtaW4ua2VsbG9nZy5wdXNkLm9yZ4IjYWRtaW4u
bGVhZGVyc2hpcC5raXBwbmV3b3JsZWFucy5vcmeCFmFkbWluLmxpbmNvbG4ucHVz
ZC5vcmeCF2FkbWluLm1hcnNoYWxsLnB1c2Qub3JnghthZG1pbi5waGlsYWRlbHBo
aWEucHVzZC5vcmeCGGFkbWluLnJvb3NldmVsdC5wdXNkLm9yZ4ITYWRtaW4uc2Vl
by5wdXNkLm9yZ4IZYWRtaW4uc2hzLmdvbnphbGVzdXNkLm5ldIIWYWRtaW4uc3Bh
bmlzaC5wdXNkLm9yZ4IVYWRtaW4udGNocy50Y3NrMTIuY29tghBhZG1pbi50Y3Nr
MTIuY29tghRhZG1pbi50bXMudGNzazEyLmNvbYIUYWRtaW4udmVqYXIucHVzZC5v
cmeCGWFkbWluLndhc2hpbmd0b24ucHVzZC5vcmeCD2FsY290dC5wdXNkLm9yZ4IR
YmFyZmllbGQucHVzZC5vcmeCEmJlbG1vbnQudGNzazEyLmNvbYIVYnVybnN2aWxs
ZS50Y3NrMTIuY29tghVjYXJlZXJ0ZWNoLnRjc2sxMi5jb22CJWNlbnRyYWxjaXR5
cHJpbWFyeS5raXBwbmV3b3JsZWFucy5vcmeCFGNodXJjaGlsbC5oc2QxNTMub3Jn
ghJkZWxsYWdvYWNhZGVteS5vcmeCHGRlbW9uZmFucy5kdXJhbmdvc2Nob29scy5v
cmeCFWRpYW1vbmRyYW5jaC5wdXNkLm9yZ4IPZXMubW9vZHlpc2Qub3Jngg5nYXJl
eS5wdXNkLm9yZ4IKaHNkMTUzLm9yZ4IOaWVzLnRjc2sxMi5jb22CDmltcy50Y3Nr
MTIuY29tghFraW5nc2xleS5wdXNkLm9yZ4ISa2lwcG5ld29ybGVhbnMub3Jngg5s
b3Blei5wdXNkLm9yZ4ISbWVscm9zZS5weWx1c2Qub3JnghBtb250dnVlLnB1c2Qu
b3Jngg5uYmZhY2FkZW15Lm9yZ4IQcGFudGVyYS5wdXNkLm9yZ4IPcG9tb25hLnB1
c2Qub3Jngh5yZW5haXNzYW5jZS5raXBwbmV3b3JsZWFucy5vcmeCFnNhY3JlZGhl
YXJ0YWNhZGVteS5vcmeCE3NhbmFudG9uaW8ucHVzZC5vcmeCD3NpbW9ucy5wdXNk
Lm9yZ4IQc3BhbmlzaC5wdXNkLm9yZ4IVc3R1ZGVudC5rb21hcmVrOTQub3Jngg90
Y2hzLnRjc2sxMi5jb22CDnRtcy50Y3NrMTIuY29tghd2aWxsYWdlYWNhZGVteS5w
dXNkLm9yZ4IRd2VzdG1vbnQucHVzZC5vcmeCEnd3dy5odWJiYXJkaXNkLmNvbYIW
d3d3Lm1lbHJvc2UucHlsdXNkLm9yZ4ITd3d3Lm1lc2FjaGFydGVyLm9yZ4IQd3d3
Lm1vb2R5aXNkLm9yZ4INd3d3LnBvcGNzLm9yZ4Idd3d3LnBvcnRsYW5kdmlsbGFn
ZXNjaG9vbC5vcmcwgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8T
AQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCB
qwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJl
bGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRh
bmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczov
L2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzCCAQMGCisGAQQB1nkCBAIEgfQE
gfEA7wB1AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABZUrCQAYA
AAQDAEYwRAIgIK1eWFlNmHUueaT+sj2pYnEzxJIRbhfqnavUJEeShK0CICT+nFTe
V/Cg3Hd1XjSDYlyAlu3Vkpt4ZoADtFwISu6MAHYAKTxRllTIOWW6qlD8WAfUt2+/
WHopctykwwz05UVH9HgAAAFlSsI/8QAABAMARzBFAiEApBXY/8ePP2z2NnzKUNef
cLw4W4gki0n6Yc4L/tidDmICIEix1o9tgI7RgQ9fcoqXzMHdAOrJARRFLITw/ZhT
W72lMA0GCSqGSIb3DQEBCwUAA4IBAQBh7YX6v8fKRkHauB8DOsFBRJtVT+YZJDqD
h88v0JtHA1Jsd/h4zhzSa+jpC5/xS5GdueNE7GNM24Nd1OQWzoThW0iw3NLMC+13
XO4u/IoJCk6aXVtXsOWOrn58EgmfnLwfmKjR/BY0DLbYpqqC5AwQrX6YSKZRCdN4
bHXqS6TfsoAEcr8Fyvi7QY4/QDnGq8t67sU19Uv/kRtaEMj1MTNhxIm4aodR9636
e60Kd+U3E1NrZRkj3c5D7cQjJoj9l/I3t8wh7xC0Q91ke+dn1t47uYnF+xDWsmK4
aStf46mmuVtDEVuTW5h/J3VtAmnslMURqNAJKmaIUARC6ica+S54
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330986246147865515312205590921668080709660
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-18 00:59:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-16 00:59:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nbfacademy.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1563 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ace.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.arroyo.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.believe.kippneworleans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.belmont.tcsk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.burnsville.tcsk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.careertech.tcsk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.diamondpoint.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.es.moodyisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fms.gonzalesusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ganesha.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.his.huntingtonisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hms.huntingtonisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hsd153.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ies.tcsk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ims.tcsk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jameshart.hsd153.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kellogg.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.leadership.kippneworleans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lincoln.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.marshall.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.philadelphia.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.roosevelt.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.seeo.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.shs.gonzalesusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.spanish.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tchs.tcsk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tcsk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tms.tcsk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.vejar.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.washington.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alcott.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barfield.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belmont.tcsk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burnsville.tcsk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careertech.tcsk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralcityprimary.kippneworleans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchill.hsd153.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dellagoacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demonfans.durangoschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondranch.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.moodyisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garey.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsd153.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ies.tcsk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ims.tcsk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingsley.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kippneworleans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lopez.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melrose.pylusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montvue.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbfacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pantera.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pomona.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renaissance.kippneworleans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanantonio.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simons.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spanish.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'student.komarek94.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tchs.tcsk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.tcsk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'villageacademy.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westmont.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hubbardisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melrose.pylusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesacharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moodyisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.popcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portlandvillageschool.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001654ac240060000040300463044022020ad5e58594d98752e79a4feb23da9627133c492116e17ea9dabd424479284ad022024fe9c54de57f0a0dc77755e3483625c8096edd5929b78668003b45c084aee8c007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001654ac23ff10000040300473045022100a415d8ffc78f3f6cf6367cca50d79f70bc385b88248b49fa61ce0bfed89d0e62022048b1d68f6d808ed1810f5f728a97ccc1dd00eac90114452c84f0fd98535bbda5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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