admin.arcataafterschool.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a0:57:ed:68:ad:45:6e:5a:d9:87:de:bc:e9:00:55:0b:b9 was issued on by Let's Encrypt.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.arcataafterschool.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a0:57:ed:68:ad:45:6e:5a:d9:87:de:bc:e9:00:55:0b:b9
Serial Number (int): 315898912035718213300387230944315691043769
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 06:02:cb:2f:10:11:f8:9b:d5:81:1a:b8:0f:31:62:9e:e5:f4:ff:b5
Fingerprint (sha256): c6:8e:f5:66:3e:33:15:8f:50:fd:45:87:89:ac:8b:da:53:85:ab:a7:42:66:25:e6:e1:3a:06:df:7d:47:35:e0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate admin.arcataafterschool.org

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.arcataafterschool.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.arcataafterschool.org
admin.centennial.nsd131.org
admin.central.nsd131.org
admin.columbiahigh.nsd131.org
admin.eastvalley.nsd131.org
admin.endeavor.nsd131.org
admin.gateways.nsd131.org
admin.greenhurst.nsd131.org
admin.hahntownschool.norwinsd.org
admin.highschool.norwinsd.org
admin.hillcrestschool.norwinsd.org
admin.icat.nsd131.org
admin.iowa.nsd131.org
admin.isp.edu.pa
admin.josefita.org
admin.lakeridge.nsd131.org
admin.lonestar.nsd131.org
admin.middleschool.norwinsd.org
admin.nampahigh.nsd131.org
admin.newhorizons.nsd131.org
admin.norwinsd.org
admin.nsd131.org
admin.owyhee.nsd131.org
admin.parkridge.nsd131.org
admin.preschool.nsd131.org
admin.reagan.nsd131.org
admin.roosevelt.nsd131.org
admin.sheridanterrace.norwinsd.org
admin.sherman.nsd131.org
admin.skyviewhigh.nsd131.org
admin.snakeriver.nsd131.org
admin.south.nsd131.org
admin.stewartsvilleschool.norwinsd.org
admin.sunsetvalley.norwinsd.org
admin.tvla.nsd131.org
admin.west.nsd131.org
admin.willowcreek.nsd131.org
arcataafterschool.org
beavercreek.k12.oh.us
beavercreekschools.org
centennial.nsd131.org
central.nsd131.org
columbiahigh.nsd131.org
cte.nsd131.org
eastvalley.nsd131.org
endeavor.nsd131.org
gateways.nsd131.org
greenhurst.nsd131.org
hahntownschool.norwinsd.org
highschool.norwinsd.org
hillcrestschool.norwinsd.org
icat.nsd131.org
iowa.nsd131.org
isp.edu.pa
jmspr.org
josefita.org
lakeridge.nsd131.org
lonestar.nsd131.org
middleschool.norwinsd.org
nampahigh.nsd131.org
newhorizons.nsd131.org
norwinsd.org
nsd131.org
owyhee.nsd131.org
parkridge.nsd131.org
preschool.nsd131.org
reagan.nsd131.org
roosevelt.nsd131.org
sheridanterrace.norwinsd.org
sherman.nsd131.org
skyviewhigh.nsd131.org
snakeriver.nsd131.org
south.nsd131.org
stewartsvilleschool.norwinsd.org
sunsetvalley.norwinsd.org
tvla.nsd131.org
west.nsd131.org
willowcreek.nsd131.org
www.arcataafterschool.org
www.beavercreek.k12.oh.us
www.beavercreekschools.org
www.isp.edu.pa
www.jmspr.org
www.josefita.org
www.norwinsd.org
www.nsd131.org

Other certificates including the domain name arcataafterschool.org

(limited to 100 certificates)
admin.arcataafterschool.org
arcataafterschool.org
chs.somerset.k12.md.us
arcataafterschool.org
arcataafterschool.org
cristoreytc.org
cte.nsd131.org
admin.hahntownschool.norwinsd.org
arcataafterschool.org
arcataafterschool.org
admin.arcataafterschool.org
admin.arcataafterschool.org
jmspr.org
admin.arcataafterschool.org
arcataafterschool.org
arcataafterschool.org
admin.arcataafterschool.org
beavercreek.k12.oh.us
admin.arcataafterschool.org
arcataafterschool.org
admin.josefita.org
admin.arcataafterschool.org
scths.somerset.k12.md.us

Certificate

The complete raw certificate details for admin.arcataafterschool.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQbTHb+2z7
rfYVCl+ph5m8FJJOEgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5pV3R4RBg
n18RTHnTD9fS27JxyeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGrmQF3Z/h2
e6StagubO+pVwFzG8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK7wAhJO8e
l2z375LDd2VIwrdWQP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlWZ1AdjOKf
RiY0ckFuu/DYkuvkNKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5Tu7zbek/
MR/JMR9nceWyZ2Mund+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzwWzBvTD8F
7q6ckUbIgpeo7stn7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuaivjW/P+Tm
64XjXNjP9F1W8+5tlcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ4Iudx/o3
Q4E2w6Aud9PYyV05pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/h0omUmCI
DiQVG30eHhb3OIP3bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUnohkUi6ik
D4me6o58sq/IQVmyem1M/E0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315898912035718213300387230944315691043769
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-14 09:42:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-13 09:42:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.arcataafterschool.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2071 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.arcataafterschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.centennial.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.central.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.columbiahigh.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eastvalley.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.endeavor.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gateways.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.greenhurst.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hahntownschool.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.highschool.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hillcrestschool.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.icat.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.iowa.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.isp.edu.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.josefita.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lakeridge.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lonestar.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.middleschool.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nampahigh.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.newhorizons.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.owyhee.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.parkridge.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.preschool.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.reagan.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.roosevelt.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sheridanterrace.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sherman.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.skyviewhigh.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.snakeriver.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.south.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stewartsvilleschool.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sunsetvalley.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tvla.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.west.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.willowcreek.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcataafterschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beavercreek.k12.oh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beavercreekschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centennial.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'central.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiahigh.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cte.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastvalley.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endeavor.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateways.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenhurst.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hahntownschool.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highschool.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillcrestschool.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icat.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowa.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isp.edu.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jmspr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'josefita.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakeridge.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lonestar.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'middleschool.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nampahigh.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newhorizons.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owyhee.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkridge.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preschool.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reagan.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roosevelt.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sheridanterrace.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sherman.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skyviewhigh.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snakeriver.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'south.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stewartsvilleschool.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunsetvalley.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvla.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'west.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willowcreek.nsd131.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arcataafterschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beavercreek.k12.oh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beavercreekschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isp.edu.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jmspr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.josefita.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nsd131.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d2f5df43f0000040300473045022100cea9544854b1fe145ef3977161feceb2a3740630c61e50243454744c5e3d843b022015edb9c41bf092f1405613004f39dd48fd6b886d22f7d4fbaa121aef1d81504d007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d2f5df4600000040300483046022100d423332f9b3ad64413971d0cdc6cda578d89e03d40126f3d9e07af356da44a43022100a7fdbe7652ef44f82cc7836698a3a66d00b8f5e41e1d8c8964b1ff84d4352cfc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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