orchardviewschool.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:af:eb:64:28:82:d7:6e:0f:cc:7c:24:f9:a9:f7:09:77:f7 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=orchardviewschool.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:af:eb:64:28:82:d7:6e:0f:cc:7c:24:f9:a9:f7:09:77:f7
Serial Number (int): 321199160636802997365338008744341717743607
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7a:a1:27:5c:d0:25:59:3f:8e:4e:ca:9d:fe:d7:b5:e8:d2:14:87:06
Fingerprint (sha256): ce:3c:88:85:cf:1f:f8:c8:63:15:c8:f8:40:f8:e0:19:0f:f4:dd:4c:a4:72:df:8b:39:a2:16:76:59:fb:b2:5e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate orchardviewschool.org

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for orchardviewschool.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin-wms.slzusd.org
admin.alpinevista.tcsdk8.org
admin.cde.gmcs.k12.nm.us
admin.cherry.tcsdk8.org
admin.cme.gmcs.k12.nm.us
admin.cmm.gmcs.k12.nm.us
admin.cpe.gmcs.k12.nm.us
admin.cph.gmcs.k12.nm.us
admin.cpm.gmcs.k12.nm.us
admin.cypress.tcsdk8.org
admin.dne.gmcs.k12.nm.us
admin.dse.gmcs.k12.nm.us
admin.evanshs.ccboe.net
admin.garden.tcsdk8.org
admin.gch.gmcs.k12.nm.us
admin.gmcs.k12.nm.us
admin.gonzalesusd.net
admin.gph.gmcs.k12.nm.us
admin.gpm.gmcs.k12.nm.us
admin.hahntownschool.norwinsd.org
admin.heritage.tcsdk8.org
admin.highschool.norwinsd.org
admin.hillcrestschool.norwinsd.org
admin.hmh.gmcs.k12.nm.us
admin.hs.godwinschools.org
admin.ihe.gmcs.k12.nm.us
admin.jfe.gmcs.k12.nm.us
admin.kohn.tcsdk8.org
admin.learning-center.godwinschools.org
admin.lincoln.tcsdk8.org
admin.liveoak.tcsdk8.org
admin.lostules.tcsdk8.org
admin.maple.tcsdk8.org
admin.middleschool.norwinsd.org
admin.missionvalley.tcsdk8.org
admin.ms.godwinschools.org
admin.mulcahy.tcsdk8.org
admin.north.godwinschools.org
admin.norwinsd.org
admin.orchardviewschool.org
admin.pleasant.tcsdk8.org
admin.roosevelt.tcsdk8.org
admin.staff.godwinschools.org
admin.stewartsvilleschool.norwinsd.org
admin.sunsetvalley.norwinsd.org
admin.tcsdk8.org
admin.west.godwinschools.org
admin.wilson.tcsdk8.org
alpinevista.tcsdk8.org
cde.gmcs.k12.nm.us
cherry.tcsdk8.org
cme.gmcs.k12.nm.us
cmm.gmcs.k12.nm.us
cpe.gmcs.k12.nm.us
cph.gmcs.k12.nm.us
cpm.gmcs.k12.nm.us
cypress.tcsdk8.org
dne.gmcs.k12.nm.us
dse.gmcs.k12.nm.us
evanshs.ccboe.net
garden.tcsdk8.org
gch.gmcs.k12.nm.us
gph.gmcs.k12.nm.us
gpm.gmcs.k12.nm.us
hahntownschool.norwinsd.org
heritage.tcsdk8.org
highschool.norwinsd.org
hillcrestschool.norwinsd.org
hmh.gmcs.k12.nm.us
hs.godwinschools.org
ihe.gmcs.k12.nm.us
kohn.tcsdk8.org
learning-center.godwinschools.org
lincoln.tcsdk8.org
liveoak.tcsdk8.org
lostules.tcsdk8.org
maple.tcsdk8.org
middleschool.norwinsd.org
missionvalley.tcsdk8.org
ms.godwinschools.org
mulcahy.tcsdk8.org
north.godwinschools.org
norwinsd.org
orchardviewschool.org
pleasant.tcsdk8.org
roosevelt.tcsdk8.org
staff.godwinschools.org
stewartsvilleschool.norwinsd.org
sunsetvalley.norwinsd.org
tcsdk8.org
west.godwinschools.org
wilson.tcsdk8.org
wmms.slzusd.org
wms.slzusd.org
www.gonzalesusd.net
www.norwinsd.org
www.orchardviewschool.org
www.tcsdk8.org

Other certificates including the domain name orchardviewschool.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for orchardviewschool.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321199160636802997365338008744341717743607
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-14 10:50:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-14 10:50:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'orchardviewschool.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2396 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-wms.slzusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.alpinevista.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cde.gmcs.k12.nm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cherry.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cme.gmcs.k12.nm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cmm.gmcs.k12.nm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cpe.gmcs.k12.nm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cph.gmcs.k12.nm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cpm.gmcs.k12.nm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cypress.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dne.gmcs.k12.nm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dse.gmcs.k12.nm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.evanshs.ccboe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.garden.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gch.gmcs.k12.nm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gmcs.k12.nm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gonzalesusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gph.gmcs.k12.nm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gpm.gmcs.k12.nm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hahntownschool.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.heritage.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.highschool.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hillcrestschool.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hmh.gmcs.k12.nm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hs.godwinschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ihe.gmcs.k12.nm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jfe.gmcs.k12.nm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kohn.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.learning-center.godwinschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lincoln.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.liveoak.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lostules.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.maple.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.middleschool.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.missionvalley.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ms.godwinschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mulcahy.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.north.godwinschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.orchardviewschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pleasant.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.roosevelt.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.staff.godwinschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stewartsvilleschool.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sunsetvalley.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.west.godwinschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wilson.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpinevista.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cde.gmcs.k12.nm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cherry.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cme.gmcs.k12.nm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmm.gmcs.k12.nm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpe.gmcs.k12.nm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cph.gmcs.k12.nm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpm.gmcs.k12.nm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cypress.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dne.gmcs.k12.nm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dse.gmcs.k12.nm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evanshs.ccboe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garden.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gch.gmcs.k12.nm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gph.gmcs.k12.nm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpm.gmcs.k12.nm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hahntownschool.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heritage.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highschool.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillcrestschool.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hmh.gmcs.k12.nm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.godwinschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihe.gmcs.k12.nm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kohn.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learning-center.godwinschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincoln.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveoak.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lostules.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maple.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'middleschool.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missionvalley.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.godwinschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mulcahy.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'north.godwinschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orchardviewschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pleasant.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roosevelt.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staff.godwinschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stewartsvilleschool.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunsetvalley.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'west.godwinschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wilson.tcsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmms.slzusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wms.slzusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gonzalesusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norwinsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orchardviewschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tcsdk8.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000167ac8dc279000004030046304402202a41717567c3bdebf554e2f88e32b5bf9eaa7c283baa875370c0d0c3b0dad4070220637064e7c7fb7e9701b046c26567b20b37e3d18ecfdaca758f70f99e32ad08ef00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000167ac8dc27900000403004730450220385be252d1b39bf1a771eebf8f439d4ddd2cf296b99b55c963745d3e6b52ce76022100f7979ec9a83a86005414b19d95d828a93a73cf111aae5e32e684275eadda8a8b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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