our-lady-of-lourdes-school.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8e:7f:be:3f:2d:56:f3:5e:4b:98:d4:6b:87:63:fa:61:cb was issued on by Let's Encrypt.

With 68 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=our-lady-of-lourdes-school.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8e:7f:be:3f:2d:56:f3:5e:4b:98:d4:6b:87:63:fa:61:cb
Serial Number (int): 309826753671305789953091998725546257834443
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f6:a6:be:4a:2b:ea:ca:0b:c1:90:59:98:5d:a7:a5:dc:ff:56:b8:50
Fingerprint (sha256): b8:d6:98:fb:66:c5:97:53:35:96:c5:65:78:a5:d6:a2:0a:b1:6c:51:70:ed:68:fb:7e:91:6f:ba:de:5c:57:45

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate our-lady-of-lourdes-school.org

68

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for our-lady-of-lourdes-school.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.aes.cvsd.org
admin.bes.cvsd.org
admin.bms.cvsd.org
admin.bohs.bousd.us
admin.cliffordmathandtechmagnet.org
admin.hms.cvsd.org
admin.lces.cvsd.org
admin.mes.cvsd.org
admin.mphs.cvsd.org
admin.ms366.org
admin.our-lady-of-lourdes-school.org
admin.qasschool.org
admin.ses.cvsd.org
admin.spes.cvsd.org
admin.ues.cvsd.org
admin.uhs.cvsd.org
aes.cvsd.org
arovista.bousd.k12.ca.us
bjhs.bousd.k12.ca.us
bohs.bousd.k12.ca.us
bousd.k12.ca.us
bousd.us
breacanyon.bousd.k12.ca.us
breacanyon.bousd.us
cds.bousd.k12.ca.us
ces.cvsd.org
cliffordmathandtechmagnet.org
countryhills.bousd.k12.ca.us
cvhs.cvsd.org
cvsd.org
fanning.bousd.k12.ca.us
ges.cvsd.org
gms.cvsd.org
hms.cvsd.org
jeffersonschools.org
jhs.jeffersonschools.org
jms.jeffersonschools.org
laurel.bousd.k12.ca.us
lces.cvsd.org
lles.cvsd.org
mariposa.bousd.k12.ca.us
mariposa.bousd.us
mes.cvsd.org
mphs.cvsd.org
ms366.org
nes.jeffersonschools.org
npms.cvsd.org
olinda.bousd.k12.ca.us
our-lady-of-lourdes-school.org
pres.cvsd.org
qasschool.org
res.cvsd.org
ses.cvsd.org
ses.jeffersonschools.org
sierravistapta.com
spes.cvsd.org
summit.cvsd.org
svla.cvsd.org
ues.cvsd.org
uhs.cvsd.org
www.bousd.k12.ca.us
www.cliffordmathandtechmagnet.org
www.cvsd.org
www.jeffersonschools.org
www.ms366.org
www.our-lady-of-lourdes-school.org
www.qasschool.org
www.walnuteagles.net

Other certificates including the domain name our-lady-of-lourdes-school.org

(limited to 100 certificates)
www.vistahorizonglobal.org
cvhs.cvsd.org
www.our-lady-of-lourdes-school.org
www.walnuteagles.net
admin.aes.cvsd.org
admin.hedgescps.org
admin.bohs.bousd.us
nes.jeffersonschools.org
*.our-lady-of-lourdes-school.org
admin.whitmanhs.org
admin.statesvilleroadelementaryschool.wearecms.com
admin.aes.cvsd.org
www.vistahorizonglobal.org
admin.cvvl.cvsd.org
starmountacademyofexcellence.wearecms.com
admin.bohs.bousd.us
crawfordschools.org
www.qasschool.org
creekside.cv.k12.ca.us
bohs.bousd.k12.ca.us
mabelpaine.org
*.our-lady-of-lourdes-school.org
admin.bms.cvsd.org
*.our-lady-of-lourdes-school.org
cliffordmathandtechmagnet.org
www.ms366.org
admin.mpsdnow.org
admin.aes.cvsd.org
admin.bohs.bousd.us
jensenranch.cv.k12.ca.us
admin.myersparkhighschool.wearecms.com
fanning.bousd.k12.ca.us
www.gmcs.org
www.ghck12.com
malamapokii.kalo.org
*.our-lady-of-lourdes-school.org
sphstigers.org
walshcps.org
cad.dcs.edu
admin.vision.ecisd.us
our-lady-of-lourdes-school.org
admin.bohs.bousd.us
our-lady-of-lourdes-school.org
breacanyon.bousd.k12.ca.us
sunnyside.goldenruledallas.org
marquettecatholic.org
countryhills.bousd.k12.ca.us
*.our-lady-of-lourdes-school.org
admin.bohs.bousd.us
admin.our-lady-of-lourdes-school.org
admin.our-lady-of-lourdes-school.org
admin.aes.cvsd.org
arovista.bousd.k12.ca.us
smithfieldelementaryschool.wearecms.com
admin.reedycreekelementaryschool.wearecms.com
chms.comalisd.org

Certificate

The complete raw certificate details for our-lady-of-lourdes-school.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309826753671305789953091998725546257834443
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-01 02:01:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-01 02:01:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'our-lady-of-lourdes-school.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1386 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.aes.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bes.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bms.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bohs.bousd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cliffordmathandtechmagnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hms.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lces.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mes.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mphs.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ms366.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.our-lady-of-lourdes-school.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.qasschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ses.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.spes.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ues.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.uhs.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aes.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arovista.bousd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bjhs.bousd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bohs.bousd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bousd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bousd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breacanyon.bousd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breacanyon.bousd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cds.bousd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ces.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliffordmathandtechmagnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countryhills.bousd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvhs.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanning.bousd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ges.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gms.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hms.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeffersonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhs.jeffersonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jms.jeffersonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laurel.bousd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lces.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lles.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mariposa.bousd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mariposa.bousd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mes.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mphs.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms366.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nes.jeffersonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'npms.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olinda.bousd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'our-lady-of-lourdes-school.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pres.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qasschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'res.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ses.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ses.jeffersonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sierravistapta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spes.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summit.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svla.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ues.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhs.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bousd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cliffordmathandtechmagnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jeffersonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ms366.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.our-lady-of-lourdes-school.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qasschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walnuteagles.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ffeb24d820000040300483046022100f46ad10c708836f99887a764bc150fb224fbbfa994df9e3e70a355474e05f400022100d5f1b5cfad2c5872f58104ac360e963bc786fffb14b1a1c3d8a02231588ecd5f00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ffeb24d880000040300483046022100d9310e43110752c703f91e41b5deb3ee32234f2eb84f29e27bf2736d529e3a76022100af61fe157089779c0f0fc0e7d33840a4e7dd5ed65ba26526c784831f68710725
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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