spencemanagementgroup.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:24:3e:5c:52:3e:1c:f1:0c:96:e2:d0:4c:ce:2b:6c:67:1b was issued on by Let's Encrypt.

With 81 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=spencemanagementgroup.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:24:3e:5c:52:3e:1c:f1:0c:96:e2:d0:4c:ce:2b:6c:67:1b
Serial Number (int): 273669914499562865178985686753559318390555
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 54:05:f1:d0:3a:0c:4b:f0:73:e1:09:e6:fd:cb:5b:d5:6d:88:2e:14
Fingerprint (sha256): d1:d3:75:8f:2c:df:ba:63:15:9e:11:63:23:a4:bf:a4:b4:af:ee:08:9b:63:a5:32:8e:a3:43:c7:d2:fe:0c:29

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate spencemanagementgroup.com

81

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for spencemanagementgroup.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.artsinactioncharter.org
admin.balloustay.com
admin.bitely.garvey.k12.ca.us
admin.carbonvalleyacademy.org
admin.ccs.coloma.org
admin.ces.coloma.org
admin.chs.coloma.org
admin.cis.coloma.org
admin.cjh.coloma.org
admin.clanyc.org
admin.dewey.garvey.k12.ca.us
admin.emerson.garvey.k12.ca.us
admin.garvey.k12.ca.us
admin.garveyint.garvey.k12.ca.us
admin.hillcrest.garvey.k12.ca.us
admin.indianola.k12.ok.us
admin.kellycollegeprep.org
admin.mvista.garvey.k12.ca.us
admin.olgscott.net
admin.pac.aquinashs.net
admin.prospectridgeacademy.org
admin.rice.garvey.k12.ca.us
admin.sanchez.garvey.k12.ca.us
admin.st.louisschool.org
admin.stlouisschool.org
admin.templeint.garvey.k12.ca.us
admin.validatingaffirmingschools.org
admin.waldorfatlanta.org
admin.willard.garvey.k12.ca.us
artsinactioncharter.org
balloustay.com
bitely.garvey.k12.ca.us
carbonvalleyacademy.org
ccs.coloma.org
ces.coloma.org
chs.coloma.org
cis.coloma.org
cjh.coloma.org
clanyc.org
coloma.org
dewey.garvey.k12.ca.us
dougherty.k12.ga.us
durangoathletics.durangoschools.org
emerson.garvey.k12.ca.us
garveyint.garvey.k12.ca.us
hillcrest.garvey.k12.ca.us
indianola.k12.ok.us
jcchs.org
kellycollegeprep.org
mvista.garvey.k12.ca.us
pac.aquinashs.net
peterson.mx
rice.garvey.k12.ca.us
sanchez.garvey.k12.ca.us
saspasadena.org
spencemanagementgroup.com
st.louisschool.org
templeint.garvey.k12.ca.us
validatingaffirmingschools.org
willard.garvey.k12.ca.us
www.artsinactioncharter.org
www.balloustay.com
www.carbonvalleyacademy.org
www.ccs.coloma.org
www.clanyc.org
www.coloma.org
www.garvey.k12.ca.us
www.gesd.us
www.indianola.k12.ok.us
www.jcchs.org
www.kellycollegeprep.org
www.olgscott.net
www.peterson.mx
www.prospectridgeacademy.org
www.pvphs.com
www.richland.k12.mo.us
www.saspasadena.org
www.st.louisschool.org
www.stlouisschool.org
www.validatingaffirmingschools.org
www.waldorfatlanta.org

Other certificates including the domain name spencemanagementgroup.com

(limited to 100 certificates)
www.spencemanagementgroup.com
www.robertaevangelical.com
admin.school.ollseattle.org
admin.aquinashs.net
admin.egbertintermediateschool.org
adams.paisd.org
adams.paisd.org
www.ps13queens.com
www.colegioriver.com
lakeview.paisd.org
www.sabinalisd.net
admin.chesterfielddayschool.org
spencemanagementgroup.com
adams.paisd.org
admin.aquinashs.net
admin.aquinashs.net

Certificate

The complete raw certificate details for spencemanagementgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273669914499562865178985686753559318390555
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-26 06:27:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-25 06:27:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spencemanagementgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1938 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.artsinactioncharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.balloustay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bitely.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.carbonvalleyacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ccs.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ces.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.chs.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cis.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cjh.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.clanyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dewey.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.emerson.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.garveyint.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hillcrest.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.indianola.k12.ok.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kellycollegeprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mvista.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.olgscott.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pac.aquinashs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.prospectridgeacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rice.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sanchez.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.st.louisschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stlouisschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.templeint.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.validatingaffirmingschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.waldorfatlanta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.willard.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artsinactioncharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balloustay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitely.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carbonvalleyacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccs.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ces.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chs.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cis.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cjh.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clanyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dewey.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dougherty.k12.ga.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'durangoathletics.durangoschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emerson.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garveyint.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillcrest.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indianola.k12.ok.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcchs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kellycollegeprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvista.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pac.aquinashs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peterson.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rice.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanchez.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saspasadena.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spencemanagementgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st.louisschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'templeint.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'validatingaffirmingschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willard.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artsinactioncharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.balloustay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carbonvalleyacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccs.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clanyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gesd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indianola.k12.ok.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jcchs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kellycollegeprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olgscott.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peterson.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prospectridgeacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pvphs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richland.k12.mo.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saspasadena.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st.louisschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stlouisschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.validatingaffirmingschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waldorfatlanta.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d6c77a3ac0000040300473045022015bc384039dc741c8245fbaf4f853b8162c5d827a5d86db40691d43f20f09f76022100ef5d838a0fd00a5085845e4a33b229bb7f8268528858393faadf97d316165a03007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d6c77a1a30000040300483046022100fb45c4cf551b6a1a639785a56aa1fd023ab9c9f6f88136113c4947e68bd97bc2022100ce3ee036dd2f99f3513aa6b07dde4a27bbb2e24fd3a3a99f603d7493efdeab94
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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