www.nyos.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:27:9e:8c:72:08:04:b3:76:db:b3:7b:23:c5:f2:42:2a:de was issued on by Let's Encrypt.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.nyos.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:27:9e:8c:72:08:04:b3:76:db:b3:7b:23:c5:f2:42:2a:de
Serial Number (int): 274818617362921526614187658312928033123038
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3e:b5:3a:93:d1:95:da:65:0f:76:84:cc:9c:5f:3a:e2:6a:7e:da:47
Fingerprint (sha256): c2:b2:f9:81:5b:f9:51:bf:02:e9:24:6a:f4:f5:5f:48:2a:63:b7:98:f1:b1:6b:e1:22:b6:c7:48:53:28:b0:ee

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.nyos.org

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nyos.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.blandfordschool.org
admin.cantonisd.net
admin.ccaisd.net
admin.hollingworthschool.org
admin.hurleyelemschool.org
admin.lbjechsaustinisd.org
admin.matherhs.org
admin.nyos.org
admin.sanfernandoms.org
admin.santanahs.org
bjms.crystalcityisd.org
blandfordschool.org
bp.aceroschools.org
cantonisd.net
ccaisd.net
cchs.crystalcityisd.org
cf.aceroschools.org
dm.aceroschools.org
dz.aceroschools.org
ei.brackettisd.net
es.aceroschools.org
es.cantonisd.net
es.llanoisd.org
fhs.franklinisd.net
fms.franklinisd.net
hg.aceroschools.org
hollingworthschool.org
hs.brackettisd.net
hs.cantonisd.net
hs.llanoisd.org
hs.rlisd.org
hurleyelemschool.org
is.cantonisd.net
jc.aceroschools.org
jh.brackettisd.net
jh.llanoisd.org
ji.aceroschools.org
jr.cantonisd.net
lbjechsaustinisd.org
llanoisd.org
lzes.crystalcityisd.org
matherhs.org
ms.rlisd.org
nyos.org
okolonaschools.org
op.aceroschools.org
ot.aceroschools.org
ps.llanoisd.org
rc.aceroschools.org
res.rlisd.org
ris.rlisd.org
rles.rlisd.org
rps.rlisd.org
rre.franklinisd.net
sanfernandoms.org
santanahs.org
sc.aceroschools.org
school.saintbrendan.org
sec.brackettisd.net
sfjh.crystalcityisd.org
stet.co
tes.thrallisd.com
ths.thrallisd.com
tms.thrallisd.com
tres.crystalcityisd.org
vin.ldcsb.ca
www.aceroschools.org
www.blandfordschool.org
www.bmhs-la.org
www.brackettisd.net
www.cantonisd.net
www.cathedralhighschool.org
www.ccaisd.net
www.crystalcityisd.org
www.ejeacademies.org
www.franklinisd.net
www.hmps.net
www.hollingworthschool.org
www.hurleyelemschool.org
www.lbjechsaustinisd.org
www.llanoisd.org
www.matherhs.org
www.nyos.org
www.okolonaschools.org
www.pacificcollegiate.com
www.pacificcollegiate.org
www.rlisd.org
www.sanfernandoms.org
www.santanahs.org
www.stet.co
www.thrallisd.com
www.westbrookisd.com

Other certificates including the domain name nyos.org

(limited to 100 certificates)
admin.adultlearning.sunrisesd.ca
lumberton.k12.tx.us
admin.lms.davidson.k12.nc.us
admin.blandfordschool.org
admin.aristoiclassical.org
mail.nyos.org
admin.aristoiclassical.org
sgmission.org
admin.nms.davidson.k12.nc.us
juno.nyos.org
admin.escalonhigh.org
admin.bms.davidson.k12.nc.us
escalonhigh.org
lifeschools.net
nyos.org
admin.fges.davidson.k12.nc.us
admin.bces.davidson.k12.nc.us
admin.blandfordschool.org
admin.nyos.org
nyos.org
mas.mpusd.net
nyos.org
admin.adultlearning.sunrisesd.ca
admin.aristoiclassical.org
lec.lumberton.k12.tx.us
admin.nyos.org
admin.aristoiclassical.org
hy.hpisd.org
www.lumberton.k12.tx.us
nyos.org
www.santafecolegio.edu.mx
empower.nyos.org
sgmission.org
rosebudacademy.com
mail.nyos.org
hartorah.org
ads.gesd32.org
admin.oghs.davidson.k12.nc.us
nyos.org
nyos.org
es.glendaleacademy.org
admin.nes.davidson.k12.nc.us
admin.aristoiclassical.org
nyos.org
empower.nyos.org
www.nyos.org
res.rlisd.org
admin.nes.davidson.k12.nc.us
admin.ves.monroe.k12.tn.us
admin.aristoiclassical.org
hs.cumberlandacademy.com
nyos.org
admin.lhs.davidson.k12.nc.us
www.escalonhigh.org
admin.wal.davidson.k12.nc.us
nyos.org
nyos.org
admin.bces.davidson.k12.nc.us
advantageisd.org
admin.hs.hpisd.org
admin.aristoiclassical.org
www.nyos.org
www.nyos.org
es.glendaleacademy.org
juno.nyos.org
admin.colonies.sunrisesd.ca
empower.nyos.org

Certificate

The complete raw certificate details for www.nyos.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274818617362921526614187658312928033123038
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-24 10:46:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-22 10:46:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nyos.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1850 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.blandfordschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cantonisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ccaisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hollingworthschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hurleyelemschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lbjechsaustinisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.matherhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nyos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sanfernandoms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.santanahs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bjms.crystalcityisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blandfordschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bp.aceroschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cantonisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccaisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cchs.crystalcityisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cf.aceroschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dm.aceroschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dz.aceroschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ei.brackettisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.aceroschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.cantonisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.llanoisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fhs.franklinisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fms.franklinisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hg.aceroschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hollingworthschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.brackettisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.cantonisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.llanoisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.rlisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hurleyelemschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is.cantonisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jc.aceroschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jh.brackettisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jh.llanoisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ji.aceroschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jr.cantonisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbjechsaustinisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llanoisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lzes.crystalcityisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matherhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.rlisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okolonaschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'op.aceroschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ot.aceroschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps.llanoisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rc.aceroschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'res.rlisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ris.rlisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rles.rlisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rps.rlisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rre.franklinisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanfernandoms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santanahs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sc.aceroschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.saintbrendan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.brackettisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfjh.crystalcityisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stet.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tes.thrallisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ths.thrallisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.thrallisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tres.crystalcityisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vin.ldcsb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aceroschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blandfordschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmhs-la.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brackettisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cantonisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cathedralhighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccaisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crystalcityisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ejeacademies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.franklinisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hmps.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hollingworthschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hurleyelemschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lbjechsaustinisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.llanoisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matherhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nyos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.okolonaschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pacificcollegiate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pacificcollegiate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rlisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanfernandoms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santanahs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stet.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thrallisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westbrookisd.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e9d3c0144000004030047304502204cdbbeabcc9fbe951c67fd1e963a330cbf10d4b0e0604efcf39702058510afbd022100b4e1c24eca08201daee4812b36a10c43c70b34f45dc6379dcb68a9c241d528f7007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e9d3c013700000403004730450220769290dce9b45c993cb0eb61595c7b5a8dcbef9f1238890f4e8958ab266b916502210084c24205df35dd1fbcd6f7f1db4d9c128a91655821307b49416fea3077f1a124
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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