ctc.dover.k12.nh.us

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:93:96:af:f7:05:b6:cf:9e:ef:1e:ec:d6:6b:d7:c3:3d:fd was issued on by Let's Encrypt.

With 45 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ctc.dover.k12.nh.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:93:96:af:f7:05:b6:cf:9e:ef:1e:ec:d6:6b:d7:c3:3d:fd
Serial Number (int): 311558663594184565229269295648348278308349
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): db:57:93:54:f9:4f:10:6f:9a:46:75:0a:33:4c:d6:45:a0:3c:84:aa
Fingerprint (sha256): cc:74:92:b3:b6:2f:4b:4a:fd:1c:03:8b:ed:24:8b:c1:44:79:a7:77:78:64:18:07:b3:e4:6d:6d:85:3b:c1:8b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ctc.dover.k12.nh.us

45

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ctc.dover.k12.nh.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.atc.mayfield.kyschools.us
admin.blhs.lex3.org
admin.cecvac.com
admin.edison.westfieldnjk12.org
admin.es.hoganprep.net
admin.franklin.westfieldnjk12.org
admin.hoganprep.net
admin.hs.hoganprep.net
admin.hsap.mtpcsd.org
admin.jacksoncoschools.com
admin.jcms.jacksoncoschools.com
admin.jefferson.westfieldnjk12.org
admin.jhs.ballingerisd.net
admin.lincoln.westfieldnjk12.org
admin.mayfield.kyschools.us
admin.mckinley.westfieldnjk12.org
admin.ms.hoganprep.net
admin.pac.sboe.org
admin.rapk3.richardallenschools.com
admin.roosevelt.westfieldnjk12.org
admin.saintpiusx.com
admin.tamaques.westfieldnjk12.org
admin.washington.westfieldnjk12.org
admin.whs.westfieldnjk12.org
admin.wilson.westfieldnjk12.org
cecvac.com
cse.cscisd.net
cshs.cscisd.net
ctc.dover.k12.nh.us
dbs.jacksoncoschools.com
dover.k12.nh.us
edison.westfieldnjk12.org
es.hoganprep.net
fmis.anacondaschools.org
ges.dover.k12.nh.us
ges.jacksoncoschools.com
hs.hoganprep.net
jacksoncoschools.com
lwa-arts.org
ms.hoganprep.net
rapk3.richardallenschools.com
roosevelt.westfieldnjk12.org
www.dover.k12.nh.us
www.olneycharter.org
www.tuffree.org

Other certificates including the domain name dover.k12.nh.us

(limited to 100 certificates)
athletics.godleyisd.net
acsa17.com
admin.agl.sbcisd.net
admin.dover.k12.nh.us
dkies.org
bce.slvusd.org
admin.bellamy.dover.k12.nh.us
jacksoncoschools.com
ges.dover.k12.nh.us
www.goodshepherdschool.us
sacredheartacademyhempstead.org
webadmin.br.elanco.org
admin.dekalbbands.com
www.leavittms.net
www.parrottacademy.org
cp.athenscityschools.net
admin.proctor.cv.k12.ca.us
jacksoncoschools.com
ylms.org
admin.crps.coltsneckschools.org
admin.union.kyschools.us
admin.marquettecatholic.org
admin.lisanorth.lisaacademy.org
gradebooks.dover.k12.nh.us
admin.rowlettacademy.org
www.dms.dover.k12.nh.us
ctc.dover.k12.nh.us
www.dhs.dover.k12.nh.us
mtpcsd.org
www.collegeachievecentral.org
www.hirschhs.org
firstodessaacademy.com
admin.collegeachievecentral.org
admin.chabot.cv.k12.ca.us
www.panoramacityelementary.org
www.rowlettacademy.org
mail.dover.k12.nh.us
admin.uachs.org
admin.ahs.alcoaschools.net
admin.dover.k12.nh.us
gradebooks.dover.k12.nh.us
admin.wps.dover.k12.nh.us
chs.comalisd.org
www.ellwood.k12.pa.us
admin.magnoliaheights.com
dms.dover.k12.nh.us
cses.comalisd.org
gradebooks.dover.k12.nh.us
anacondaschools.org
admin.fuesd.org
camden.cuhsd.org
admin.independent.cv.k12.ca.us
www.junctioncity.k12.or.us
tpes.comalisd.org
www.btaallday.org
mail.dover.k12.nh.us
mes150.org
gradebooks.dover.k12.nh.us
admin.gctech.edu
gradebooks.dover.k12.nh.us
admin.bhs.ballingerisd.net
admin.jchs.jacksoncoschools.com
harlanfalcons.org
dover.k12.nh.us
admin.dkies.org
admin.evanshs.ccboe.net
admin.decaturclassical.org
www.lisaacademy.org
admin.creekside.cv.k12.ca.us
admin.todd.kyschools.us
admin.cvlcc.org
canyon.cv.k12.ca.us
admin.compton.bcsd.com
cdc.inglewoodusd.com
mvms.comalisd.org
*.dover.k12.nh.us
raak6.richardallenschools.com
admin.dms.dover.k12.nh.us
admin.hills.bcsd.com
tbjelc.henderson.kyschools.us
ebjshs.ebps.net
gradebooks.dover.k12.nh.us
admin.cdms.coltsneckschools.org
www.anacondaschools.org
admin.dover.k12.nh.us
www.crsd.k12.pa.us
www.glendorahigh.net
webadmin.nh.elanco.org
admin.bellamy.dover.k12.nh.us
www.dkies.org
admin.wps.dover.k12.nh.us
www.leavittms.net
admin.bce.slvusd.org
mountalverniaacademy.com
cumbresbogota.edu.co
acsa17.com
www.jonescollegeprep.org
www.bce.slvusd.org
admin.jcles.org
mhs.mayfield.kyschools.us

Certificate

The complete raw certificate details for ctc.dover.k12.nh.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311558663594184565229269295648348278308349
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-30 10:54:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-30 10:54:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ctc.dover.k12.nh.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1153 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.atc.mayfield.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.blhs.lex3.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cecvac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.edison.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.es.hoganprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.franklin.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hoganprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hs.hoganprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hsap.mtpcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jacksoncoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jcms.jacksoncoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jefferson.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jhs.ballingerisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lincoln.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mayfield.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mckinley.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ms.hoganprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pac.sboe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rapk3.richardallenschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.roosevelt.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.saintpiusx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tamaques.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.washington.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.whs.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wilson.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cecvac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cse.cscisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cshs.cscisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctc.dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbs.jacksoncoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edison.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.hoganprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmis.anacondaschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ges.dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ges.jacksoncoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.hoganprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacksoncoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lwa-arts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.hoganprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapk3.richardallenschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roosevelt.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olneycharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuffree.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001689e9c688c0000040300463044022042433cb79db62271a8944401565933320fffc04b608fdd35c2251c80d588725a022027bfcd0a87629cde610d94a0d9e691e503bb890868a2f3dc9195be21a0a8f0ff007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001689e9c669400000403004730450220612694d5093946d37cb269afdba4d97affbd1ee7ccf8fda14f84993ef1d49583022100cfb583e38ca7d3fe665b2957670bb35915c2f3958eef1b7cc8f5d17713ddb59a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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