sbi.baker5j.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a8:b6:ff:3c:46:cd:be:f5:1e:e9:4c:cf:f2:58:8e:99:86 was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sbi.baker5j.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a8:b6:ff:3c:46:cd:be:f5:1e:e9:4c:cf:f2:58:8e:99:86
Serial Number (int): 318747540191484405747200233970108153633158
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d3:6f:89:77:82:20:6f:f5:98:70:7c:54:e1:74:74:13:d5:e9:48:de
Fingerprint (sha256): c4:69:4a:2e:78:62:67:7a:7e:c4:78:c2:4d:44:0b:c7:63:f9:e6:ab:07:e7:14:2a:54:c1:46:fb:a1:60:3c:c8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sbi.baker5j.org

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sbi.baker5j.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acrma12.org
admin.andrews.whittiercity.net
admin.apaches.k12.in.us
admin.arisehighschool.org
admin.baker5j.org
admin.berenacademy.org
admin.carnegieriverside.org
admin.carnegieschools.org
admin.carnegiewhittier.org
admin.casitaiedis.edu.mx
admin.cristoreymiami.org
admin.dexter.whittiercity.net
admin.edwards.whittiercity.net
admin.elpasocatholicschools.org
admin.ghs.lghs.k12.ca.us
admin.hac1.org
admin.hoover.whittiercity.net
admin.jackson.whittiercity.net
admin.lgas.lghs.k12.ca.us
admin.lghs.k12.ca.us
admin.lghs.lghs.k12.ca.us
admin.longfellow.whittiercity.net
admin.msta.whittiercity.net
admin.ojn.apaches.k12.in.us
admin.orangegrove.whittiercity.net
admin.phelan.whittiercity.net
admin.sjwschool.net
admin.sorensen.whittiercity.net
admin.theleadershipacademytyler.com
admin.westwhittier.whittiercity.net
admin.whs.apaches.k12.in.us
admin.wms.apaches.k12.in.us
andrews.whittiercity.net
arisehighschool.org
baker5j.org
berenacademy.org
bhs.baker5j.org
bms.baker5j.org
brooklyn.baker5j.org
carnegieriverside.org
carnegieschools.org
carnegiewhittier.org
casitaiedis.edu.mx
claytonvalley.org
colegiobenedictino.edu.mx
cristoreymiami.org
dexter.whittiercity.net
draper.summitacademyschools.org
eaglecap.baker5j.org
edwards.whittiercity.net
elpasocatholicschools.org
ghs.lghs.k12.ca.us
haines.baker5j.org
hoover.whittiercity.net
jackson.whittiercity.net
keating.baker5j.org
lgas.lghs.k12.ca.us
lghs.lghs.k12.ca.us
lms.lexingtonisd.net
longfellow.whittiercity.net
msta.whittiercity.net
ojn.apaches.k12.in.us
orangegrove.whittiercity.net
phelan.whittiercity.net
sbi.baker5j.org
sjwschool.net
sorensen.whittiercity.net
theleadershipacademytyler.com
usd458.net
westwhittier.whittiercity.net
whs.apaches.k12.in.us
wms.apaches.k12.in.us
www.acrma12.org
www.apaches.k12.in.us
www.arisehighschool.org
www.baker5j.org
www.carnegieriverside.org
www.carnegieschools.org
www.carnegiewhittier.org
www.casitaiedis.edu.mx
www.colegioguadalupe.edu.mx
www.cristoreymiami.org
www.elpasocatholicschools.org
www.hac1.org
www.lghs.k12.ca.us
www.pcrpanthers.net
www.sjwschool.net
www.theleadershipacademytyler.com
www.usd458.net

Other certificates including the domain name baker5j.org

(limited to 100 certificates)
www.comalisd.org
acrma12.org
jres.comalisd.org
acrma12.org
vallecitok12.com
admin.bhs.baker5j.org
acrma12.org
acrma12.org
baker5j.org
acrma12.org
acrma12.org
www.sjwschool.net
acrma12.org
admin.bhs.baker5j.org
1fairfield.org
www.cristoreymiami.org
acrma12.org
dudley.centerusd.org
admin.bhs.baker5j.org
www.sttheresaschool.com
admin.bhs.baker5j.org
admin.bhs.baker5j.org
acrma12.org
admin.bhs.baker5j.org
acrma12.org
www.psusd.k12.az.us
admin.bhs.baker5j.org
acrma12.org
admin.bhs.baker5j.org
admin.bhs.baker5j.org
admin.dimensions.org
admin.bhs.baker5j.org
westwhittier.whittiercity.net
www.poecenter246.com
bluffdale.summitacademyschools.org
acrma12.org
baker5j.org
acrma12.org
acrma12.org
acrma12.org
admin.ola-ca.com
ps.shisd.net
andersononline.org
acrma12.org
primarycenter.marsk12.org
acrma12.org
admin.northcountry.centerusd.org
acrma12.org
gres.comalisd.org
hles.comalisd.org
ses.comalisd.org
admin.bhs.baker5j.org
admin.stbern.net
admin.bhs.baker5j.org
www.springerschools.com
admin.eaglecap.baker5j.org
baker5j.org
www.vallecitok12.com
www.georgegervinprepacademy.org
acrma12.org
sbi.baker5j.org
admin.cve.cv.k12.ca.us
acrma12.org
acrma12.org
admin.whittiercity.net
acrma12.org
acrma12.org
admin.edu-tech.com
bes.ballingerisd.net
admin.bhs.baker5j.org
www.unioncity.k12.ok.us
acrma12.org
madisonchristianschool.com
admin.bhs.baker5j.org
acrma12.org
admin.dkies.org
www.monessenschooldistrict.com
admin.dudley.centerusd.org
www.twodimensions.org
admin.centerpreschool.centerusd.org
baker5j.org
admin.hills.bcsd.com
admin.canyon.cv.k12.ca.us
marshall.cv.k12.ca.us
marshall.cv.k12.ca.us

Certificate

The complete raw certificate details for sbi.baker5j.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318747540191484405747200233970108153633158
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-28 10:42:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-28 10:42:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sbi.baker5j.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2200 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acrma12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.andrews.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.apaches.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.arisehighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.berenacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.carnegieriverside.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.carnegieschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.carnegiewhittier.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.casitaiedis.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cristoreymiami.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dexter.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.edwards.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.elpasocatholicschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ghs.lghs.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hac1.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hoover.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jackson.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lgas.lghs.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lghs.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lghs.lghs.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.longfellow.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.msta.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ojn.apaches.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.orangegrove.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.phelan.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sjwschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sorensen.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.theleadershipacademytyler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.westwhittier.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.whs.apaches.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wms.apaches.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrews.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arisehighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berenacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhs.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bms.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brooklyn.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carnegieriverside.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carnegieschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carnegiewhittier.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casitaiedis.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claytonvalley.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colegiobenedictino.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cristoreymiami.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dexter.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'draper.summitacademyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eaglecap.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edwards.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elpasocatholicschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghs.lghs.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haines.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoover.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jackson.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keating.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgas.lghs.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lghs.lghs.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lms.lexingtonisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longfellow.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msta.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ojn.apaches.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orangegrove.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phelan.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbi.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjwschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sorensen.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theleadershipacademytyler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usd458.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westwhittier.whittiercity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whs.apaches.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wms.apaches.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acrma12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apaches.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arisehighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carnegieriverside.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carnegieschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carnegiewhittier.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casitaiedis.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegioguadalupe.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cristoreymiami.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elpasocatholicschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hac1.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lghs.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcrpanthers.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjwschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theleadershipacademytyler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usd458.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016894446b630000040300483046022100fb7508a10c9f5433cdca9c7ea158bac706152d45eb8e154f5a7fbb266e859c790221008b21c54dcba74c15a97285bc11064f793a205ee8a8c3c6cd5532e8c14f6b33e800760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016894446d74000004030047304502206d07cada33baa5297dc264aae6251dc01b7d6a596667ac9de6f7772dcc5ed1ab022100cfb0066962d36535b682d95ce4cc96aba5a07ffa62eb0fba7fa76fca4ea3f5cf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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