portal.lafmty.edu.mx

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ff:ab:c2:0d:5f:f1:49:3d:5b:58:79:d0:a1:e2:b5:b2:7e was issued on by Let's Encrypt.

With 79 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=portal.lafmty.edu.mx

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ff:ab:c2:0d:5f:f1:49:3d:5b:58:79:d0:a1:e2:b5:b2:7e
Serial Number (int): 348337166924262499208886697460385214476926
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 39:2f:47:d0:c1:f4:67:50:f9:06:ac:d1:57:a8:0f:46:d7:36:17:2d
Fingerprint (sha256): cb:eb:82:78:9d:a3:b3:aa:0c:8f:0d:c3:0b:8e:29:85:3a:f9:92:49:38:e8:e2:5c:fa:d5:26:b4:52:07:ff:1b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate portal.lafmty.edu.mx

79

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.lafmty.edu.mx

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin-portal.lafmty.edu.mx
admin.ambassadorhigh.org
admin.athletics.ambassadorhigh.org
admin.athlosdenton.org
admin.beckleyes.org
admin.capetrinitycatholic.org
admin.catholicpc.com
admin.cottonwoodclassical.org
admin.es.losthills.k12.ca.us
admin.es.victoriaschool.edu.mx
admin.losamigoshs.com
admin.losthills.k12.ca.us
admin.maryhelp.org
admin.ms.losthills.k12.ca.us
admin.paauiloschool.org
admin.saintjosephregional.org
admin.sjlcpa.org
admin.sjlvla.org
admin.sjrcla.org
admin.theglobeacademy.org
admin.victoriaschool.edu.mx
admin.waiakeawaena-elementary.com
ambassadorhigh.org
ambassadorhighschool.org
athletics.ambassadorhigh.org
beckleyes.org
capetrinitycatholic.com
capetrinitycatholic.net
capetrinitycatholic.org
catholicpc.com
cgw.hopewell.k12.va.us
copeland.hopewell.k12.va.us
cottonwoodclassical.org
dupont.hopewell.k12.va.us
es.losthills.k12.ca.us
es.victoriaschool.edu.mx
hej.hopewell.k12.va.us
hhs.hopewell.k12.va.us
losamigoshs.com
ms.losthills.k12.ca.us
newlacharter.org
newlaelementary.org
paauiloschool.org
portal.lafmty.edu.mx
saintjosephregional.org
sjlcpa.org
sjlvla.org
sjrcla.org
theglobeacademy.org
usd458.com
victoriaschool.edu.mx
waiakeawaena-elementary.com
wlc.hopewell.k12.va.us
www.ambassadorhigh.org
www.ambassadorhighschool.org
www.athlosdenton.org
www.beckleyes.org
www.capetrinitycatholic.com
www.capetrinitycatholic.net
www.capetrinitycatholic.org
www.catholicpc.com
www.cottonwoodclassical.org
www.csec914.org
www.hopewell.k12.va.us
www.kempisd.org
www.losamigoshs.com
www.losthills.k12.ca.us
www.maryhelp.org
www.newlaelementary.org
www.newlosangeles.org
www.paauiloschool.org
www.saintjosephregional.org
www.sjlcpa.org
www.sjlvla.org
www.sjrcla.org
www.theglobeacademy.org
www.usd458.com
www.victoriaschool.edu.mx
www.waiakeawaena-elementary.com

Other certificates including the domain name lafmty.edu.mx

(limited to 100 certificates)
admin-portal.lafmty.edu.mx
www.hardesty.k12.ok.us
admin-portal.lafmty.edu.mx
admin-portal.lafmty.edu.mx
aes.sd70.bc.ca
admin-portal.lafmty.edu.mx
www.aspenridgeprepschool.org
admin-portal.lafmty.edu.mx
admin-portal.lafmty.edu.mx
admin-portal.lafmty.edu.mx
portal.lafmty.edu.mx
admin-portal.lafmty.edu.mx
www.enterprisecharter.org
admin-portal.lafmty.edu.mx

Certificate

The complete raw certificate details for portal.lafmty.edu.mx in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 348337166924262499208886697460385214476926
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-31 01:00:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-29 01:00:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.lafmty.edu.mx'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1864 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-portal.lafmty.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ambassadorhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.athletics.ambassadorhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.athlosdenton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.beckleyes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.capetrinitycatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.catholicpc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cottonwoodclassical.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.es.losthills.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.es.victoriaschool.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.losamigoshs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.losthills.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.maryhelp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ms.losthills.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.paauiloschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.saintjosephregional.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sjlcpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sjlvla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sjrcla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.theglobeacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.victoriaschool.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.waiakeawaena-elementary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ambassadorhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ambassadorhighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athletics.ambassadorhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beckleyes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capetrinitycatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capetrinitycatholic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capetrinitycatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicpc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cgw.hopewell.k12.va.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copeland.hopewell.k12.va.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cottonwoodclassical.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dupont.hopewell.k12.va.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.losthills.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.victoriaschool.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hej.hopewell.k12.va.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhs.hopewell.k12.va.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losamigoshs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.losthills.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newlacharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newlaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paauiloschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.lafmty.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintjosephregional.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjlcpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjlvla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjrcla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theglobeacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usd458.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victoriaschool.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waiakeawaena-elementary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wlc.hopewell.k12.va.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ambassadorhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ambassadorhighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athlosdenton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beckleyes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capetrinitycatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capetrinitycatholic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capetrinitycatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicpc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cottonwoodclassical.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csec914.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hopewell.k12.va.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kempisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.losamigoshs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.losthills.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maryhelp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newlaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newlosangeles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paauiloschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintjosephregional.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjlcpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjlvla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjrcla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theglobeacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usd458.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.victoriaschool.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waiakeawaena-elementary.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016ce566f6f3000004030048304602210092db7ccfd80ee560d89723c7c67bb894df95f4025b7648159883f07a21154ed2022100fa4efea41975f604282d9573670d79691fb5a0f6eef2e3bb5de42f4e31b1b008007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ce566f90700000403004730450221009e8a2c94d63f45fdeea674bd43820e3e20d7250924b2fa644f336fc351ce8daf022016d6d32d6df64991278266cb20c4d57e5441c6e188e07d2c8779732fb4180b06
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00377d35a7aee3d5313e64ea11785af3268c0d8b96f7c4ae7b4ef74d18a8abe0055966960a3957d9bc74e232d8375888404317c66f86eb2b8e100e2a6bb809710d281b4afa11b4d51f297633907cc6599a39251c60b01d4eba034f501ec5f0b870c0fa8fc27377e18d94c92511a67d60dd5699f7143b8c06c2a3bbe3d10166f6837bee37fe4131354125f1ed20e864b171409dba207ad4f0a5c9a426d30a021c07de289dd3a6c59b49a33842aed652bcbf18dcf1e26913249790c5f630e4217fda412e96ca930be594e9538ef48322c832c461fae0eb15265baab1ba819321d96a8cf04bd2467256ee65807346269b14cd3a1468fc361635354a8428dec40e5196