lskysd.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bd:f1:13:ec:82:16:18:6b:61:5e:2a:e7:c9:00:3c:2f:c9 was issued on by Let's Encrypt.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lskysd.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bd:f1:13:ec:82:16:18:6b:61:5e:2a:e7:c9:00:3c:2f:c9
Serial Number (int): 325970672540917752201717916507325081595849
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c6:79:30:8c:7c:ed:3e:44:b2:a3:ac:81:8d:20:d4:1c:41:e5:f3:cf
Fingerprint (sha256): c3:bf:4b:64:36:b5:dc:54:47:24:ad:ad:f7:12:7b:fe:49:f0:19:7b:6f:66:64:b4:ac:c1:fb:a8:0c:40:04:0d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lskysd.ca

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lskysd.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.bcs.lskysd.ca
admin.bready.lskysd.ca
admin.calmecaacademy.com
admin.cando.lskysd.ca
admin.cathedralschoolny.org
admin.ckcs.lskysd.ca
admin.connaught.lskysd.ca
admin.cornelius.fgsdk12.org
admin.csd300.org
admin.dilley.fgsdk12.org
admin.echoshaw.fgsdk12.org
admin.fernhill.fgsdk12.org
admin.fghs.fgsdk12.org
admin.fgsdk12.org
admin.garvanzaelementary.org
admin.hafford.lskysd.ca
admin.hamlincharter.org
admin.harveyclarke.fgsdk12.org
admin.hces.lskysd.ca
admin.heritage.lskysd.ca
admin.highschool.mcasd.net
admin.husd4.org
admin.josephgale.fgsdk12.org
admin.kauffmanschool.org
admin.kaumanaelementary.org
admin.kcs.lskysd.ca
admin.lawrence.lskysd.ca
admin.leoville.lskysd.ca
admin.lskysd.ca
admin.luseland.lskysd.ca
admin.macklin.lskysd.ca
admin.maymont.lskysd.ca
admin.mcasd.net
admin.mccreery.mcasd.net
admin.mckitrick.lskysd.ca
admin.missionprep.org
admin.nams.fgsdk12.org
admin.oga.fgsdk12.org
admin.omardblaircharterschool.com
admin.phillyscholars.org
admin.rayne.mcasd.net
admin.ryderschool.org
admin.sendicaeducation.com
admin.siths.org
admin.tommcall.fgsdk12.org
calmecaacademy.com
cathedralschoolny.org
cornelius.fgsdk12.org
csd300.org
ddiny.org
dilley.fgsdk12.org
echoshaw.fgsdk12.org
fernhill.fgsdk12.org
fghs.fgsdk12.org
fgsdk12.org
garvanzaelementary.org
hamlincharter.org
harveyclarke.fgsdk12.org
highschool.mcasd.net
husd4.org
josephgale.fgsdk12.org
kauffmanschool.org
kaumanaelementary.org
lskysd.ca
mcasd.net
mccreery.mcasd.net
missionprep.org
nams.fgsdk12.org
northregionselpa.org
oga.fgsdk12.org
omardblaircharterschool.com
phillyscholars.org
rayne.mcasd.net
ryderschool.org
siths.org
tommcall.fgsdk12.org
web.sendicaeducation.com
www.calmecaacademy.com
www.cathedralschoolny.org
www.csd300.org
www.ddiny.org
www.fgsdk12.org
www.garvanzaelementary.org
www.hamlincharter.org
www.husd4.org
www.kauffmanschool.org
www.kaumanaelementary.org
www.mcasd.net
www.missionprep.org
www.northregionselpa.org
www.omardblaircharterschool.com
www.phillyscholars.org
www.ryderschool.org
www.siths.org
www.sunrisewaldorfschool.org

Other certificates including the domain name lskysd.ca

(limited to 100 certificates)
helpdesk.lskysd.ca
*.lskysd.ca
artsalive.lskysd.ca
artsalive.lskysd.ca
P-CAMNE.IGLOODIGITALWORKPLACES.CA
mil.ldcsb.ca
admin.mckitrick.lskysd.ca
www.stgregsschool.org
webservices.lskysd.ca
P-CAMNE.IGLOODIGITALWORKPLACES.CA
ckcs.lskysd.ca
admin.bands.dekalbcentral.net
*.lskysd.ca
*.lskysd.ca
owa.lskysd.ca
mail.staff.lskysd.ca
P-CAMNE.IGLOODIGITALWORKPLACES.CA
shs.lskysd.ca
artsalive.lskysd.ca
admin.bcs.lskysd.ca
*.lskysd.ca
admin.bands.dekalbcentral.net
www.lskysd.ca
webservices.lskysd.ca
webservices.lskysd.ca
artsalive.lskysd.ca
fallbrookhs.org
P-CAMNE.IGLOODIGITALWORKPLACES.CA
admin.ups.lskysd.ca
P-CAMNE.IGLOODIGITALWORKPLACES.CA
mail.staff.lskysd.ca
mail.staff.lskysd.ca
*.lskysd.ca
sis.lskysd.ca
admin.bcs.lskysd.ca
lskysd.ca
webservices.lskysd.ca
artsalive.lskysd.ca
ckcs.lskysd.ca
www.northregionselpa.org
webservices.lskysd.ca
admin.bcs.lskysd.ca
webservices.lskysd.ca
webservices.lskysd.ca
ups.lskysd.ca
webservices.lskysd.ca
admin.bcs.lskysd.ca
lync.lskysd.ca

Certificate

The complete raw certificate details for lskysd.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325970672540917752201717916507325081595849
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 20:17:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-09 20:17:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lskysd.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2136 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bcs.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bready.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.calmecaacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cando.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cathedralschoolny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ckcs.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.connaught.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cornelius.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.csd300.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dilley.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.echoshaw.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fernhill.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fghs.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.garvanzaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hafford.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hamlincharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.harveyclarke.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hces.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.heritage.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.highschool.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.husd4.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.josephgale.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kauffmanschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kaumanaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kcs.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lawrence.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.leoville.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.luseland.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.macklin.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.maymont.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mccreery.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mckitrick.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.missionprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nams.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.oga.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.omardblaircharterschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.phillyscholars.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rayne.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ryderschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sendicaeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.siths.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tommcall.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calmecaacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cathedralschoolny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornelius.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csd300.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ddiny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dilley.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echoshaw.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fernhill.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fghs.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garvanzaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamlincharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harveyclarke.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highschool.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'husd4.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'josephgale.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kauffmanschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaumanaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mccreery.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missionprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nams.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northregionselpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oga.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omardblaircharterschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phillyscholars.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rayne.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryderschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siths.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tommcall.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.sendicaeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.calmecaacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cathedralschoolny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csd300.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ddiny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garvanzaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hamlincharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.husd4.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kauffmanschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaumanaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missionprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northregionselpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omardblaircharterschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phillyscholars.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ryderschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.siths.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunrisewaldorfschool.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f9151a9990000040300473045022100cf1d947a6fc126b835ea076d9475c1128d5372f71e220dab9cfd589d7661095d02206ef694184ae5f84dab2ba764ebc4e4fcf13f0a0e260c7fee5bf401f0d5c3980700770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f9151a99f0000040300483046022100be6146125796c4713dceba239cbff73bdd47d0ef907440bf5fcbb02d2174384b022100f4e18e27a3fde72a22a463285b7e5fb36f2184d5b9064c3564e80b82ccd3b7e3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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