stmmsa.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b7:33:b1:08:75:c2:36:f7:2e:60:3d:28:a6:ef:c7:36:3e was issued on by Let's Encrypt.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stmmsa.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b7:33:b1:08:75:c2:36:f7:2e:60:3d:28:a6:ef:c7:36:3e
Serial Number (int): 323677240777730548512239492988758512842302
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fa:13:16:e3:fb:e6:fa:d1:fc:e7:b6:ec:e7:b4:14:dc:79:e7:be:c4
Fingerprint (sha256): c7:89:f4:02:b1:7e:d1:44:32:d4:fb:51:b6:17:71:53:6e:c0:c8:49:cd:f6:51:df:09:e7:cc:7e:00:d9:24:50

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate stmmsa.org

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stmmsa.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.bayhaven.org
admin.broadstreet.mbgsd.org
admin.dishchiibikoh.org
admin.elmwood.mbgsd.org
admin.garyisd.org
admin.hydeparkms.org
admin.judgememorial.com
admin.middleschool.mbgsd.org
admin.n6-12.bayhaven.org
admin.nk5.bayhaven.org
admin.northside.mbgsd.org
admin.panoramaschools.org
admin.sbusdalted.org
admin.shepherdstown.mbgsd.org
admin.summitprep.org
admin.upperallen.mbgsd.org
admin.walkerjonescampus.org
aes.bartlettschools.org
ams.bartlettschools.org
ba.bartlettschools.org
bes.bartlettschools.org
bhs.bartlettschools.org
bles.bartlettschools.org
blms.bartlettschools.org
bobtown.segsd.org
brentwood.mead354.org
chs.somerset.k12.md.us
cibecuecommunityschool.com
colbert.mead354.org
dis.somerset.k12.md.us
dishchiibikoh.org
ees.bartlettschools.org
ees.somerset.k12.md.us
epms.bartlettschools.org
es.anahuacisd.net
evergreen.mead354.org
farwell.mead354.org
fivemileprairie.mead354.org
garyisd.org
ges.somerset.k12.md.us
highschool.mbgsd.org
hs.anahuacisd.net
hydeparkms.org
jmt.somerset.k12.md.us
judgememorial.com
k8.bayhaven.org
mapletown.segsd.org
meadalt.mead354.org
meadhs.mead354.org
meadowridge.mead354.org
midway.mead354.org
mms.winnsboroisd.org
mountainsidems.mead354.org
ms.anahuacisd.net
msp.somerset.k12.md.us
mtspokanehs.mead354.org
n6-12.bayhaven.org
nk5.bayhaven.org
northside.mbgsd.org
northstar.mead354.org
northwoodms.mead354.org
oes.bartlettschools.org
panoramaschools.org
pes.somerset.k12.md.us
prairieview.mead354.org
res.bartlettschools.org
riverpoint.mead354.org
sbusdalted.org
shepherdstown.mbgsd.org
shilohhills.mead354.org
sis.somerset.k12.md.us
stmmsa.org
summitprep.org
upperallen.mbgsd.org
wes.somerset.k12.md.us
wes.winnsboroisd.org
whs.somerset.k12.md.us
whs.winnsboroisd.org
www.bayhaven.org
www.cibecuecommunityschool.com
www.dishchiibikoh.org
www.garyisd.org
www.gulfstreamschool.org
www.hydeparkms.org
www.judgememorial.com
www.mead354.org
www.notredameschool.cc
www.panorama.k12.ia.us
www.panoramaschools.org
www.sbusdalted.org
www.somerset.k12.md.us
www.stmmsa.org
www.summitprep.org
www.walkerjonescampus.org
www.winnsboroisd.org

Other certificates including the domain name stmmsa.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for stmmsa.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323677240777730548512239492988758512842302
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-10 01:05:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-09 01:05:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stmmsa.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2176 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bayhaven.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.broadstreet.mbgsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dishchiibikoh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.elmwood.mbgsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.garyisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hydeparkms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.judgememorial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.middleschool.mbgsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.n6-12.bayhaven.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nk5.bayhaven.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.northside.mbgsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.panoramaschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sbusdalted.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.shepherdstown.mbgsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.summitprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.upperallen.mbgsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.walkerjonescampus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aes.bartlettschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ams.bartlettschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ba.bartlettschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bes.bartlettschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhs.bartlettschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bles.bartlettschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blms.bartlettschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobtown.segsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brentwood.mead354.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chs.somerset.k12.md.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cibecuecommunityschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colbert.mead354.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dis.somerset.k12.md.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dishchiibikoh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ees.bartlettschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ees.somerset.k12.md.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epms.bartlettschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.anahuacisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evergreen.mead354.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farwell.mead354.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fivemileprairie.mead354.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garyisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ges.somerset.k12.md.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highschool.mbgsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.anahuacisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hydeparkms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jmt.somerset.k12.md.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'judgememorial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k8.bayhaven.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapletown.segsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meadalt.mead354.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meadhs.mead354.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meadowridge.mead354.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midway.mead354.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.winnsboroisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountainsidems.mead354.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.anahuacisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msp.somerset.k12.md.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtspokanehs.mead354.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'n6-12.bayhaven.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nk5.bayhaven.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northside.mbgsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northstar.mead354.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northwoodms.mead354.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oes.bartlettschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panoramaschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pes.somerset.k12.md.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prairieview.mead354.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'res.bartlettschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riverpoint.mead354.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbusdalted.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shepherdstown.mbgsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shilohhills.mead354.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sis.somerset.k12.md.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmmsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summitprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upperallen.mbgsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wes.somerset.k12.md.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wes.winnsboroisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whs.somerset.k12.md.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whs.winnsboroisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayhaven.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cibecuecommunityschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dishchiibikoh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garyisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gulfstreamschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hydeparkms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.judgememorial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mead354.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notredameschool.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.panorama.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.panoramaschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sbusdalted.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.somerset.k12.md.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmmsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.summitprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walkerjonescampus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.winnsboroisd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d18eb5b610000040300483046022100b306b2131c6b54701bf4fe72c7dbded87aecdac392183bbbc42e73cc11d2f5b1022100892858322319002a21a74979759cddebbe10692ae8bb917313a93d8292bd91d900750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d18eb5b5900000403004630440220558d1c7df326a7f084a373957c835902a020bda63011581e128a874af57b84d00220112faf91c182b24a1b78554b5043fb300125b3cbc4c0c1e72aa8fd35bcc825ed
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000682ba2eeb7517954e214b5f72e3489a7b20680d277d9992f56b1f4f73a0ccc3e9c0cd1f977b195436116f8764d1ecb403821a3aaa575b5da83cae9d106f29f8b68f2aae47e0007d9d6fd4318f66e288bf6c74564501a82ed632d2717c15c5ddfc79123c63d364e4d2197a7f436bca9802488033d8673f0d98d2ab71d36a32a985d8521f95ec237d57569b8887291e9bf85eb063e584341dcb2a9259417b9323cfc60c98e46330744d75bb5009918a7b2226d54fb70ea32747ef95f14cd145c6d2f5a7c58280cb802fec43420d6e4451a4b353fb49abf1a99bf268a7c9fbf3bbaff96dff13a41559f6068009d82e662767d699eec08bd646713bc593a836e3a8