pal.ldcsb.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1a:cf:62:d9:d1:23:77:9f:09:e0:1e:79:ee:4c:22:26:8a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pal.ldcsb.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1a:cf:62:d9:d1:23:77:9f:09:e0:1e:79:ee:4c:22:26:8a
Serial Number (int): 270459862793297300535166573075138785453706
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3b:44:c1:e2:f8:ba:a1:d4:14:4f:22:c6:a6:df:dd:5b:e2:62:ae:2a
Fingerprint (sha256): c8:ff:c2:c9:9a:f7:87:7c:b8:5c:12:e2:86:58:85:b7:0d:64:50:c1:b3:26:d5:c8:b0:f5:b5:c5:7e:c9:36:cc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate pal.ldcsb.ca

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pal.ldcsb.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.calmecaacademy.com
admin.cathedralschoolny.org
admin.cornelius.fgsdk12.org
admin.csd300.org
admin.dilley.fgsdk12.org
admin.dimensions.org
admin.echoshaw.fgsdk12.org
admin.edtechteam.mx
admin.fernhill.fgsdk12.org
admin.fghs.fgsdk12.org
admin.fgsdk12.org
admin.garvanzaelementary.org
admin.hamlincharter.org
admin.harveyclarke.fgsdk12.org
admin.highschool.mcasd.net
admin.husd4.org
admin.josephgale.fgsdk12.org
admin.kauffmanschool.org
admin.kaumanaelementary.org
admin.mcasd.net
admin.mccreery.mcasd.net
admin.missionprep.org
admin.nams.fgsdk12.org
admin.oga.fgsdk12.org
admin.omardblaircharterschool.com
admin.phillyscholars.org
admin.rayne.mcasd.net
admin.ryderschool.org
admin.sendicaeducation.com
admin.siths.org
admin.tommcall.fgsdk12.org
ann.ldcsb.ca
ans.ldcsb.ca
ant.ldcsb.ca
calmecaacademy.com
cathedralschoolny.org
cornelius.fgsdk12.org
crt.ldcsb.ca
csd300.org
ddiny.org
dilley.fgsdk12.org
dimensions.org
echoshaw.fgsdk12.org
edtechteam.mx
faw.ldcsb.ca
fernhill.fgsdk12.org
fghs.fgsdk12.org
fgsdk12.org
garvanzaelementary.org
hamlincharter.org
harveyclarke.fgsdk12.org
hcc.ldcsb.ca
highschool.mcasd.net
husd4.org
imm.ldcsb.ca
josephgale.fgsdk12.org
jp2.ldcsb.ca
kauffmanschool.org
kaumanaelementary.org
mcasd.net
mccreery.mcasd.net
missionprep.org
miw.ldcsb.ca
mor.ldcsb.ca
mts.ldcsb.ca
nams.fgsdk12.org
northregionselpa.org
oga.fgsdk12.org
omardblaircharterschool.com
one.ldcsb.ca
pal.ldcsb.ca
phillyscholars.org
rayne.mcasd.net
rmc.ldcsb.ca
ryderschool.org
sab.ldcsb.ca
siths.org
tommcall.fgsdk12.org
van.ldcsb.ca
web.sendicaeducation.com
www.calmecaacademy.com
www.cathedralschoolny.org
www.csd300.org
www.ddiny.org
www.dimensions.org
www.edtechteam.mx
www.faithmarietta.org
www.fgsdk12.org
www.garvanzaelementary.org
www.hamlincharter.org
www.husd4.org
www.kauffmanschool.org
www.kaumanaelementary.org
www.mcasd.net
www.missionprep.org
www.omardblaircharterschool.com
www.phillyscholars.org
www.ryderschool.org
www.siths.org
www.sunrisewaldorfschool.org

Other certificates including the domain name ldcsb.ca

(limited to 100 certificates)
manage.ldcsb.ca
dam.ldcsb.ca
ecm.ldcsb.ca
admin.athletics.godleyisd.net
ldcsb.ca
dam.ldcsb.ca
*.ldcsb.ca
admin.blandfordschool.org
dam.ldcsb.ca
smh.ldcsb.ca
hcc.ldcsb.ca
fhclergue.adsb.on.ca
mil.ldcsb.ca
3rcs.org
admin.athletics.godleyisd.net
ldcsb.ca
admin.ccscyclones.com
rmc.ldcsb.ca
rmc.ldcsb.ca
sprp.ldcsb.ca
one.ldcsb.ca
www.ldcsb.ca
jui.ldcsb.ca
mrk.ldcsb.ca
occomets.org
admin.ahs.ausd.net
admin.highschool.bfcsd.org
admin.ahs.ausd.net
3rcs.org
ros.ldcsb.ca
www.everettpublicschools.org
pal.ldcsb.ca
sta.ldcsb.ca
asu.ldcsb.ca
cfll.ldcsb.ca
rmc.ldcsb.ca
sjh.ldcsb.ca
pll.ldcsb.ca
ldcsb.ca
sip.mt07.connector.think365.com
ess.ldcsb.ca
ann.ldcsb.ca
admin.ahs.ausd.net
pll.ldcsb.ca
sip.mt07.connector.think365.com
piu.ldcsb.ca
ldcsb.ca
geo.ldcsb.ca
imm.ldcsb.ca
jp2.ldcsb.ca
admin.athletics.godleyisd.net
geo.ldcsb.ca
www.asd.k12.pa.us
admin.blandfordschool.org
cfll.ldcsb.ca
jp2.ldcsb.ca
ps25.jcboe.org
ros.ldcsb.ca
mrg.ldcsb.ca
admin.nyos.org
ecm.ldcsb.ca
fa.ausd.net
ldcsb.ca
mor.ldcsb.ca
jti.ldcsb.ca
sip.mt07.connector.think365.com
nic.ldcsb.ca
sab.ldcsb.ca
admin.ahs.ausd.net
mts.ldcsb.ca
*.ldcsb.ca
ess.ldcsb.ca
admin.athletics.godleyisd.net
mwl.ldcsb.ca
ann.ldcsb.ca
ps26.jcboe.org
ldcsb.ca
cfll.ldcsb.ca
ldcsb.ca
mwl.ldcsb.ca
sprp.ldcsb.ca
auroraweb.ldcsb.ca
fal.ldcsb.ca
admin.ahs.ausd.net
mts.ldcsb.ca
geo.ldcsb.ca
vin.ldcsb.ca
sta.ldcsb.ca
sip.mt07.connector.think365.com
van.ldcsb.ca
admin.adams.everettpublicschools.org
admin.ccscyclones.com
smh.ldcsb.ca
ant.ldcsb.ca
sunsystems.ldcsb.ca
nic.ldcsb.ca
pac.ldcsb.ca
mrt.ldcsb.ca
seb.ldcsb.ca
asu.ldcsb.ca

Certificate

The complete raw certificate details for pal.ldcsb.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270459862793297300535166573075138785453706
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-21 01:54:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-20 01:54:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pal.ldcsb.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2076 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.calmecaacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cathedralschoolny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cornelius.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.csd300.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dilley.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dimensions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.echoshaw.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.edtechteam.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fernhill.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fghs.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.garvanzaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hamlincharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.harveyclarke.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.highschool.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.husd4.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.josephgale.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kauffmanschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kaumanaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mccreery.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.missionprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nams.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.oga.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.omardblaircharterschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.phillyscholars.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rayne.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ryderschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sendicaeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.siths.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tommcall.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ann.ldcsb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ans.ldcsb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ant.ldcsb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calmecaacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cathedralschoolny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornelius.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crt.ldcsb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csd300.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ddiny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dilley.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dimensions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echoshaw.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edtechteam.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faw.ldcsb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fernhill.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fghs.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garvanzaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamlincharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harveyclarke.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcc.ldcsb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highschool.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'husd4.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imm.ldcsb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'josephgale.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jp2.ldcsb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kauffmanschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaumanaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mccreery.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missionprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miw.ldcsb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mor.ldcsb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mts.ldcsb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nams.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northregionselpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oga.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omardblaircharterschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'one.ldcsb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pal.ldcsb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phillyscholars.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rayne.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmc.ldcsb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryderschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sab.ldcsb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siths.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tommcall.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'van.ldcsb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.sendicaeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.calmecaacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cathedralschoolny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csd300.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ddiny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dimensions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edtechteam.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faithmarietta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fgsdk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garvanzaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hamlincharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.husd4.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kauffmanschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaumanaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcasd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missionprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omardblaircharterschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phillyscholars.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ryderschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.siths.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunrisewaldorfschool.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d51be0559000004030047304502200fe0e727a3e1092e03f1f9533b4f0268b81062d0c2dc514b7f25cf09ab051e2a022100bd1c965a619bdb0783cbf9c85453fa55cc0ca883b55ebc0ae36e1d324c9427ea007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d51be05450000040300473045022100bf9329f32c9786badd7766b279fe6a102b04565d7bd99d8ac181539a5e2a61f60220787b88250d6ea658799a0a920474e615860b9e5c993936c41bf06ea1c76ebed7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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