fless.sd91.bc.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:81:3d:4e:dd:ed:ed:0c:74:89:a1:f9:a7:60:18:4e:f6:7e was issued on by Let's Encrypt.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fless.sd91.bc.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:81:3d:4e:dd:ed:ed:0c:74:89:a1:f9:a7:60:18:4e:f6:7e
Serial Number (int): 305314775536242607239119873829454713124478
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4d:a4:3e:70:51:94:98:2b:1c:7e:c7:ab:d9:56:a3:9a:94:0a:14:1a
Fingerprint (sha256): db:ae:29:3b:67:ea:6c:04:28:a1:5b:47:93:e4:ba:11:8e:02:0f:0b:52:89:92:5c:6a:59:23:15:eb:91:1a:c2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fless.sd91.bc.ca

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fless.sd91.bc.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.apr298.com
admin.charterschoolofeducationalexcellence.org
admin.courreges.fvsd.us
admin.cox.fvsd.us
admin.ctkschool.com
admin.executiveprep.org
admin.fulton.fvsd.us
admin.gisler.fvsd.us
admin.hnhsoakland.org
admin.kipapaelementary.org
admin.learningatlovejoy.com
admin.lockwoodavenue.org
admin.masuda.fvsd.us
admin.mhs.molineschools.org
admin.molineschools.org
admin.newland.fvsd.us
admin.oka.fvsd.us
admin.plavan.fvsd.us
admin.saintemydiuscatholicschool.org
admin.saturnelementary.org
admin.talbert.fvsd.us
admin.tamura.fvsd.us
admin.vicksburgcatholic.org
apr298.com
bess.sd91.bc.ca
ces.cliftonisd.org
charterschoolofeducationalexcellence.org
courreges.fvsd.us
cox.fvsd.us
ctkschool.com
decker.sd91.bc.ca
dvdhoy.sd91.bc.ca
elementary.otsegoknights.org
evd.sd91.bc.ca
executiveprep.org
fless.sd91.bc.ca
francois.sd91.bc.ca
fsjss.sd91.bc.ca
fulton.fvsd.us
gisler.fvsd.us
grassy.sd91.bc.ca
greenfieldschool.org
highschool.otsegoknights.org
hnhsoakland.org
juniorhigh.otsegoknights.org
kipapaelementary.org
ldss.sd91.bc.ca
learningatlovejoy.com
learningatlovejoy.net
learningatlovejoy.org
lockwoodavenue.org
mapes.sd91.bc.ca
masuda.fvsd.us
mouse.sd91.bc.ca
newland.fvsd.us
nvss.sd91.bc.ca
oka.fvsd.us
plavan.fvsd.us
saintemydiuscatholicschool.org
saturnelementary.org
skv.sd91.bc.ca
talbert.fvsd.us
wke.sd91.bc.ca
wlm.sd91.bc.ca
www.apr298.com
www.charterschoolofeducationalexcellence.org
www.courreges.fvsd.us
www.cox.fvsd.us
www.cristoreybatonrouge.org
www.ctkschool.com
www.executiveprep.org
www.fulton.fvsd.us
www.gisler.fvsd.us
www.goethecharterschool.org
www.greenfieldschool.org
www.hnhsoakland.org
www.kipapaelementary.org
www.knovalearning.org
www.learningatlovejoy.com
www.learningatlovejoy.net
www.learningatlovejoy.org
www.lockwoodavenue.org
www.masuda.fvsd.us
www.mmbethune.org
www.molineschools.org
www.newland.fvsd.us
www.oka.fvsd.us
www.otsegoknights.org
www.plavan.fvsd.us
www.saintemydiuscatholicschool.org
www.saturnelementary.org
www.sd91.bc.ca
www.sgusd.net
www.talbert.fvsd.us
www.tamura.fvsd.us
www.uinta1.k12.wy.us
www.vicksburgcatholic.org

Other certificates including the domain name sd91.bc.ca

(limited to 100 certificates)
sd91.bc.ca
*.sd91.bc.ca
sdsweb.sd91.bc.ca
admin.charterschoolofeducationalexcellence.org
sd91.bc.ca
admin.charterschoolofeducationalexcellence.org
*.sd91.bc.ca
unifi.sd91.bc.ca
*.sd91.bc.ca
mhs.molineschools.org
unifi.sd91.bc.ca
*.sd91.bc.ca
webdat.sd91.bc.ca
sdsweb.sd91.bc.ca
sdsweb.sd91.bc.ca
*.sd91.bc.ca
admin.charterschoolofeducationalexcellence.org
sd91.bc.ca
fless.sd91.bc.ca
sdsweb.sd91.bc.ca
unifi-nvss.sd91.bc.ca
sdsweb.sd91.bc.ca
sdsweb.sd91.bc.ca
unifi.sd91.bc.ca
*.sd91.bc.ca
cespk2.cliftonisd.org

Certificate

The complete raw certificate details for fless.sd91.bc.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305314775536242607239119873829454713124478
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-07 01:53:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-06 01:53:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fless.sd91.bc.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.apr298.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.charterschoolofeducationalexcellence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.courreges.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cox.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ctkschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.executiveprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fulton.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gisler.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hnhsoakland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kipapaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.learningatlovejoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lockwoodavenue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.masuda.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mhs.molineschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.molineschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.newland.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.oka.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.plavan.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.saintemydiuscatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.saturnelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.talbert.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tamura.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.vicksburgcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apr298.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bess.sd91.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ces.cliftonisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charterschoolofeducationalexcellence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courreges.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cox.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctkschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decker.sd91.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvdhoy.sd91.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elementary.otsegoknights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evd.sd91.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'executiveprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fless.sd91.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'francois.sd91.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsjss.sd91.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fulton.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gisler.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grassy.sd91.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenfieldschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highschool.otsegoknights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hnhsoakland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juniorhigh.otsegoknights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kipapaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldss.sd91.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learningatlovejoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learningatlovejoy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learningatlovejoy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lockwoodavenue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapes.sd91.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masuda.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mouse.sd91.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newland.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nvss.sd91.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oka.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plavan.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintemydiuscatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saturnelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skv.sd91.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talbert.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wke.sd91.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wlm.sd91.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apr298.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charterschoolofeducationalexcellence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.courreges.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cox.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cristoreybatonrouge.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctkschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.executiveprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fulton.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gisler.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goethecharterschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenfieldschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hnhsoakland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kipapaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.knovalearning.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learningatlovejoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learningatlovejoy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learningatlovejoy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lockwoodavenue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masuda.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmbethune.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.molineschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newland.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oka.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otsegoknights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plavan.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintemydiuscatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saturnelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sd91.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sgusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.talbert.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tamura.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uinta1.k12.wy.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vicksburgcatholic.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d09a46cc00000040300473045022100a3b804125de93f79d03b8180287f8521864469ed44ede8db05d41cbabca0ee1a02206542d2b23176e7edcd6dcc612db633fb1c62bbe34945d7f25307e41a0d0fe656007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d09a46ae8000004030046304402201aed8c1fc47b252d9e19830204a4386f881e603d53bce30b5f36284e8ded7b4302200b54a502cc5ad363c7da8260d80fef2da103c58cb3b57fda716fcc2d5bd46a3a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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