activities.madrid.k12.ia.us

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a3:7c:cd:26:e0:71:11:4d:bd:05:46:1f:74:c4:b0:d4:3d was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=activities.madrid.k12.ia.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a3:7c:cd:26:e0:71:11:4d:bd:05:46:1f:74:c4:b0:d4:3d
Serial Number (int): 316968773084240704759222147355308444406845
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cb:c2:2d:db:e1:3d:f1:64:48:f0:31:d3:fe:9e:51:a1:6b:d5:fa:70
Fingerprint (sha256): c6:2b:f3:69:27:75:87:0d:77:7a:cb:eb:b5:cc:cc:60:0d:3d:61:79:e2:33:16:82:56:93:df:ac:a4:9b:6a:fa

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate activities.madrid.k12.ia.us

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for activities.madrid.k12.ia.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

activities.madrid.k12.ia.us
admin.activities.madrid.k12.ia.us
admin.cornellsd.org
admin.cse.gatewayk12.org
admin.desotoschools.com
admin.dhs.desotoschools.com
admin.dms.desotoschools.com
admin.dss.desotoschools.com
admin.ecc.desotoschools.com
admin.el.madrid.k12.ia.us
admin.elementary.troupisd.org
admin.es.cornellsd.org
admin.ev.gatewayk12.org
admin.fsc.desotoschools.com
admin.galileogalilei.edu.mx
admin.galtadultschool.com
admin.gatewayk12.org
admin.ghs.gatewayk12.org
admin.gms.gatewayk12.org
admin.high.troupisd.org
admin.hs.cornellsd.org
admin.ideapcs.org
admin.jrsr.madrid.k12.ia.us
admin.k8.pickettk12.net
admin.madrid.k12.ia.us
admin.markedtreeschools.com
admin.mes.desotoschools.com
admin.middle.troupisd.org
admin.msms.gatewayk12.org
admin.nes.desotoschools.com
admin.oc-sd.com
admin.pchs.pickettk12.net
admin.pickettk12.net
admin.ps52si.org
admin.ram.gatewayk12.org
admin.ranchitoavees.org
admin.stmarysspokane.com
admin.troupisd.org
admin.up.gatewayk12.org
admin.wearelibertyranch.com
admin.wes.desotoschools.com
admin.youngsvilleacademy.org
cse.gatewayk12.org
desotoschools.com
dhs.desotoschools.com
dms.desotoschools.com
dss.desotoschools.com
ecc.desotoschools.com
el.madrid.k12.ia.us
es.cornell.k12.pa.us
es.cornellsd.org
ev.gatewayk12.org
fsc.desotoschools.com
galileogalilei.edu.mx
ghs.gatewayk12.org
gms.gatewayk12.org
hs.cornell.k12.pa.us
hs.cornellsd.org
jrsr.madrid.k12.ia.us
k8.pickettk12.net
mes.desotoschools.com
msms.gatewayk12.org
nes.desotoschools.com
oc-sd.com
parish.stmarysspokane.com
parish.stmarysspokane.org
pchs.pickettk12.net
ps52si.org
ram.gatewayk12.org
ranchitoavees.org
school.stmarysspokane.com
school.stmarysspokane.org
stmarysspokane.com
stmarysspokane.org
up.gatewayk12.org
wes.desotoschools.com
www.admin.grupograven.com.mx
www.athlosreno.org
www.bpsd.us
www.cornell.k12.pa.us
www.cornellsd.org
www.desotoschools.com
www.galileogalilei.edu.mx
www.galtadultschool.com
www.gatewayk12.org
www.grupograven.com.mx
www.ideapcs.org
www.madrid.k12.ia.us
www.markedtreeschools.com
www.oc-sd.com
www.overtoncountyschools.net
www.pickettk12.net
www.ps52si.org
www.ranchitoavees.org
www.stmarysspokane.com
www.stmarysspokane.org
www.troupisd.org
www.wearelibertyranch.com
www.youngsvilleacademy.org
youngsvilleacademy.org

Other certificates including the domain name madrid.k12.ia.us

(limited to 100 certificates)
activities.madrid.k12.ia.us
activities.madrid.k12.ia.us
www.yorkprepsc.org
admin.bakerschools.org
admin.jrsr.madrid.k12.ia.us
www.cranburyschool.org
lpms.lincolnparkpublicschools.com
www.pullmanschools.org
admin.el.madrid.k12.ia.us
activities.madrid.k12.ia.us
activities.madrid.k12.ia.us
activities.madrid.k12.ia.us
admin.msab.msa.state.mn.us
el.madrid.k12.ia.us
admin.bakerschools.org
admin.cornellsd.org
admin.cienegaelementary.org
admin.union.kyschools.us
www.madrid.k12.ia.us
admin.bakerschools.org
www.ps52si.org
admin.bakerschools.org
activities.madrid.k12.ia.us
activities.madrid.k12.ia.us
texasleadership.net
admin.troupisd.org
admin.bakerschools.org
pdhs.rbusd.org
gulfelementary.org
www.olsorrows.com
activities.madrid.k12.ia.us
www.cornell.k12.pa.us
admin.bakerschools.org
activities.madrid.k12.ia.us
admin.cse.gatewayk12.org
admin.elementary.troupisd.org
admin.el.madrid.k12.ia.us
admin.desotoschools.com
activities.madrid.k12.ia.us
lacountycharterselpa.org
admin.el.madrid.k12.ia.us
admin.activities.madrid.k12.ia.us
www.colegioangloamericanohgo.edu.mx
www.hancockhs.org
activities.madrid.k12.ia.us
admin.glenknoll.org
activities.madrid.k12.ia.us
activities.madrid.k12.ia.us
admin.fdes.mobridge-pollock.k12.sd.us
lincolnparkpublicschools.com
el.madrid.k12.ia.us
www.markedtreeschools.com
activities.madrid.k12.ia.us
activities.madrid.k12.ia.us
admin.bakerschools.org
admin.altavista.rbusd.org
admin.bakerschools.org
el.madrid.k12.ia.us
admin.dss.desotoschools.com
activities.madrid.k12.ia.us
admin.bakerschools.org
bronxdalehs.org
admin.hillcity.k12.sd.us
activities.madrid.k12.ia.us
www.overtoncountyschools.net
ms.mobridge-pollock.k12.sd.us
activities.madrid.k12.ia.us
activities.madrid.k12.ia.us
sh.iasd.cc
activities.madrid.k12.ia.us
admin.cypsd.org
www.bpsd.us
socialjusticemclc.org
admin.gulfstreamschool.org
activities.madrid.k12.ia.us
jrsr.madrid.k12.ia.us
admin.high.troupisd.org
admin.stmarysspokane.com
activities.madrid.k12.ia.us
admin.sainte-school.org
activities.madrid.k12.ia.us
www.pullmanschools.org
www.colegiocipres.edu.mx
admin.madrid.k12.ia.us
admin.bakerschools.org

Certificate

The complete raw certificate details for activities.madrid.k12.ia.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316968773084240704759222147355308444406845
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-25 10:37:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-24 10:37:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'activities.madrid.k12.ia.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2361 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activities.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.activities.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cornellsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cse.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.desotoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dhs.desotoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dms.desotoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dss.desotoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ecc.desotoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.el.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.elementary.troupisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.es.cornellsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ev.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fsc.desotoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.galileogalilei.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.galtadultschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ghs.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gms.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.high.troupisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hs.cornellsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ideapcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jrsr.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.k8.pickettk12.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.markedtreeschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mes.desotoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.middle.troupisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.msms.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nes.desotoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.oc-sd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pchs.pickettk12.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pickettk12.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ps52si.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ram.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ranchitoavees.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stmarysspokane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.troupisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.up.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wearelibertyranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wes.desotoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.youngsvilleacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cse.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desotoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhs.desotoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dms.desotoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dss.desotoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecc.desotoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'el.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.cornell.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.cornellsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ev.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsc.desotoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galileogalilei.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghs.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gms.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.cornell.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.cornellsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jrsr.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k8.pickettk12.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mes.desotoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msms.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nes.desotoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oc-sd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parish.stmarysspokane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parish.stmarysspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pchs.pickettk12.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps52si.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ram.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranchitoavees.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.stmarysspokane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.stmarysspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysspokane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'up.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wes.desotoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.admin.grupograven.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athlosreno.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bpsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornell.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornellsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.desotoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.galileogalilei.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.galtadultschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gatewayk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grupograven.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ideapcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.markedtreeschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oc-sd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.overtoncountyschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pickettk12.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps52si.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ranchitoavees.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysspokane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.troupisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wearelibertyranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youngsvilleacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youngsvilleacademy.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016fdc7e171a000004030047304502202d83724fb2161b31197d5ba9757b1a4f64c5e552897111864e6dfbb6e2b22ac7022100bb2348cd75f230708d03d8f42d7698881f8dfb64877c3c6aef59647bcc8b0dc5007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fdc7e17330000040300473045022100aa25c8948d3e92e323600642e0a3a09cb726b2eb5ba957f2924f8537715eedaf02201605a3a31a9b4c5d2967dae6692fce5f7c08a76041767055a7cc28353d0721b9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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