punxsy.k12.pa.us

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4d:6e:9a:f2:3c:68:c9:d0:ce:df:75:5c:a1:eb:1b:ce:38 was issued on by Let's Encrypt.

With 63 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=punxsy.k12.pa.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4d:6e:9a:f2:3c:68:c9:d0:ce:df:75:5c:a1:eb:1b:ce:38
Serial Number (int): 287685619654574800991765380625332227001912
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d6:08:95:3f:44:51:44:77:c4:9a:35:8c:c8:15:28:af:f7:8e:a2:03
Fingerprint (sha256): be:ca:8f:d7:45:9c:1b:43:c9:79:65:94:5c:ae:1b:39:dd:3a:53:7c:0a:28:d5:be:13:4e:7a:8d:b3:f0:4b:47

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate punxsy.k12.pa.us

63

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for punxsy.k12.pa.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.bes.seafordbluejays.org
admin.catonschool.com
admin.central.seafordbluejays.org
admin.ces.seafordbluejays.org
admin.colegiomonteverde.edu.mx
admin.coleman.wisd.org
admin.es.punxsy.k12.pa.us
admin.fdes.seafordbluejays.org
admin.frederickdouglass.seafordbluejays.org
admin.hs.punxsy.k12.pa.us
admin.infinityhs.org
admin.lanaihighandelementaryschool.org
admin.lapoynorisd.net
admin.punxsy.k12.pa.us
admin.seafordbluejays.org
admin.seafordhighschool.seafordbluejays.org
admin.seafordmiddleschool.seafordbluejays.org
admin.shs.seafordbluejays.org
admin.sms.seafordbluejays.org
admin.thriveps.org
admin.tmsa.org
admin.tsdeaf.org
admin.westseaford.seafordbluejays.org
admin.wses.seafordbluejays.org
bes.seafordbluejays.org
blades.seafordbluejays.org
central.seafordbluejays.org
ces.seafordbluejays.org
colegiomonteverde.edu.mx
es.punxsy.k12.pa.us
escuelamexico.com.mx
fdes.seafordbluejays.org
frederickdouglass.seafordbluejays.org
hartsacademy.org
hs.punxsy.k12.pa.us
icabh.com
lanaihighandelementaryschool.org
punxsy.k12.pa.us
school.americanmartyrs.org
seafordbluejays.org
seafordhighschool.seafordbluejays.org
seafordmiddleschool.seafordbluejays.org
shs.seafordbluejays.org
sms.seafordbluejays.org
stthomasmorealhambra.org
tmsa.org
tsdeaf.com
tsdeaf.net
tsdeaf.org
westseaford.seafordbluejays.org
wses.seafordbluejays.org
www.americanmartyrs.org
www.colegiomonteverde.edu.mx
www.goldenvalleyhighschool.com
www.infinityhs.org
www.lanaihighandelementaryschool.org
www.punxsy.k12.pa.us
www.seafordbluejays.org
www.thriveps.org
www.tmsa.org
www.tsdeaf.com
www.tsdeaf.net
www.tsdeaf.org

Other certificates including the domain name punxsy.k12.pa.us

(limited to 100 certificates)
admin.shs.seafordbluejays.org
seafordhighschool.seafordbluejays.org
punxsy.k12.pa.us
mail.punxsy.k12.pa.us
*.punxsy.k12.pa.us
www.escuelamexico.com.mx
*.punxsy.k12.pa.us
www.huntingtonisd.com
admin.clift.wisd.org
admin.allison.pusd.org
admin.bes.seafordbluejays.org
punxsy.k12.pa.us
punxsy.k12.pa.us
*.punxsy.k12.pa.us
admin.hartsacademy.org
punxsy.k12.pa.us
morelandpreschool.moreland.org
ms.moodyisd.org
*.punxsy.k12.pa.us
ngc.lancasterisd.org
www.infinityhs.org
admin.delta-summit.chsd218.org
punxsy.k12.pa.us
admin.bes.seafordbluejays.org
punxsy.k12.pa.us
punxsy.k12.pa.us
admin.allison.pusd.org
mail.punxsy.k12.pa.us
huntingtonisd.com
punxsy.k12.pa.us
*.punxsy.k12.pa.us
tmsa.org
*.punxsy.k12.pa.us
admin.allison.pusd.org
mishpms.hpisd.org
admin.llesat.org
admin.allison.pusd.org
www.punxsy.k12.pa.us
admin.finley.wisd.org
punxsy.k12.pa.us
llanoisd.org
admin.allison.pusd.org
*.punxsy.k12.pa.us
www.coahomak12.org
admin.ahs.cherokee.k12.nc.us
admin.huntingtonisd.com
*.punxsy.k12.pa.us
adulted.sanjacinto.k12.ca.us
delta-summit.chsd218.org
*.punxsy.k12.pa.us
admin.shackelford.wisd.org
mail.punxsy.k12.pa.us
eisner.caminonuevo.org
northernheights.adsb.on.ca
catonschool.com
admin.bes.seafordbluejays.org
www.punxsy.k12.pa.us
*.punxsy.k12.pa.us
mail.punxsy.k12.pa.us
punxsy.k12.pa.us
*.punxsy.k12.pa.us
admin.cchs.mpusd.net
www.hartsacademy.org
goldenvalleyhighschool.com
admin.bes.seafordbluejays.org
shs.seafordbluejays.org
admin.bes.seafordbluejays.org
stthomasmorealhambra.org
www.punxsy.k12.pa.us
mail.punxsy.k12.pa.us
*.punxsy.k12.pa.us
www.punxsy.k12.pa.us
northside.wisd.org
mail.punxsy.k12.pa.us
admin.rowlettacademy.org
admin.northside.wisd.org

Certificate

The complete raw certificate details for punxsy.k12.pa.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287685619654574800991765380625332227001912
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-07 11:38:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-07 11:38:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'punxsy.k12.pa.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1651 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bes.seafordbluejays.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.catonschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.central.seafordbluejays.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ces.seafordbluejays.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.colegiomonteverde.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.coleman.wisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.es.punxsy.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fdes.seafordbluejays.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.frederickdouglass.seafordbluejays.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hs.punxsy.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.infinityhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lanaihighandelementaryschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lapoynorisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.punxsy.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.seafordbluejays.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.seafordhighschool.seafordbluejays.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.seafordmiddleschool.seafordbluejays.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.shs.seafordbluejays.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sms.seafordbluejays.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.thriveps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tmsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tsdeaf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.westseaford.seafordbluejays.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wses.seafordbluejays.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bes.seafordbluejays.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blades.seafordbluejays.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'central.seafordbluejays.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ces.seafordbluejays.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colegiomonteverde.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.punxsy.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escuelamexico.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fdes.seafordbluejays.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frederickdouglass.seafordbluejays.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hartsacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.punxsy.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icabh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lanaihighandelementaryschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'punxsy.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.americanmartyrs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seafordbluejays.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seafordhighschool.seafordbluejays.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seafordmiddleschool.seafordbluejays.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shs.seafordbluejays.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms.seafordbluejays.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stthomasmorealhambra.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsdeaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsdeaf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsdeaf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westseaford.seafordbluejays.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wses.seafordbluejays.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.americanmartyrs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegiomonteverde.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldenvalleyhighschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infinityhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lanaihighandelementaryschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.punxsy.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seafordbluejays.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thriveps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tmsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tsdeaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tsdeaf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tsdeaf.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001682851e31b0000040300483046022100f6d9eb5fed71877c3f9c0b4e9bdb7e2dec58488641a34c320c2b00b8685cbff4022100b811113cdd1a467f7c3a2fc179661a3ef643b10a09d6553189f80b823ccc4822007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001682851e5090000040300473045022004e0258a41a72fab33afaecbec0631771fbf9f9e0c5369c8da0bb612ccb57dbd022100eeeae6539a718916ac50cccfff6fae04788757b46afd59eae968fc11b6ea5922
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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