lennox.k12.ca.us

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8a:9e:36:2d:70:dc:0f:00:e3:00:6c:7e:43:61:18:4d:8f was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lennox.k12.ca.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8a:9e:36:2d:70:dc:0f:00:e3:00:6c:7e:43:61:18:4d:8f
Serial Number (int): 308506123759384716692586342961025784499599
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0d:e8:64:a9:a3:ea:e2:48:ed:0f:31:a4:24:17:2a:31:65:49:b1:91
Fingerprint (sha256): ba:e3:8e:09:8d:11:cd:5f:5f:28:b5:17:11:ce:29:2f:95:07:55:7c:78:6c:da:47:16:ad:12:b8:37:f3:df:7d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lennox.k12.ca.us

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lennox.k12.ca.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abramfriedmanoc.org
admin.abramfriedmanoc.org
admin.athlosbrownsville.org
admin.athlossanantonio.org
admin.bpsd.k12.ca.us
admin.fulmoremiddleschool.org
admin.garfieldelementary.org
admin.hahaionees.org
admin.hphsnyc.org
admin.oghs.davidson.k12.nc.us
admin.ogms.davidson.k12.nc.us
admin.pes.davidson.k12.nc.us
admin.sjdlschool.com
admin.sssq.org
admin.summitacademycs.org
admin.waikelees.org
afoc.edu
anniebelle.tiftschools.com
athlosaustin.org
athlosbrownsville.org
athlossanantonio.org
avacademies.avdistrict.org
bailey.tiftschools.com
bpsd.k12.ca.us
burlington.caminonuevo.org
carver.bryanisd.org
castellanoseisner.caminonuevo.org
charlesspencer.tiftschools.com
cisneros.caminonuevo.org
dalzelllance.caminonuevo.org
delbosquemexico.com
ece.caminonuevo.org
eighthstreet.tiftschools.com
es.abernathyisd.com
etc.needlesusd.org
fhs.frenship.us
fms.frenship.us
fulmoremiddleschool.org
hahaionees.org
hms.frenship.us
holyfamilyhs.com
hphsnyc.com
hphsnyc.net
hphsnyc.org
hs.abernathyisd.com
kaynesiart.caminonuevo.org
kemp.bryanisd.org
kempcarver.bryanisd.org
lastinger.tiftschools.com
lennox.k12.ca.us
lvs.usd453.org
mattwilson.tiftschools.com
miramar.caminonuevo.org
ms.abernathyisd.com
northside.tiftschools.com
omega.tiftschools.com
reddick.tiftschools.com
sfxmetla.org
sixthstreet.tiftschools.com
sjdlschool.com
soar.avdistrict.org
summitacademycs.org
tchs.tiftschools.com
tvms.frenship.us
waikelees.org
www.abernathyisd.com
www.abramfriedmanoc.org
www.afoc.edu
www.athlosbrownsville.org
www.athlossanantonio.org
www.baldwin-school.org
www.berean-eagles.org
www.bereaneagles.org
www.bpsd.k12.ca.us
www.caminonuevo.org
www.cbchs.org
www.deltaacademylv.com
www.fontbonne.org
www.fulmoremiddleschool.org
www.garfieldelementary.org
www.hahaionees.org
www.holyfamilyk8.org
www.hphsnyc.com
www.hphsnyc.net
www.hphsnyc.org
www.ihomschool.org
www.ivyacademia.com
www.kamakau.com
www.khshawks.org
www.lasmontanashigh.com
www.metrocharter.org
www.parkcenturyschool.org
www.pspdc.org
www.sfxmetla.org
www.sjdlschool.com
www.stfrancisxavier.com
www.summitacademycs.org
www.tampaadventistacademy.org
www.tiftschools.com
www.waikelees.org

Other certificates including the domain name lennox.k12.ca.us

(limited to 100 certificates)
admin.bronxbetterlearning.net
jamf.lennox.k12.ca.us
ehkeys.ossdms.org
2.bronxbetterlearning.net
lennox.k12.ca.us
northprimary.kiskiarea.com
2.bronxbetterlearning.net
komarek94.org
admin.eastprimary.kiskiarea.com
abramfriedmanoc.org
2.bronxbetterlearning.net
acldtillotsonschool.org
lennox.k12.ca.us
acldtillotsonschool.org
acldtillotsonschool.org
www.sanjoseprep.org
2.bronxbetterlearning.net
2.bronxbetterlearning.org
centroculturaljalilgibran.edu.mx
acldtillotsonschool.org
www.grandville.k12.mi.us
stbern.net
www.pilibospreschool.org
*.lennox.k12.ca.us
2.bronxbetterlearning.net
abramfriedmanoc.org
bronxbetterlearning.net
acldtillotsonschool.org
www.grandville.k12.mi.us
2.bronxbetterlearning.net
admin.athletics.deperek12.org
landrum.sbcisd.net
kernhighnetwork.net
jamf.lennox.k12.ca.us
2.bronxbetterlearning.net
acldtillotsonschool.org
lennox.k12.ca.us
2.bronxbetterlearning.net
academyofthecanyons.net
www.unionsquareacademy.org
www.stnorbertschool.org
www.ciudaddelosninoscr.org
mis.edu.mx
www.narbonnehsgauchos.com
lennox.k12.ca.us
sa.snowlineschools.com
admin.icabh.org
admin.bme.snowlineschools.com
ckr01.lennox.k12.ca.us
www.madisonmonterrey.edu.mx
stnorbertschool.org
www.kernhighnetwork.net
acldtillotsonschool.org
barbaravick.org
2.bronxbetterlearning.net
lennox.k12.ca.us
admin.centroculturaljalilgibran.edu.mx
www.corecharter.org
lennox.k12.ca.us
2.bronxbetterlearning.org
admin.stjoseph-school.org
2.bronxbetterlearning.net
academyofthecanyons.net
samuelgompersms.net
acldtillotsonschool.org
www.stbern.net
web.euroamericano.edu.mx
2.bronxbetterlearning.org
www.jaselu.com.mx
admin.dchs.davidson.k12.nc.us
www.grandville.k12.mi.us
lennox.k12.ca.us
mcs.k12.ny.us
2.bronxbetterlearning.net
aak.potsdam.k12.ny.us
academyofthecanyons.net
aacs.net
acldtillotsonschool.org
2.bronxbetterlearning.org
lennox.k12.ca.us
lennox.k12.ca.us
acldtillotsonschool.org
acldtillotsonschool.org
2.bronxbetterlearning.org
2.bronxbetterlearning.net
mcs.k12.ny.us
doe.as
admin.semperaltius.edu.mx
*.lennox.k12.ca.us
aak.potsdam.k12.ny.us
lennox.k12.ca.us
lennox.k12.ca.us
stroseschoolwilmington.org
2.bronxbetterlearning.org
bbjh.magnoliaisd.org
acldtillotsonschool.org
sketches.edlio.com
bcsdk12.org
2.bronxbetterlearning.org
academyofthecanyons.net

Certificate

The complete raw certificate details for lennox.k12.ca.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308506123759384716692586342961025784499599
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-11 01:00:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-09 01:00:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lennox.k12.ca.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2229 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abramfriedmanoc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.abramfriedmanoc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.athlosbrownsville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.athlossanantonio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bpsd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fulmoremiddleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.garfieldelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hahaionees.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hphsnyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.oghs.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ogms.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pes.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sjdlschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sssq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.summitacademycs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.waikelees.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afoc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anniebelle.tiftschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athlosaustin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athlosbrownsville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athlossanantonio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avacademies.avdistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bailey.tiftschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bpsd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burlington.caminonuevo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carver.bryanisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castellanoseisner.caminonuevo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charlesspencer.tiftschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cisneros.caminonuevo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dalzelllance.caminonuevo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delbosquemexico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ece.caminonuevo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eighthstreet.tiftschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.abernathyisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etc.needlesusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fhs.frenship.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fms.frenship.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fulmoremiddleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hahaionees.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hms.frenship.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamilyhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hphsnyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hphsnyc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hphsnyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.abernathyisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaynesiart.caminonuevo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kemp.bryanisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kempcarver.bryanisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lastinger.tiftschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lennox.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lvs.usd453.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mattwilson.tiftschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miramar.caminonuevo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.abernathyisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northside.tiftschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omega.tiftschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddick.tiftschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfxmetla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sixthstreet.tiftschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjdlschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soar.avdistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summitacademycs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tchs.tiftschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvms.frenship.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikelees.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abernathyisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abramfriedmanoc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afoc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athlosbrownsville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athlossanantonio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baldwin-school.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berean-eagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bereaneagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bpsd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caminonuevo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbchs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deltaacademylv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fontbonne.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fulmoremiddleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garfieldelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hahaionees.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamilyk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hphsnyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hphsnyc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hphsnyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihomschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ivyacademia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kamakau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.khshawks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lasmontanashigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metrocharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkcenturyschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pspdc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfxmetla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjdlschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stfrancisxavier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.summitacademycs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tampaadventistacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiftschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikelees.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000163ec92e77d0000040300473045022100be9c448a255ca6a722c88abc5e59a44481a0ecefe13ed0f808ab437f4d82f25802205360fd087d42128d51893380a2ef59d1b7ca857aaed95aa5452a312db5315a2c007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000163ec92e7b00000040300483046022100d4aa4028613637b17bbc57366f983c42c69e62ee4596e2d32b9a65e52b74a4e2022100e495d8e40f23f197a2dd71ac4c27e5e3a61aa671f77afdd2b578978b4460c54a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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