eagles.lucernevalleyunified.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7f:0b:4e:c2:e9:fa:f2:56:a8:be:9d:c3:be:ed:e4:bd:c4 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=eagles.lucernevalleyunified.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7f:0b:4e:c2:e9:fa:f2:56:a8:be:9d:c3:be:ed:e4:bd:c4
Serial Number (int): 304567748854673813786864882701149321608644
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7b:6c:d8:39:a0:a4:c9:fa:bc:ee:ad:bb:04:8c:e2:c9:39:5a:1d:cf
Fingerprint (sha256): db:23:ad:6f:08:96:05:7d:0a:e6:84:45:d7:00:06:bd:7b:4b:ec:c9:ec:79:de:bf:1e:dc:69:a1:d1:9c:ad:70

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate eagles.lucernevalleyunified.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eagles.lucernevalleyunified.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acsaregion14.org
admin.academylongbeach.org
admin.acsaregion14.org
admin.allsaintsnorwalk.com
admin.bes.bisd-tx.org
admin.bhs.bisd-tx.org
admin.blanchedodd.net
admin.bms.bisd-tx.org
admin.camsch.org
admin.elementary.bridgeportisd.net
admin.elementary.mypagosaschools.com
admin.es.somervilleisd.org
admin.ghs.gorhamschools.org
admin.gms.gorhamschools.org
admin.greatfalls.gorhamschools.org
admin.hartsacademy.org
admin.hattiedyer.net
admin.hgcschool.org
admin.high.bridgeportisd.net
admin.hs.notredameacademy.org
admin.hs.somervilleisd.org
admin.intermediate.bridgeportisd.net
admin.jfk.edu.mx
admin.jrds.school
admin.kingdrew.net
admin.krumeec.net
admin.krumhs.net
admin.krumms.net
admin.lemc.lakelandsd.org
admin.lesc.lakelandsd.org
admin.lhs.lakelandsd.org
admin.marquezhs.net
admin.middle.bridgeportisd.net
admin.moxee.evsd90.org
admin.msab.msa.state.mn.us
admin.msad.msa.state.mn.us
admin.narragansett.gorhamschools.org
admin.pes.bisd-tx.org
admin.piopicoms.org
admin.village.gorhamschools.org
admin.visd.net
admin.zcs.k12.in.us
bes.bisd-tx.org
bhs.bisd-tx.org
blanchedodd.net
bms.bisd-tx.org
dodd.krumisd.net
dyer.krumisd.net
eagles.lucernevalleyunified.org
eec.krumisd.net
elementary.bridgeportisd.net
es.somervilleisd.org
ghs.gorhamschools.org
gms.gorhamschools.org
gorhs.gorham.k12.me.us
greatfalls.gorhamschools.org
hattiedyer.net
hgcschool.org
high.bridgeportisd.net
intermediate.bridgeportisd.net
jrds.school
khs.krumisd.net
kms.krumisd.net
krumeec.net
krumhs.net
krumms.net
lemc.lakelandsd.org
lesc.lakelandsd.org
lhs.lakelandsd.org
marquezhs.net
middle.bridgeportisd.net
msab.msa.state.mn.us
msad.msa.state.mn.us
narragansett.gorhamschools.org
pes.bisd-tx.org
piopicoms.org
sgisd.net
village.gorhamschools.org
www.academylongbeach.org
www.acsaregion14.org
www.admin.colegiofrancoingles.edu.mx
www.allsaintsnorwalk.com
www.blanchedodd.net
www.cameron.k12.la.us
www.camsch.org
www.cienegaelementary.org
www.colegiofrancoingles.edu.mx
www.hartsacademy.org
www.hattiedyer.net
www.hgcschool.org
www.jfk.edu.mx
www.jrds.school
www.kingdrew.net
www.krumeec.net
www.krumhs.net
www.krumms.net
www.marquezhs.net
www.piopicoms.org
www.visd.net
www.zcs.k12.in.us

Other certificates including the domain name lucernevalleyunified.org

(limited to 100 certificates)
www.sandymilleracademy.com
eagles.lucernevalleyunified.org
acsaregion14.org
www.bhef.org
admin.amschool.edu.sv
admin.amschool.edu.sv
sfrschool.org
acsaregion14.org
acsaregion14.org
admin.amschool.edu.sv
ps16.jcboe.org
acsaregion14.org
admin.amschool.edu.sv
abilene.texasleadership.net
admin.lisbahamas.com
acsaregion14.org
admin.amschool.edu.sv
admin.eagles.lucernevalleyunified.org
lvmhs.lucernevalleyunified.org
acsaregion14.org
admin.amschool.edu.sv
lucernevalleyunified.org
acsaregion14.org
admin.amschool.edu.sv
lcsd.k12.ms.us
www.notredameacademy.org
admin.aquaticscenter.visd.net
vickers.visd.net
acsaregion14.org
abilene.texasleadership.net
admin.bisd-tx.org
acsaregion14.org
lucernevalleyunified.org
admin.hs.notredameacademy.org
acsaregion14.org
acsaregion14.org
admin.lucernevalleyunified.org
abilene.texasleadership.net
lvmhs.lucernevalleyunified.org
admin.eagles.lucernevalleyunified.org
admin.lucernevalleyunified.org
abilene.texasleadership.net
admin.family.mypagosaschools.com
westlincoln.lcsd.k12.ms.us
admin.royjohnson.cv.k12.ca.us
admin.bes.bentworth.org
admin.amschool.edu.sv
eagles.lucernevalleyunified.org
family.mypagosaschools.com
admin.lindenschools.org
admin.amschool.edu.sv
abilene.texasleadership.net
admin.krumisd.net
admin.williamwood.visd.net
eagles.lucernevalleyunified.org
admin.amschool.edu.sv
admin.crispschools.org
admin.aloe.visd.net

Certificate

The complete raw certificate details for eagles.lucernevalleyunified.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIO3jCCDcagAwIBAgISA38LTsLp+vJWqL6dw77t5L3EMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzEyMTkwMjA2MDNaFw0x
ODAzMTkwMjA2MDNaMCoxKDAmBgNVBAMTH2VhZ2xlcy5sdWNlcm5ldmFsbGV5dW5p
ZmllZC5vcmcwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCtrIXp7mbe
jFBtMdv7bPut9hUKX6mHmbwUkk4SAS2wWeHzgwVeEiXu4Q62pKUwqxHbZ3Nw0C0r
UbmlXdHhEGCfXxFMedMP19LbsnHJ7J+Vd91RftXDhoavIx/wwT5kaGhpA/RdgHdc
MauZAXdn+HZ7pK1qC5s76lXAXMbxUMB2dqGxStseulJ5+JrOLKGF4+QvfNCD86Zp
CQrvACEk7x6XbPfvksN3ZUjCt1ZA/YmNXz3Zh360hk6cCTaPIOW/cxhcpcaKUHKt
CVZnUB2M4p9GJjRyQW678NiS6+Q0qbZ/fNRq/DeyUK6NlYeQgdk2lo23F+yuki1Q
irlO7vNt6T8xH8kxH2dx5bJnYy6d35JuB8t/3rA+FUFquuynUc1H4iSjK2vk8w1E
HPBbMG9MPwXurpyRRsiCl6juy2ftvQg1c9iA1PvMVf9Q0JxaP5pon4q7wwpXgQQS
5qK+Nb8/5ObrheNc2M/0XVbz7m2VwmAmEZTITKUJS0BGqE+iNTNCeuHWJRIxE0ja
WIngi53H+jdDgTbDoC5309jJXTmkWAx1Itg1EZBPJBFJpJtDceZ9mL+lCMXJSiGI
Dv+HSiZSYIgOJBUbfR4eFvc4g/dsmKxdkrioSuflkOYp1SA0LcZL7LCtMAFiPQ34
RSeiGRSLqKQPiZ7qjnyyr8hBWbJ6bUz8TQIDAQABo4IK3DCCCtgwDgYDVR0PAQH/
BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8E
AjAAMB0GA1UdDgQWBBQva8hNbCwuMvIAIP8tTWxa/G66uzAfBgNVHSMEGDAWgBSo
SmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGG
Imh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKG
I2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMIII5QYDVR0RBIII
3DCCCNiCEGFjc2FyZWdpb24xNC5vcmeCGmFkbWluLmFjYWRlbXlsb25nYmVhY2gu
b3JnghZhZG1pbi5hY3NhcmVnaW9uMTQub3JnghphZG1pbi5hbGxzYWludHNub3J3
YWxrLmNvbYIVYWRtaW4uYmVzLmJpc2QtdHgub3JnghVhZG1pbi5iaHMuYmlzZC10
eC5vcmeCFWFkbWluLmJsYW5jaGVkb2RkLm5ldIIVYWRtaW4uYm1zLmJpc2QtdHgu
b3JnghBhZG1pbi5jYW1zY2gub3JngiJhZG1pbi5lbGVtZW50YXJ5LmJyaWRnZXBv
cnRpc2QubmV0giRhZG1pbi5lbGVtZW50YXJ5Lm15cGFnb3Nhc2Nob29scy5jb22C
GmFkbWluLmVzLnNvbWVydmlsbGVpc2Qub3JnghthZG1pbi5naHMuZ29yaGFtc2No
b29scy5vcmeCG2FkbWluLmdtcy5nb3JoYW1zY2hvb2xzLm9yZ4IiYWRtaW4uZ3Jl
YXRmYWxscy5nb3JoYW1zY2hvb2xzLm9yZ4IWYWRtaW4uaGFydHNhY2FkZW15Lm9y
Z4IUYWRtaW4uaGF0dGllZHllci5uZXSCE2FkbWluLmhnY3NjaG9vbC5vcmeCHGFk
bWluLmhpZ2guYnJpZGdlcG9ydGlzZC5uZXSCHWFkbWluLmhzLm5vdHJlZGFtZWFj
YWRlbXkub3JnghphZG1pbi5ocy5zb21lcnZpbGxlaXNkLm9yZ4IkYWRtaW4uaW50
ZXJtZWRpYXRlLmJyaWRnZXBvcnRpc2QubmV0ghBhZG1pbi5qZmsuZWR1Lm14ghFh
ZG1pbi5qcmRzLnNjaG9vbIISYWRtaW4ua2luZ2RyZXcubmV0ghFhZG1pbi5rcnVt
ZWVjLm5ldIIQYWRtaW4ua3J1bWhzLm5ldIIQYWRtaW4ua3J1bW1zLm5ldIIZYWRt
aW4ubGVtYy5sYWtlbGFuZHNkLm9yZ4IZYWRtaW4ubGVzYy5sYWtlbGFuZHNkLm9y
Z4IYYWRtaW4ubGhzLmxha2VsYW5kc2Qub3JnghNhZG1pbi5tYXJxdWV6aHMubmV0
gh5hZG1pbi5taWRkbGUuYnJpZGdlcG9ydGlzZC5uZXSCFmFkbWluLm1veGVlLmV2
c2Q5MC5vcmeCGmFkbWluLm1zYWIubXNhLnN0YXRlLm1uLnVzghphZG1pbi5tc2Fk
Lm1zYS5zdGF0ZS5tbi51c4IkYWRtaW4ubmFycmFnYW5zZXR0LmdvcmhhbXNjaG9v
bHMub3JnghVhZG1pbi5wZXMuYmlzZC10eC5vcmeCE2FkbWluLnBpb3BpY29tcy5v
cmeCH2FkbWluLnZpbGxhZ2UuZ29yaGFtc2Nob29scy5vcmeCDmFkbWluLnZpc2Qu
bmV0ghNhZG1pbi56Y3MuazEyLmluLnVzgg9iZXMuYmlzZC10eC5vcmeCD2Jocy5i
aXNkLXR4Lm9yZ4IPYmxhbmNoZWRvZGQubmV0gg9ibXMuYmlzZC10eC5vcmeCEGRv
ZGQua3J1bWlzZC5uZXSCEGR5ZXIua3J1bWlzZC5uZXSCH2VhZ2xlcy5sdWNlcm5l
dmFsbGV5dW5pZmllZC5vcmeCD2VlYy5rcnVtaXNkLm5ldIIcZWxlbWVudGFyeS5i
cmlkZ2Vwb3J0aXNkLm5ldIIUZXMuc29tZXJ2aWxsZWlzZC5vcmeCFWdocy5nb3Jo
YW1zY2hvb2xzLm9yZ4IVZ21zLmdvcmhhbXNjaG9vbHMub3JnghZnb3Jocy5nb3Jo
YW0uazEyLm1lLnVzghxncmVhdGZhbGxzLmdvcmhhbXNjaG9vbHMub3Jngg5oYXR0
aWVkeWVyLm5ldIINaGdjc2Nob29sLm9yZ4IWaGlnaC5icmlkZ2Vwb3J0aXNkLm5l
dIIeaW50ZXJtZWRpYXRlLmJyaWRnZXBvcnRpc2QubmV0ggtqcmRzLnNjaG9vbIIP
a2hzLmtydW1pc2QubmV0gg9rbXMua3J1bWlzZC5uZXSCC2tydW1lZWMubmV0ggpr
cnVtaHMubmV0ggprcnVtbXMubmV0ghNsZW1jLmxha2VsYW5kc2Qub3JnghNsZXNj
Lmxha2VsYW5kc2Qub3JnghJsaHMubGFrZWxhbmRzZC5vcmeCDW1hcnF1ZXpocy5u
ZXSCGG1pZGRsZS5icmlkZ2Vwb3J0aXNkLm5ldIIUbXNhYi5tc2Euc3RhdGUubW4u
dXOCFG1zYWQubXNhLnN0YXRlLm1uLnVzgh5uYXJyYWdhbnNldHQuZ29yaGFtc2No
b29scy5vcmeCD3Blcy5iaXNkLXR4Lm9yZ4INcGlvcGljb21zLm9yZ4IJc2dpc2Qu
bmV0ghl2aWxsYWdlLmdvcmhhbXNjaG9vbHMub3Jnghh3d3cuYWNhZGVteWxvbmdi
ZWFjaC5vcmeCFHd3dy5hY3NhcmVnaW9uMTQub3JngiR3d3cuYWRtaW4uY29sZWdp
b2ZyYW5jb2luZ2xlcy5lZHUubXiCGHd3dy5hbGxzYWludHNub3J3YWxrLmNvbYIT
d3d3LmJsYW5jaGVkb2RkLm5ldIIVd3d3LmNhbWVyb24uazEyLmxhLnVzgg53d3cu
Y2Ftc2NoLm9yZ4IZd3d3LmNpZW5lZ2FlbGVtZW50YXJ5Lm9yZ4Ied3d3LmNvbGVn
aW9mcmFuY29pbmdsZXMuZWR1Lm14ghR3d3cuaGFydHNhY2FkZW15Lm9yZ4ISd3d3
LmhhdHRpZWR5ZXIubmV0ghF3d3cuaGdjc2Nob29sLm9yZ4IOd3d3Lmpmay5lZHUu
bXiCD3d3dy5qcmRzLnNjaG9vbIIQd3d3LmtpbmdkcmV3Lm5ldIIPd3d3LmtydW1l
ZWMubmV0gg53d3cua3J1bWhzLm5ldIIOd3d3LmtydW1tcy5uZXSCEXd3dy5tYXJx
dWV6aHMubmV0ghF3d3cucGlvcGljb21zLm9yZ4IMd3d3LnZpc2QubmV0ghF3d3cu
emNzLmsxMi5pbi51czCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC
3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn
MIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUg
cmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29y
ZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBz
Oi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMA0GCSqGSIb3DQEBCwUAA4IB
AQA9Leld9lTQGt4whOFjq6Rv4tetb7UKI48uJc3r6Zpo1nk40rFYvASbXfOkIoLv
lRYNNmoy/S5ioOHHEBfEbhOwwofSxQ7AwHLJ2MgyvvgHamro2ohrYtNndv+sdEFp
tuIsMfGhC3d4fP7Y/W4E7g281mpGeKXw3r6WSV3wj+tDssvn4ycZavxOdAYvzKiO
TXJ4En8HHYsoYh282RCE/6f0FMzkuKUq6p1XRTqfIKxU+3Hxvyg4Pv969eDAT3m6
fgDpRzZjIKkNvsObLKzAV66PoAelwG8VztpJa9uz+juWJZ5i8L1GUsLIsLH7/p8P
4wqTjHuT/wQDqpv/bF4jS+4d
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 304567748854673813786864882701149321608644
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-19 02:06:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-19 02:06:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eagles.lucernevalleyunified.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2268 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acsaregion14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.academylongbeach.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.acsaregion14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.allsaintsnorwalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bes.bisd-tx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bhs.bisd-tx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.blanchedodd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bms.bisd-tx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.camsch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.elementary.bridgeportisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.elementary.mypagosaschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.es.somervilleisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ghs.gorhamschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gms.gorhamschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.greatfalls.gorhamschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hartsacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hattiedyer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hgcschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.high.bridgeportisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hs.notredameacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hs.somervilleisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.intermediate.bridgeportisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jfk.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jrds.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kingdrew.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.krumeec.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.krumhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.krumms.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lemc.lakelandsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lesc.lakelandsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lhs.lakelandsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.marquezhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.middle.bridgeportisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.moxee.evsd90.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.msab.msa.state.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.msad.msa.state.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.narragansett.gorhamschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pes.bisd-tx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.piopicoms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.village.gorhamschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.visd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bes.bisd-tx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhs.bisd-tx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blanchedodd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bms.bisd-tx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dodd.krumisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dyer.krumisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eagles.lucernevalleyunified.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eec.krumisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elementary.bridgeportisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.somervilleisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghs.gorhamschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gms.gorhamschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gorhs.gorham.k12.me.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatfalls.gorhamschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hattiedyer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hgcschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'high.bridgeportisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intermediate.bridgeportisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jrds.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khs.krumisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kms.krumisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krumeec.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krumhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krumms.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lemc.lakelandsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesc.lakelandsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lhs.lakelandsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marquezhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'middle.bridgeportisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msab.msa.state.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msad.msa.state.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'narragansett.gorhamschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pes.bisd-tx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piopicoms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'village.gorhamschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.academylongbeach.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acsaregion14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.admin.colegiofrancoingles.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allsaintsnorwalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blanchedodd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cameron.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.camsch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cienegaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegiofrancoingles.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hartsacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hattiedyer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hgcschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jfk.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jrds.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingdrew.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krumeec.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krumhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krumms.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marquezhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piopicoms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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