school.lexnyc.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d5:74:0b:20:c3:92:47:11:ce:a8:45:f8:2e:b1:07:39:39 was issued on by Let's Encrypt.

With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=school.lexnyc.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d5:74:0b:20:c3:92:47:11:ce:a8:45:f8:2e:b1:07:39:39
Serial Number (int): 333971250176748996518325738619194413889849
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7a:16:2a:ba:2f:ca:93:fb:3c:48:81:b2:20:9b:a5:58:77:d1:2a:09
Fingerprint (sha256): c0:46:3f:cc:ae:2a:ba:35:4e:cf:59:b8:79:bb:d0:f6:6c:10:56:b4:6d:8c:af:d2:d9:dc:55:79:1b:6c:ed:41

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate school.lexnyc.com

72

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for school.lexnyc.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.ccsd1.org
admin.che.pennsvalley.org
admin.cherokeeisd.net
admin.crutchoesd.org
admin.dhs.ccsd1.org
admin.dis.ccsd1.org
admin.dms.ccsd1.org
admin.dps.ccsd1.org
admin.drs.ccsd1.org
admin.dues.ccsd1.org
admin.eclc.pburgsd.net
admin.erpsk12.org
admin.her.frsd12.org
admin.highschool.frsd12.org
admin.laf.edu.mx
admin.middleschool.frsd12.org
admin.mte.pennsvalley.org
admin.new.frsd12.org
admin.pburgsd.net
admin.pennsvalley.org
admin.pes.pburgsd.net
admin.phs.pburgsd.net
admin.pms.pburgsd.net
admin.pps.pburgsd.net
admin.pve.pennsvalley.org
admin.pvhs.pennsvalley.org
admin.pvi.pennsvalley.org
admin.riversideccs.net
admin.sloan.frsd12.org
admin.sss.ccsd1.org
admin.statelinermedia.pburgsd.net
ccsd1.org
che.pennsvalley.org
cherokeeisd.net
crutchoesd.org
dhs.ccsd1.org
dis.ccsd1.org
dms.ccsd1.org
dps.ccsd1.org
drs.ccsd1.org
dues.ccsd1.org
eclc.pburgsd.net
frsd12.org
laf.edu.mx
mountainoaks.org
mte.pennsvalley.org
mustangsla.org
pennsvalley.org
pes.pburgsd.net
phs.pburgsd.net
pms.pburgsd.net
pps.pburgsd.net
pve.pennsvalley.org
pvhs.pennsvalley.org
pvi.pennsvalley.org
riversideccs.net
school.lexnyc.com
sss.ccsd1.org
statelinermedia.pburgsd.net
www.ccsd1.org
www.cherokeeisd.net
www.cleburne.k12.tx.us
www.crutchoesd.org
www.erpsk12.org
www.firebaughhigh.org
www.frsd12.org
www.laf.edu.mx
www.lexnyc.com
www.mountainoaks.org
www.pburgsd.net
www.pennsvalley.org
www.riversideccs.net

Other certificates including the domain name lexnyc.com

(limited to 100 certificates)
school.lexnyc.com
acrma21.org
10.bellevilleschools.org
10.bellevilleschools.org
hes.huffmanisd.net
acrma21.org
acrma21.org
mustangsla.org
academia.sanjorgeparroquiayacademia.org
admin.jhe.dcs.edu
her.frsd12.org
admin.mcduffie.k12.ga.us
10.bellevilleschools.org
wolcs.org
gordonsville.smithcoedu.com
meadowsschool.org
www.mustangsla.org
acrma21.org
10.bellevilleschools.org
admin.alturaprep.org
acrma21.org
academia.sanjorgeparroquiayacademia.org
10.bellevilleschools.org
adams.cleburne.k12.tx.us
10.bellevilleschools.org
middleschool.frsd12.org
drs.ccsd1.org
cyc4kids.org
admin.pburgsd.net
academia.sanjorgeparroquiayacademia.org
sms.hermistonsd.org
admin.alturaprep.org
10.bellevilleschools.org
10.bellevilleschools.org
10.bellevilleschools.org
adams.cleburne.k12.tx.us
www.bkhslawtech.com
admin.ccsd1.org
www.erpsk12.org
admin.ces.coloma.org
admin.ccsd1.org
cyber.scrsd.org
admin.stischoolcypress.org
frsd12.org
10.bellevilleschools.org
school.lexnyc.com
10.bellevilleschools.org
admin.ccsd1.org
10.bellevilleschools.org
10.bellevilleschools.org
rbhs.rbhsd.org
www.crutchoesd.org
admin.rembrandt-secondary.vanguardacademy.education
www.northelementaryschool.wsisd.com
ckchicago.org
sni.cloudflaressl.com
admin.cherokeeisd.net
shs.rbhsd.org
wpes.hermistonsd.org

Certificate

The complete raw certificate details for school.lexnyc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333971250176748996518325738619194413889849
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-02 10:41:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-31 10:41:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'school.lexnyc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1465 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ccsd1.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.che.pennsvalley.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cherokeeisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.crutchoesd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dhs.ccsd1.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dis.ccsd1.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dms.ccsd1.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dps.ccsd1.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.drs.ccsd1.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dues.ccsd1.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eclc.pburgsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.erpsk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.her.frsd12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.highschool.frsd12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.laf.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.middleschool.frsd12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mte.pennsvalley.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.new.frsd12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pburgsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pennsvalley.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pes.pburgsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.phs.pburgsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pms.pburgsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pps.pburgsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pve.pennsvalley.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pvhs.pennsvalley.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pvi.pennsvalley.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.riversideccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sloan.frsd12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sss.ccsd1.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.statelinermedia.pburgsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccsd1.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'che.pennsvalley.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cherokeeisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crutchoesd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhs.ccsd1.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dis.ccsd1.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dms.ccsd1.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dps.ccsd1.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drs.ccsd1.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dues.ccsd1.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eclc.pburgsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frsd12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laf.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountainoaks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mte.pennsvalley.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mustangsla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennsvalley.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pes.pburgsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phs.pburgsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pms.pburgsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pps.pburgsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pve.pennsvalley.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pvhs.pennsvalley.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pvi.pennsvalley.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riversideccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.lexnyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sss.ccsd1.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statelinermedia.pburgsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccsd1.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cherokeeisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cleburne.k12.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crutchoesd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.erpsk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firebaughhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frsd12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laf.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lexnyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountainoaks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pburgsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennsvalley.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riversideccs.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001693e35c8d90000040300473045022100fdc164f40eafdfe687e2d57648b694f85534c45871d91eb89104e56777ed601602200b7da90299cb78312bcb25acc0c006f9327b429e96249682f956ae0b443b7d1c007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001693e35c94100000403004830460221009cb728d057b34d1868666c871ad36e729bae25f77d63ddcdb828f6bf02d9dee702210096160adc79a9c860c8336f49edd5551f24369dd29299fa557f6e35837bd0b510
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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