erhs.erusd.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a3:6a:e2:fe:9d:16:fe:80:aa:f0:2c:51:4c:39:cb:60:99 was issued on by Let's Encrypt.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=erhs.erusd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a3:6a:e2:fe:9d:16:fe:80:aa:f0:2c:51:4c:39:cb:60:99
Serial Number (int): 316944960394214916625227813948347990630553
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 09:33:ef:22:cd:f8:e2:c7:89:cb:ad:82:a4:f4:5a:45:7d:d7:26:78
Fingerprint (sha256): d5:b3:ea:08:e6:8c:c0:8e:56:9f:8b:13:0c:72:db:36:11:16:ad:e6:1d:c7:2e:60:7c:e8:ba:77:84:6a:c3:40

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate erhs.erusd.org

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for erhs.erusd.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aak.potsdam.k12.ny.us
admin.aak.potsdam.k12.ny.us
admin.ahs.airportschools.com
admin.airportschools.com
admin.alexandercsd.org
admin.ava.airportschools.com
admin.berrienschools.org
admin.bls.lcdoe.org
admin.curiehs.org
admin.eastvalleyhs.net
admin.elementary.alexandercsd.org
admin.eyler.airportschools.com
admin.fes.lcdoe.org
admin.hrs.lcdoe.org
admin.lae.potsdam.k12.ny.us
admin.lcdoe.org
admin.lchs.lcdoe.org
admin.mhs.centerusd.org
admin.middlehigh.alexandercsd.org
admin.mlvrcs.org
admin.nce.airportschools.com
admin.nga.lcdoe.org
admin.phs.potsdam.k12.ny.us
admin.potsdam.k12.ny.us
admin.rangerville.sbcisd.net
admin.ritter.airportschools.com
admin.sle.lcdoe.org
admin.sterling.airportschools.com
admin.sullivan.sbcisd.net
admin.thevalleyacademy.net
admin.ujh.lcdoe.org
admin.wagar56.airportschools.com
admin.wagar78.airportschools.com
admin.wcr.centerusd.org
admin.windberschools.org
ahs.airportschools.com
airportschools.com
alexandercsd.org
alt.sbcisd.net
ava.airportschools.com
berrienschools.com
berrienschools.org
bls.lcdoe.org
bps.berrienschools.org
cmschl.org
csisd.org
curiehs.org
eastvalleyhs.net
elementary.alexandercsd.org
erhs.erusd.org
eurotexcoco.edu.mx
eyler.airportschools.com
fes.lcdoe.org
gateway.sbcisd.net
hrs.lcdoe.org
jhar.jubileeacademies.org
jlw.jubileeacademies.org
jodlf.sbcisd.net
jubileeacademies.org
lae.potsdam.k12.ny.us
laencantada.sbcisd.net
landrum.sbcisd.net
lapaloma.sbcisd.net
lcdoe.org
lchs.lcdoe.org
mhs.centerusd.org
middlehigh.alexandercsd.org
mlvrcs.org
nce.airportschools.com
nga.lcdoe.org
phs.potsdam.k12.ny.us
rangerville.sbcisd.net
ritter.airportschools.com
sle.lcdoe.org
sterling.airportschools.com
sullivan.sbcisd.net
thevalleyacademy.net
ujh.lcdoe.org
wagar56.airportschools.com
wagar78.airportschools.com
wcr.centerusd.org
windberschools.org
www.airportschools.com
www.alexandercsd.org
www.berrienschools.com
www.berrienschools.org
www.curiehs.org
www.eastvalleyhs.net
www.eurotexcoco.edu.mx
www.jubileeacademies.org
www.lcdoe.org
www.mlvrcs.org
www.potsdam.k12.ny.us
www.thevalleyacademy.net
www.windberschools.org

Other certificates including the domain name erusd.org

(limited to 100 certificates)
admin.adulted.erusd.org
www.kheperacharter.org
21cli.beaumontusd.us
santafesouth.org
adulted.erusd.org
second.exteraschools.org
admin.newbernmiddle.gocats.org
admin.lorena.exteraschools.org
admin.ahs.ardmoreschools.org
erusd.org
admin.adulted.erusd.org
admin.ahs.ardmoreschools.org
21cli.beaumontusd.us
sea.mynhusd.org
academyofthecanyons.net
www.arschoolforthedeaf.org
bell.robla.k12.ca.us
admin.ourcommunityschool.org
www.british.edu.mx
admin.almadinah-school.com
admin.whitson.wsvsd.org
admin.stanthonyeagles.org
sv.gvusd.k12.ca.us
cce.leusd.k12.ca.us
admin.adulted.erusd.org
admin.bac.wsisd.com
admin.adulted.erusd.org
admin.be.erusd.org
www.saintpaulcatholic.org
admin.jfk.edu.mx
erusd.org
admin.jww.jubileeacademies.org
abchandler.henderson.kyschools.us
admin.adulted.erusd.org
admin.3rcs.org
admin.almadinah-school.com
www.sycamorepreparatoryacademy.org
admin.berrienschools.org
breed.exteraschools.org
re.erusd.org
abchandler.henderson.kyschools.us
admin.second.exteraschools.org
admin.de.erusd.org
admin.mms.monroe.k12.tn.us
shagirls.com
www.grandville.k12.mi.us
admin.exteraschools.org
northwesthigh.slp.k12.la.us
abchandler.henderson.kyschools.us
lorena.exteraschools.org
centerpreschool.centerusd.org
admin.adulted.erusd.org
ees.edgewoodschools.com
admin.adulted.erusd.org
www.trinitystelementary.com
gageparkhs.org
admin.ecacademy.scrsd.org
admin.ahs.ardmoreschools.org
abchandler.henderson.kyschools.us
montrosechristiancdc.org
academiamaddox.com
admin.elementary.bridgeportisd.net
21cli.beaumontusd.us
abchandler.henderson.kyschools.us
admin.3rcs.org
admin.rms.erusd.org
rve.erusd.org
admin.assumptionschool-sl.org
admin.ecacademy.scrsd.org
admin.da.nksd.net
npaa.erusd.org
21cli.beaumontusd.us
admin.hlc.gocats.org
www.lisboncsd.org
www.sd925.org
admin.bac.wsisd.com
admin.3rcs.org
admin.erusd.org
admin.excel.dcs.edu
sre.erusd.org
ochoaprep.erusd.org
admin.loudoncounty.org
admin.adulted.erusd.org
admin.tphs.monroe.k12.tn.us
admin.hsmp.org
academyofthecanyons.net
www.unionsquareacademy.org
admin.ecacademy.scrsd.org
steam.erusd.org
admin.3rcs.org
rms.erusd.org
www.icabh.org
admin.bac.wsisd.com
admin.almadinah-school.com
abchandler.henderson.kyschools.us
admin.ahs.ardmoreschools.org
erhs.erusd.org
dudley.centerusd.org
ve.erusd.org
admin.bes.berrienschools.org

Certificate

The complete raw certificate details for erhs.erusd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316944960394214916625227813948347990630553
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-13 10:48:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-14 10:48:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'erhs.erusd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2171 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aak.potsdam.k12.ny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.aak.potsdam.k12.ny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ahs.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.alexandercsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ava.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.berrienschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bls.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.curiehs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eastvalleyhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.elementary.alexandercsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eyler.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fes.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hrs.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lae.potsdam.k12.ny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lchs.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mhs.centerusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.middlehigh.alexandercsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mlvrcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nce.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nga.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.phs.potsdam.k12.ny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.potsdam.k12.ny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rangerville.sbcisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ritter.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sle.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sterling.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sullivan.sbcisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.thevalleyacademy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ujh.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wagar56.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wagar78.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wcr.centerusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.windberschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahs.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexandercsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alt.sbcisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ava.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berrienschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berrienschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bls.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bps.berrienschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmschl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curiehs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastvalleyhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elementary.alexandercsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erhs.erusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eurotexcoco.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyler.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fes.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway.sbcisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrs.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhar.jubileeacademies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jlw.jubileeacademies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jodlf.sbcisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jubileeacademies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lae.potsdam.k12.ny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laencantada.sbcisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landrum.sbcisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lapaloma.sbcisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lchs.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhs.centerusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'middlehigh.alexandercsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlvrcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nce.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nga.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phs.potsdam.k12.ny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rangerville.sbcisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ritter.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sle.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sterling.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sullivan.sbcisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thevalleyacademy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ujh.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wagar56.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wagar78.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcr.centerusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windberschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alexandercsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berrienschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berrienschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.curiehs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastvalleyhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eurotexcoco.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jubileeacademies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mlvrcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.potsdam.k12.ny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thevalleyacademy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.windberschools.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000168e6b0356a0000040300473045022100c19a52d50d91eaec34ea9f188549a49fcfe8656974070f2b7289727b8152b4120220437cc67c56a556920ba4795da7ec3b1e544d26e7400e13f7f922cb8be765d718007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168e6b0355e0000040300473045022100fc58084c903b04aa06dd819d2cacd47e81729986a6ce5a1a221e481e18b95f9f022026ed9aebedae17ff73cdf660f1cbc0d8f58198f97ed8847b5c3370f9aace9ed0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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