mtvernon.bcsd.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:18:c6:74:d8:c5:62:02:fd:08:75:6b:39:df:c2:48:1e:41 was issued on by Let's Encrypt.

With 73 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mtvernon.bcsd.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:18:c6:74:d8:c5:62:02:fd:08:75:6b:39:df:c2:48:1e:41
Serial Number (int): 269767428447623021993632324584565996265025
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d0:1e:16:33:b0:1d:97:7e:19:7b:71:fd:e0:4f:33:51:f0:67:64:71
Fingerprint (sha256): cf:1a:e2:80:e9:ca:64:e3:b9:cf:cc:96:5d:30:f1:43:03:80:0a:10:53:d8:09:f5:17:67:9d:b2:65:d3:29:3a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mtvernon.bcsd.com

73

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mtvernon.bcsd.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acacia.hemetusd.org
admin-cuajimalpa.peterson.edu.mx
admin-lomas.peterson.edu.mx
admin-pedregal.peterson.edu.mx
admin-tlalpan.peterson.edu.mx
admin.countryhills.bousd.us
admin.cvillecusd1.com
admin.evergreen.bcsd.com
admin.hort.bcsd.com
admin.kcgpa.org
admin.missionachievementandsuccess.com
admin.olinda.bousd.us
admin.peterson.edu.mx
admin.pioneer.bcsd.com
admin.stanlycountyschools.org
admin.stmss.org
admin.teachersupportsite.com
admin.thebrandeisschool.org
admin.walshcps.org
admin.wayside.bcsd.com
aspirecds.hemetusd.org
bautistacreek.hemetusd.org
bcsd.com
bjhs.bousd.us
bohs.bousd.us
cawston.hemetusd.org
cds.bousd.us
cottonwood.hemetusd.org
cuajimalpa.peterson.edu.mx
cusd1.com
cvillecusd1.com
dartmouth.hemetusd.org
diamondvalley.hemetusd.org
ecapcs.org
fanning.bousd.us
fruitvale.hemetusd.org
hamiltonk8.hemetusd.org
harmony.hemetusd.org
hemetel.hemetusd.org
hemetusd.org
hhjftlc.hemetusd.org
idyllwild.hemetusd.org
jacobwiens.hemetusd.org
kcgpa.org
littlelake.hemetusd.org
lomas.peterson.edu.mx
mcsweeny.hemetusd.org
mtvernon.bcsd.com
munsey.bcsd.com
parentcenter.hemetusd.org
pedregal.peterson.edu.mx
preschool.hemetusd.org
ramona.hemetusd.org
ranchoviejo.hemetusd.org
stiern.bcsd.com
teachersupportsite.com
thebrandeisschool.org
tlalpan.peterson.edu.mx
vallevista.hemetusd.org
washington.bcsd.com
wayside.bcsd.com
whittier.hemetusd.org
williams.bcsd.com
winchester.hemetusd.org
www.bcsd.com
www.cvillecusd1.com
www.ecapcs.org
www.hemetusd.org
www.kcgpa.org
www.peterson.edu.mx
www.teachersupportsite.com
www.thebrandeisschool.org
www.walshcps.org

Other certificates including the domain name bcsd.com

(limited to 100 certificates)
walshcps.org
admin-cuajimalpa.peterson.edu.mx
gutierrez.hcisd.org
bce.slvusd.org
*.bcsd.com
palomares.cv.k12.ca.us
admin.bcsd.com
www.cv.k12.ca.us
gfes.comalisd.org
admin-cuajimalpa.peterson.edu.mx
admin.proctor.cv.k12.ca.us
washington.bcsd.com
sunnyside.goldenruledallas.org
admin.veca.gocats.org
admin.gsdacademy.com
admin.rowlettacademy.org
www.dhs.dover.k12.nh.us
smartfind.bcsd.com
admin.bowie.hcisd.org
admin-cuajimalpa.peterson.edu.mx
www.msd120.org
admin.illinois.goldenruledallas.org
fremont.bcsd.com
www.rowlettacademy.org
admin.bclc.burke.k12.ga.us
Reportcard.bcsd.com
pioneer.bcsd.com
admin.nichols.bcsd.com
chs.comalisd.org
hles.comalisd.org
cses.comalisd.org
fes.comalisd.org
admin.wayside.bcsd.com
desoto.goldenruledallas.org
admin.fuesd.org
www.hilltopprep.org
admin.independent.cv.k12.ca.us
tpes.comalisd.org
www.btaallday.org
leonardeulerd.edu.mx
svms.comalisd.org
bcsd.com
www.wherelifehappens.org
admin.cano.hcisd.org
admin.crma5.org
dover.k12.nh.us
redwood.cv.k12.ca.us
admin.milam.hcisd.org
admin.evanshs.ccboe.net
admin.vannoy.cv.k12.ca.us
admin.compton.bcsd.com
admin.evergreen.bcsd.com
mvms.comalisd.org
116elementary.org
pg.goldenruledallas.org
admin.hills.bcsd.com
admin.alma.cv.k12.ca.us
admin.church.faithmarietta.org
www.teachersupportsite.com
crockett.hcisd.org
admin-cuajimalpa.peterson.edu.mx
voorhies.bcsd.com
bcsd.com
smartfind.bcsd.com
admin.longfellow.bcsd.com
admin.bonham.hcisd.org
burney.hattiesburgpsd.com
ballingerisd.net
sierra.bcsd.com
sequoia.bcsd.com
www.kcgpa.org
chs.comalisd.org
www.leavittms.net
admin.cornerstone.pvpusd.net
admin.redwood.cv.k12.ca.us
longfellow.bcsd.com
www.bce.slvusd.org
admin.athletics.goshenlocalschools.org
rvs.monroe.k12.tn.us
www.notredameparish.org
www.comalisd.org
admin.llc.lex3.org
admin.wayside.bcsd.com
admin.lunadabay.pvpusd.net
sequoia.bcsd.com
charter.slvusd.org
msd120.org
cses.comalisd.org
owensintermediate.bcsd.com
admin.casaloma.bcsd.com
painesville-city.k12.oh.us
admin.alma.cv.k12.ca.us
dvms.comalisd.org
slvusd.org
bcsd.com
stmss.org
admin.sle.slvusd.org
admin.athletics.goshenlocalschools.org
admin.harding.bcsd.com
cdc.comalisd.org

Certificate

The complete raw certificate details for mtvernon.bcsd.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269767428447623021993632324584565996265025
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-11 09:51:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-10 09:51:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mtvernon.bcsd.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1637 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acacia.hemetusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-cuajimalpa.peterson.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-lomas.peterson.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-pedregal.peterson.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-tlalpan.peterson.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.countryhills.bousd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cvillecusd1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.evergreen.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hort.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kcgpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.missionachievementandsuccess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.olinda.bousd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.peterson.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pioneer.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stanlycountyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stmss.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.teachersupportsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.thebrandeisschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.walshcps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wayside.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspirecds.hemetusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bautistacreek.hemetusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bjhs.bousd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bohs.bousd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cawston.hemetusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cds.bousd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cottonwood.hemetusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuajimalpa.peterson.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cusd1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvillecusd1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dartmouth.hemetusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondvalley.hemetusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecapcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanning.bousd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fruitvale.hemetusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamiltonk8.hemetusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harmony.hemetusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemetel.hemetusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemetusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhjftlc.hemetusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idyllwild.hemetusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacobwiens.hemetusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcgpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'littlelake.hemetusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lomas.peterson.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcsweeny.hemetusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtvernon.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'munsey.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parentcenter.hemetusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pedregal.peterson.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preschool.hemetusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramona.hemetusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranchoviejo.hemetusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stiern.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teachersupportsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebrandeisschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tlalpan.peterson.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vallevista.hemetusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washington.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wayside.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whittier.hemetusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'williams.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winchester.hemetusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cvillecusd1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecapcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hemetusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kcgpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peterson.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teachersupportsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebrandeisschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walshcps.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a0c05c58200000403004730450220022b2d4401514a064426d6f17a9301be5bfbb0244f87f7e374bf2becdc17a0b0022100d56aee6dc3fd6305125b9bdad3af8825993432d3042db3b8e0ff0014c85fa13e00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a0c05c4050000040300483046022100c8e4a720db5b825c7fa36cd1aa68ccada2601c321d1af97cd79c4e666b7b40d4022100d3150487b81b11413412e15f51ab6b54082e866818517ca993dfc4f5a1596119
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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