www.unioncity.k12.ok.us

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:11:ab:1b:61:76:e4:0a:38:56:5c:cc:b7:14:e6:90:ae:d1 was issued on by Let's Encrypt.

With 75 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.unioncity.k12.ok.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:11:ab:1b:61:76:e4:0a:38:56:5c:cc:b7:14:e6:90:ae:d1
Serial Number (int): 267349098189044324541799903897415719104209
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 57:8d:22:eb:c5:d5:b4:ff:fe:07:3a:9b:ed:c8:4c:9e:97:39:9d:cd
Fingerprint (sha256): da:00:f9:35:c7:11:7a:51:39:de:c0:96:1f:b3:8e:b8:5b:ca:1a:ec:bc:65:0d:99:73:a3:98:ae:b8:95:33:b8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.unioncity.k12.ok.us

75

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.unioncity.k12.ok.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acrma12.org
admin.apaches.k12.in.us
admin.arisehighschool.org
admin.baker5j.org
admin.bhs.baker5j.org
admin.bms.baker5j.org
admin.brooklyn.baker5j.org
admin.carnegieriverside.org
admin.carnegieschools.org
admin.carnegiewhittier.org
admin.casitaiedis.edu.mx
admin.cristoreymiami.org
admin.eaglecap.baker5j.org
admin.elpasocatholicschools.org
admin.ghs.lghs.k12.ca.us
admin.hac1.org
admin.haines.baker5j.org
admin.keating.baker5j.org
admin.lgas.lghs.k12.ca.us
admin.lghs.k12.ca.us
admin.lghs.lghs.k12.ca.us
admin.ojn.apaches.k12.in.us
admin.sbi.baker5j.org
admin.sjwschool.net
admin.theleadershipacademytyler.com
admin.unioncity.k12.ok.us
admin.vallecitok12.com
admin.whs.apaches.k12.in.us
admin.wms.apaches.k12.in.us
arisehighschool.org
baker5j.org
bhs.baker5j.org
bms.baker5j.org
brooklyn.baker5j.org
carnegieriverside.org
carnegieschools.org
carnegiewhittier.org
casitaiedis.edu.mx
colegiobenedictino.edu.mx
cristoreymiami.org
eaglecap.baker5j.org
elpasocatholicschools.org
ghs.lghs.k12.ca.us
hac1.org
haines.baker5j.org
keating.baker5j.org
lgas.lghs.k12.ca.us
lghs.lghs.k12.ca.us
ojn.apaches.k12.in.us
sbi.baker5j.org
sjwschool.net
theleadershipacademytyler.com
unioncity.k12.ok.us
usd458.net
whs.apaches.k12.in.us
wms.apaches.k12.in.us
www.acrma12.org
www.apaches.k12.in.us
www.arisehighschool.org
www.baker5j.org
www.carnegieriverside.org
www.carnegieschools.org
www.carnegiewhittier.org
www.casitaiedis.edu.mx
www.colegioguadalupe.edu.mx
www.cristoreymiami.org
www.elpasocatholicschools.org
www.hac1.org
www.lghs.k12.ca.us
www.pcrpanthers.net
www.sjwschool.net
www.theleadershipacademytyler.com
www.unioncity.k12.ok.us
www.usd458.net
www.vallecitok12.com

Other certificates including the domain name unioncity.k12.ok.us

(limited to 100 certificates)
acrma12.org
acrma12.org
vallecitok12.com
unioncity.k12.ok.us
acrma12.org
acrma12.org
acrma12.org
acrma12.org
www.psusd.k12.az.us
acrma12.org
cpanel.unioncity.k12.ok.us
acrma12.org
acrma12.org
acrma12.org
ps.shisd.net
acrma12.org
unioncity.k12.ok.us
cpanel.unioncity.k12.ok.us
cpanel.unioncity.k12.ok.us
www.springerschools.com
cpanel.unioncity.k12.ok.us
www.georgegervinprepacademy.org
acrma12.org
acrma12.org
www.unioncity.k12.ok.us
acrma12.org
unioncity.k12.ok.us
cpanel.unioncity.k12.ok.us

Certificate

The complete raw certificate details for www.unioncity.k12.ok.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267349098189044324541799903897415719104209
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-11 01:19:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-09 01:19:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.unioncity.k12.ok.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1739 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acrma12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.apaches.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.arisehighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bhs.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bms.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.brooklyn.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.carnegieriverside.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.carnegieschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.carnegiewhittier.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.casitaiedis.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cristoreymiami.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eaglecap.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.elpasocatholicschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ghs.lghs.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hac1.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.haines.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.keating.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lgas.lghs.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lghs.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lghs.lghs.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ojn.apaches.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sbi.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sjwschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.theleadershipacademytyler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.unioncity.k12.ok.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.vallecitok12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.whs.apaches.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wms.apaches.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arisehighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhs.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bms.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brooklyn.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carnegieriverside.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carnegieschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carnegiewhittier.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casitaiedis.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colegiobenedictino.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cristoreymiami.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eaglecap.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elpasocatholicschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghs.lghs.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hac1.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haines.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keating.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgas.lghs.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lghs.lghs.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ojn.apaches.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbi.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjwschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theleadershipacademytyler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unioncity.k12.ok.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usd458.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whs.apaches.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wms.apaches.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acrma12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apaches.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arisehighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baker5j.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carnegieriverside.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carnegieschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carnegiewhittier.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casitaiedis.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegioguadalupe.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cristoreymiami.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elpasocatholicschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hac1.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lghs.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcrpanthers.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjwschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theleadershipacademytyler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unioncity.k12.ok.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usd458.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vallecitok12.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016bded42c72000004030047304502205ea9bc139c03a079ef27e22b71a8ebfe1fe8cb627d64a3435611ed46797b257a022100febf9317f31a6c026c052cd7421f99db52e0ac7a819cc7cc4418f23f2a591edf007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016bded42e6f0000040300473045022100d0fadab4046b5b3c7a69f71d9b2c409afc23ee6fd7f5a6051720833a2f20c91b02202168e1616e51214f0b11e0a21108db652b0b4160f17ccc6d42dc6f7e1f4f4b1e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00845c5642b48064ac7b34e150ce026e186f5693e2cfd1c655c04f67418647fd68efdc43f98448d175e15f45f293d05ea75d9e2472f6511784efb97e163c1f41838620336ec04a92e689cb19fcdd4b1e21a446834491abe6b6169d4402a50c4e0250ce2b6825a37e4569bb483bf1147df3bf604857b6f0b60e6f855aeed1b7b9ecd761668c068f5fe75f4f82dff4c5c4dc01e7caaf2c225e705d0a3e5a0562cb1ee0a4ef7ba4261c469bb91cbf56ce1a5b32109c010272001d48f46cf4dd9fe538ed7cf1ed1cdc46a52ec93c5ca8c38eed2339978817e5376048d7b7bf8d63101e6895cd514b30d31838fa7f529078e2c93ac3bbcb97f46afcb74eb1c13beee0f5