www.marystarelementary.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ee:e6:3e:41:a7:88:f0:fb:49:34:a7:f4:90:22:a0:11:6b was issued on by Let's Encrypt.

With 79 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.marystarelementary.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ee:e6:3e:41:a7:88:f0:fb:49:34:a7:f4:90:22:a0:11:6b
Serial Number (int): 342630106815529962721673225753810106847595
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 45:08:92:c0:91:03:50:15:b8:21:d6:cf:aa:7e:77:8f:a5:b2:02:3a
Fingerprint (sha256): bb:35:92:8f:10:59:9b:f3:38:6d:40:b5:b2:3f:1d:ae:34:0a:38:a8:35:f5:ae:2f:19:a5:fc:e6:bd:a2:65:e6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.marystarelementary.com

79

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.marystarelementary.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.camdentonschools.org
admin.catholicacademystamford.org
admin.centerhigh.org
admin.chs.camdentonschools.org
admin.cms.camdentonschools.org
admin.csmh.org
admin.dogwood.camdentonschools.org
admin.englewoodcliffs.org
admin.fatherjudge.com
admin.hawthorn.camdentonschools.org
admin.horizons.camdentonschools.org
admin.hs.stdoms.org
admin.hurricanedeck.camdentonschools.org
admin.kiplingesmeralda.edu.mx
admin.lctc.camdentonschools.org
admin.marystarelementary.com
admin.milanelementary.org
admin.milanhigh.org
admin.milanmiddle.org
admin.oakridge.camdentonschools.org
admin.osagebeach.camdentonschools.org
admin.pantego.com
admin.reillyschool.com
admin.stdoms.org
admin.sttheresaschool.com
admin.svah-rfk.org
admin.twodimensions.org
admin.unionbeachschools.org
camdentonschools.org
catholicacademystamford.org
centerhigh.org
chs.camdentonschools.org
cms.camdentonschools.org
colegioinglesensenada.com
csmh.org
dogwood.camdentonschools.org
englewoodcliffs.org
fatherjudge.com
hawthorn.camdentonschools.org
horizons.camdentonschools.org
hs.stdoms.org
hurricanedeck.camdentonschools.org
kiplingesmeralda.edu.mx
lctc.camdentonschools.org
marystarelementary.com
milanelementary.org
milanhigh.org
milanmiddle.org
oakridge.camdentonschools.org
osagebeach.camdentonschools.org
pantego.com
reillyschool.com
stdoms.org
stfrancis-school.org
sttheresaschool.com
svah-rfk.org
twodimensions.org
unionbeachschools.org
www.camdentonschools.org
www.catholicacademystamford.org
www.centerhigh.org
www.colegioinglesensenada.com
www.crescentacademycharterschool.com
www.csmh.org
www.englewoodcliffs.org
www.fatherjudge.com
www.kiplingesmeralda.edu.mx
www.marystarelementary.com
www.milanelementary.org
www.milanhigh.org
www.milanmiddle.org
www.pantego.com
www.reillyschool.com
www.stdoms.org
www.stfrancis-school.org
www.sttheresaschool.com
www.svah-rfk.org
www.twodimensions.org
www.unionbeachschools.org

Other certificates including the domain name marystarelementary.com

(limited to 100 certificates)
admin.dimensions.org
marystarelementary.com
admin.crescentacademycharterschool.com
admin.camdentonschools.org
marystarelementary.com
www.marystarelementary.com
admin.camdentonschools.org
admin.camdentonschools.org
marystarelementary.com

Certificate

The complete raw certificate details for www.marystarelementary.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342630106815529962721673225753810106847595
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-29 01:09:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-27 01:09:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.marystarelementary.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1971 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.camdentonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.catholicacademystamford.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.centerhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.chs.camdentonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cms.camdentonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.csmh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dogwood.camdentonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.englewoodcliffs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fatherjudge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hawthorn.camdentonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.horizons.camdentonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hs.stdoms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hurricanedeck.camdentonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kiplingesmeralda.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lctc.camdentonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.marystarelementary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.milanelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.milanhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.milanmiddle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.oakridge.camdentonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.osagebeach.camdentonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pantego.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.reillyschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stdoms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sttheresaschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.svah-rfk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.twodimensions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.unionbeachschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camdentonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicacademystamford.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centerhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chs.camdentonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.camdentonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colegioinglesensenada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csmh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dogwood.camdentonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'englewoodcliffs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatherjudge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawthorn.camdentonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horizons.camdentonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.stdoms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hurricanedeck.camdentonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiplingesmeralda.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lctc.camdentonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marystarelementary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milanelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milanhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milanmiddle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oakridge.camdentonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osagebeach.camdentonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pantego.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reillyschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stdoms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stfrancis-school.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sttheresaschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svah-rfk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twodimensions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unionbeachschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.camdentonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicacademystamford.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centerhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegioinglesensenada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crescentacademycharterschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csmh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.englewoodcliffs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fatherjudge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiplingesmeralda.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marystarelementary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.milanelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.milanhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.milanmiddle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pantego.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reillyschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stdoms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stfrancis-school.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sttheresaschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.svah-rfk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twodimensions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unionbeachschools.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016cdb22c94b0000040300473045022044b5f8edddeb6c5e98ed6a585906c00bfb16970ee8621626e1edbc794e106b5a022100acf1a1575ae715f8df9068b518915729fffda14deaa2c3ceb3a06c900758b26d00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016cdb22c7620000040300483046022100bb956211234f93a8804647209432986a309518312101f925fef6b2e80254e932022100e0fb0783c47843684e2d95834e1122582eb53139e5a40b24e926f9c405f231d9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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