activities.madrid.k12.ia.us

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f8:aa:99:96:19:c4:bc:d0:25:2a:64:7d:34:59:78:60:43 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=activities.madrid.k12.ia.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f8:aa:99:96:19:c4:bc:d0:25:2a:64:7d:34:59:78:60:43
Serial Number (int): 345953651016779302339333469404268240330819
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 03:29:4e:60:09:02:92:65:69:d9:61:f1:bd:eb:f9:7b:b7:e8:9d:fb
Fingerprint (sha256): c4:10:63:26:2b:91:a4:af:3e:ea:0f:c2:5f:b8:ec:1d:b8:a7:48:70:cf:09:1f:0f:68:2e:ce:b9:10:27:53:47

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate activities.madrid.k12.ia.us

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for activities.madrid.k12.ia.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

activities.madrid.k12.ia.us
admin.activities.madrid.k12.ia.us
admin.ar.cypsd.org
admin.be.ysd.k12.sd.us
admin.cmh.edu.mx
admin.el.madrid.k12.ia.us
admin.es.cornellsd.org
admin.estrellitahigh.com
admin.fayettevilleisd.net
admin.galileogalilei.edu.mx
admin.galtadultschool.com
admin.galthigh.com
admin.gatewayk12.org
admin.gledhillelementary.org
admin.holytrinityavon.org
admin.hpiam.marquezhs.net
admin.hs.cornellsd.org
admin.ideapcs.org
admin.jrsr.madrid.k12.ia.us
admin.ki.cypsd.org
admin.la.cypsd.org
admin.li.ysd.k12.sd.us
admin.libra.marquezhs.net
admin.lphs.lincolnparkpublicschools.com
admin.lpms.lincolnparkpublicschools.com
admin.lu.cypsd.org
admin.mo.cypsd.org
admin.palihigh.org
admin.pickettk12.net
admin.ranchitoavees.org
admin.rcschools.net
admin.ssjmhs.marquezhs.net
admin.st.ysd.k12.sd.us
admin.union.kyschools.us
admin.ve.cypsd.org
admin.we.ysd.k12.sd.us
admin.wearelibertyranch.com
admin.yhs.ysd.k12.sd.us
admin.yms.ysd.k12.sd.us
admin.youngsvilleacademy.org
ar.cypsd.org
be.ysd.k12.sd.us
cmh.edu.mx
el.madrid.k12.ia.us
es.cornell.k12.pa.us
es.cornellsd.org
fes.pullmanschools.org
galileogalilei.edu.mx
holytrinityavon.org
hpiam.marquezhs.net
hs.cornell.k12.pa.us
hs.cornellsd.org
jes.pullmanschools.org
jrsr.madrid.k12.ia.us
ki.cypsd.org
la.cypsd.org
li.ysd.k12.sd.us
libra.marquezhs.net
lms.pullmanschools.org
lphs.lincolnparkpublicschools.com
lpms.lincolnparkpublicschools.com
lu.cypsd.org
mo.cypsd.org
parish.stmarysspokane.com
parish.stmarysspokane.org
phs.pullmanschools.org
ranchitoavees.org
school.stmarysspokane.com
school.stmarysspokane.org
ses.pullmanschools.org
spectrum.canoncityschools.org
ssjmhs.marquezhs.net
st.ysd.k12.sd.us
ve.cypsd.org
we.ysd.k12.sd.us
www.admin.grupograven.com.mx
www.athloscaddo.org
www.athlosreno.org
www.cmh.edu.mx
www.estrellitahigh.com
www.fayettevilleisd.net
www.galileogalilei.edu.mx
www.galtadultschool.com
www.galthigh.com
www.gatewayk12.org
www.gledhillelementary.org
www.grupograven.com.mx
www.holytrinityavon.org
www.ideapcs.org
www.palihigh.org
www.pickettk12.net
www.ranchitoavees.org
www.rcschools.net
www.union.kyschools.us
www.wearelibertyranch.com
www.youngsvilleacademy.org
yhs.ysd.k12.sd.us
yms.ysd.k12.sd.us
youngsvilleacademy.org

Other certificates including the domain name madrid.k12.ia.us

(limited to 100 certificates)
activities.madrid.k12.ia.us
activities.madrid.k12.ia.us
www.yorkprepsc.org
admin.bakerschools.org
admin.jrsr.madrid.k12.ia.us
www.cranburyschool.org
lpms.lincolnparkpublicschools.com
www.pullmanschools.org
admin.el.madrid.k12.ia.us
activities.madrid.k12.ia.us
activities.madrid.k12.ia.us
activities.madrid.k12.ia.us
admin.msab.msa.state.mn.us
el.madrid.k12.ia.us
admin.bakerschools.org
admin.cornellsd.org
admin.cienegaelementary.org
admin.union.kyschools.us
www.madrid.k12.ia.us
admin.bakerschools.org
www.ps52si.org
admin.bakerschools.org
activities.madrid.k12.ia.us
activities.madrid.k12.ia.us
texasleadership.net
admin.troupisd.org
admin.bakerschools.org
pdhs.rbusd.org
gulfelementary.org
www.olsorrows.com
activities.madrid.k12.ia.us
www.cornell.k12.pa.us
admin.bakerschools.org
activities.madrid.k12.ia.us
admin.cse.gatewayk12.org
admin.elementary.troupisd.org
admin.el.madrid.k12.ia.us
admin.desotoschools.com
activities.madrid.k12.ia.us
lacountycharterselpa.org
admin.el.madrid.k12.ia.us
admin.activities.madrid.k12.ia.us
www.colegioangloamericanohgo.edu.mx
www.hancockhs.org
activities.madrid.k12.ia.us
admin.glenknoll.org
activities.madrid.k12.ia.us
activities.madrid.k12.ia.us
admin.fdes.mobridge-pollock.k12.sd.us
lincolnparkpublicschools.com
el.madrid.k12.ia.us
www.markedtreeschools.com
activities.madrid.k12.ia.us
activities.madrid.k12.ia.us
admin.bakerschools.org
admin.altavista.rbusd.org
admin.bakerschools.org
el.madrid.k12.ia.us
admin.dss.desotoschools.com
activities.madrid.k12.ia.us
admin.bakerschools.org
bronxdalehs.org
admin.hillcity.k12.sd.us
activities.madrid.k12.ia.us
www.overtoncountyschools.net
ms.mobridge-pollock.k12.sd.us
activities.madrid.k12.ia.us
activities.madrid.k12.ia.us
sh.iasd.cc
activities.madrid.k12.ia.us
admin.cypsd.org
www.bpsd.us
socialjusticemclc.org
admin.gulfstreamschool.org
activities.madrid.k12.ia.us
jrsr.madrid.k12.ia.us
admin.high.troupisd.org
admin.stmarysspokane.com
activities.madrid.k12.ia.us
admin.sainte-school.org
activities.madrid.k12.ia.us
www.pullmanschools.org
www.colegiocipres.edu.mx
admin.madrid.k12.ia.us
admin.bakerschools.org

Certificate

The complete raw certificate details for activities.madrid.k12.ia.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345953651016779302339333469404268240330819
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-05 01:20:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-03 01:20:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'activities.madrid.k12.ia.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2309 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activities.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.activities.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ar.cypsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.be.ysd.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cmh.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.el.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.es.cornellsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.estrellitahigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fayettevilleisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.galileogalilei.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.galtadultschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.galthigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gledhillelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.holytrinityavon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hpiam.marquezhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hs.cornellsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ideapcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jrsr.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ki.cypsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.la.cypsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.li.ysd.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.libra.marquezhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lphs.lincolnparkpublicschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lpms.lincolnparkpublicschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lu.cypsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mo.cypsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.palihigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pickettk12.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ranchitoavees.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rcschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ssjmhs.marquezhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.st.ysd.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.union.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ve.cypsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.we.ysd.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wearelibertyranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.yhs.ysd.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.yms.ysd.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.youngsvilleacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.cypsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be.ysd.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmh.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'el.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.cornell.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.cornellsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fes.pullmanschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galileogalilei.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holytrinityavon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpiam.marquezhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.cornell.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.cornellsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jes.pullmanschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jrsr.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ki.cypsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'la.cypsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'li.ysd.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libra.marquezhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lms.pullmanschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lphs.lincolnparkpublicschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpms.lincolnparkpublicschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lu.cypsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mo.cypsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parish.stmarysspokane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parish.stmarysspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phs.pullmanschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranchitoavees.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.stmarysspokane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.stmarysspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ses.pullmanschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spectrum.canoncityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssjmhs.marquezhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st.ysd.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 've.cypsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'we.ysd.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.admin.grupograven.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athloscaddo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athlosreno.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmh.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.estrellitahigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fayettevilleisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.galileogalilei.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.galtadultschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.galthigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gledhillelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grupograven.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holytrinityavon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ideapcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.palihigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pickettk12.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ranchitoavees.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rcschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.union.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wearelibertyranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youngsvilleacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yhs.ysd.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yms.ysd.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youngsvilleacademy.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00860b94f25806318f1b363d0a176b4883a01d46df8d8c8cf021dae23d4379802769d488df3654f8fb947ed9709c72c0148b274cd990199bd4a53efe8e97c2ff363d9d51053161e3ec729cc41540a97088a117e8a1d8e4b9e593a9f5f1dc6e5048faaa22d470b3813b17ad37dae4dd57d01f28694e19daf6a9f063c285d667f483b84569b32b0b70e205fe0fd15861aef111ca2d0264a4bce8f0ab7908790a68cfbb7928b167f513ec933b37eb4543541186eab2371e159e1fe0b4d88c31ae2d52d9f7c98e5d4b0c3497da20547ed16c8c47773abbe1f5df1717ab103e81ca75660877a9a9bc16e317bb3bc56e1d1ae70ca94b75b70218c8486e483583dcf210d1