dhs.comalisd.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d7:74:32:eb:b0:b1:02:2d:84:0c:03:b5:6e:ac:2f:32:a6 was issued on by Let's Encrypt.

With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dhs.comalisd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d7:74:32:eb:b0:b1:02:2d:84:0c:03:b5:6e:ac:2f:32:a6
Serial Number (int): 334652021526001681507320925281631576470182
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e9:6c:87:3c:2c:f7:44:4f:f7:16:23:dd:69:d5:e2:0a:e6:41:18:91
Fingerprint (sha256): de:91:ad:42:50:c9:dc:42:ea:4d:fb:45:5d:4e:05:6b:69:39:94:de:f9:e3:7e:79:ed:52:8a:6e:42:ce:a8:1c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate dhs.comalisd.org

72

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dhs.comalisd.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.be.glcsd.org
admin.beardenelementary.org
admin.benedictineacad.org
admin.bromleyeastcs.org
admin.ee.glcsd.org
admin.eh.glcsd.org
admin.ejh.glcsd.org
admin.gmcs.org
admin.kes.keyes.k12.ca.us
admin.keyes.k12.ca.us
admin.kilimanjaroism.com
admin.le.glcsd.org
admin.lh.glcsd.org
admin.lvsd.k12.pa.us
admin.mlfa581.com
admin.ps287bkinnovators.org
admin.rsdeaf.org
admin.semstigers.org
admin.shulamithhs.org
admin.sms.keyes.k12.ca.us
admin.vanburenelementary.org
admin.votech.glcsd.org
admin.yavnehacademy.org
bbes.comalisd.org
be.glcsd.org
benedictineacad.org
bromleyeastcs.org
clhs.comalisd.org
dhs.comalisd.org
ee.glcsd.org
eh.glcsd.org
ejh.glcsd.org
es-admin.kilimanjaroism.com
es.kilimanjaroism.com
frederic.k12.wi.us
ghschools.org
kes.keyes.k12.ca.us
keyes.k12.ca.us
kilimanjaroism.com
le.glcsd.org
lh.glcsd.org
lvsd.k12.pa.us
mlfa581.com
ps287bkinnovators.org
rivercrestcolts.org
rsdeaf.org
semstigers.org
shulamithhighschool.org
shulamithhs.org
sms.keyes.k12.ca.us
vanburenelementary.org
votech.glcsd.org
www.beardenelementary.org
www.benedictineacad.org
www.bromleyeastcs.org
www.frederic.k12.wi.us
www.ghschools.org
www.irlandesmexico.com
www.keyes.k12.ca.us
www.kilimanjaroism.com
www.lvsd.k12.pa.us
www.mlfa581.com
www.ps287bkinnovators.org
www.rivercrestcolts.org
www.rowlettacademy.org
www.rsdeaf.org
www.semstigers.org
www.shulamithhighschool.org
www.shulamithhs.org
www.vanburenelementary.org
www.yavnehacademy.org
yavnehacademy.org

Other certificates including the domain name comalisd.org

(limited to 100 certificates)
NOC-ISE-PSN-1.comalisd.org
*.comalisd.org
icacristoreyworkstudy.org
palomares.cv.k12.ca.us
svhs.comalisd.org
lb.comalisd.org
*.comalisd.org
webadmin.br.elanco.org
mechs.comalisd.org
www.cv.k12.ca.us
gfes.comalisd.org
www.comalisd.org
*.comalisd.org
stzes.comalisd.org
*.comalisd.org
admin.proctor.cv.k12.ca.us
jres.comalisd.org
studywiz.comalisd.org
sunnyside.goldenruledallas.org
admin.veca.gocats.org
admin.rowlettacademy.org
dvms.comalisd.org
www.msd120.org
admin.illinois.goldenruledallas.org
admin.chabot.cv.k12.ca.us
www.rowlettacademy.org
admin.bclc.burke.k12.ga.us
admin.nichols.bcsd.com
*.comalisd.org
www.shulamithhighschool.org
chs.comalisd.org
hles.comalisd.org
cses.comalisd.org
fes.comalisd.org
desoto.goldenruledallas.org
www.hilltopprep.org
admin.independent.cv.k12.ca.us
*.comalisd.org
*.comalisd.org
tpes.comalisd.org
www.btaallday.org
leonardeulerd.edu.mx
svms.comalisd.org
www.wherelifehappens.org
admin.crma5.org
redwood.cv.k12.ca.us
ise.comalisd.org
es.kilimanjaroism.com
admin.creekside.cv.k12.ca.us
canyon.cv.k12.ca.us
admin.vannoy.cv.k12.ca.us
admin.compton.bcsd.com
admin.evergreen.bcsd.com
mvms.comalisd.org
bbes.comalisd.org
pg.goldenruledallas.org
admin.hills.bcsd.com
*.comalisd.org
admin.alma.cv.k12.ca.us
voorhies.bcsd.com
pueblonuevo.org
admin.longfellow.bcsd.com
*.comalisd.org
www.ghschools.org
sle.slvusd.org
burney.hattiesburgpsd.com
www.anacondaschools.org
ballingerisd.net
mves.comalisd.org
webadmin.nh.elanco.org
mes.comalisd.org
ises.comalisd.org
chs.comalisd.org
admin.bce.slvusd.org
admin.cornerstone.pvpusd.net
admin.redwood.cv.k12.ca.us
www.bce.slvusd.org
www.ps287bkinnovators.org
admin.fairfield1.org
admin.athletics.goshenlocalschools.org
www.frederic.k12.wi.us
bbes.comalisd.org
www.comalisd.org
*.comalisd.org
cms.comalisd.org
admin.lunadabay.pvpusd.net
charter.slvusd.org
msd120.org
cses.comalisd.org
academy.comalisd.org
admin.cve.cv.k12.ca.us
admin.proctor.cv.k12.ca.us
painesville-city.k12.oh.us
admin.alma.cv.k12.ca.us
dvms.comalisd.org
academy.comalisd.org
*.comalisd.org
*.comalisd.org
mvms.comalisd.org
comalisd.org

Certificate

The complete raw certificate details for dhs.comalisd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMPTCCCyWgAwIBAgISA9d0MuuwsQIthAwDtW6sLzKmMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MjIwMTAwNTVaFw0x
OTExMjAwMTAwNTVaMBsxGTAXBgNVBAMTEGRocy5jb21hbGlzZC5vcmcwggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCtrIXp7mbejFBtMdv7bPut9hUKX6mH
mbwUkk4SAS2wWeHzgwVeEiXu4Q62pKUwqxHbZ3Nw0C0rUbmlXdHhEGCfXxFMedMP
19LbsnHJ7J+Vd91RftXDhoavIx/wwT5kaGhpA/RdgHdcMauZAXdn+HZ7pK1qC5s7
6lXAXMbxUMB2dqGxStseulJ5+JrOLKGF4+QvfNCD86ZpCQrvACEk7x6XbPfvksN3
ZUjCt1ZA/YmNXz3Zh360hk6cCTaPIOW/cxhcpcaKUHKtCVZnUB2M4p9GJjRyQW67
8NiS6+Q0qbZ/fNRq/DeyUK6NlYeQgdk2lo23F+yuki1QirlO7vNt6T8xH8kxH2dx
5bJnYy6d35JuB8t/3rA+FUFquuynUc1H4iSjK2vk8w1EHPBbMG9MPwXurpyRRsiC
l6juy2ftvQg1c9iA1PvMVf9Q0JxaP5pon4q7wwpXgQQS5qK+Nb8/5ObrheNc2M/0
XVbz7m2VwmAmEZTITKUJS0BGqE+iNTNCeuHWJRIxE0jaWIngi53H+jdDgTbDoC53
09jJXTmkWAx1Itg1EZBPJBFJpJtDceZ9mL+lCMXJSiGIDv+HSiZSYIgOJBUbfR4e
Fvc4g/dsmKxdkrioSuflkOYp1SA0LcZL7LCtMAFiPQ34RSeiGRSLqKQPiZ7qjnyy
r8hBWbJ6bUz8TQIDAQABo4IISjCCCEYwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQv
a8hNbCwuMvIAIP8tTWxa/G66uzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv
86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu
dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu
dC14My5sZXRzZW5jcnlwdC5vcmcvMIIF/gYDVR0RBIIF9TCCBfGCEmFkbWluLmJl
LmdsY3NkLm9yZ4IbYWRtaW4uYmVhcmRlbmVsZW1lbnRhcnkub3JnghlhZG1pbi5i
ZW5lZGljdGluZWFjYWQub3JnghdhZG1pbi5icm9tbGV5ZWFzdGNzLm9yZ4ISYWRt
aW4uZWUuZ2xjc2Qub3JnghJhZG1pbi5laC5nbGNzZC5vcmeCE2FkbWluLmVqaC5n
bGNzZC5vcmeCDmFkbWluLmdtY3Mub3JnghlhZG1pbi5rZXMua2V5ZXMuazEyLmNh
LnVzghVhZG1pbi5rZXllcy5rMTIuY2EudXOCGGFkbWluLmtpbGltYW5qYXJvaXNt
LmNvbYISYWRtaW4ubGUuZ2xjc2Qub3JnghJhZG1pbi5saC5nbGNzZC5vcmeCFGFk
bWluLmx2c2QuazEyLnBhLnVzghFhZG1pbi5tbGZhNTgxLmNvbYIbYWRtaW4ucHMy
ODdia2lubm92YXRvcnMub3JnghBhZG1pbi5yc2RlYWYub3JnghRhZG1pbi5zZW1z
dGlnZXJzLm9yZ4IVYWRtaW4uc2h1bGFtaXRoaHMub3JnghlhZG1pbi5zbXMua2V5
ZXMuazEyLmNhLnVzghxhZG1pbi52YW5idXJlbmVsZW1lbnRhcnkub3JnghZhZG1p
bi52b3RlY2guZ2xjc2Qub3JnghdhZG1pbi55YXZuZWhhY2FkZW15Lm9yZ4IRYmJl
cy5jb21hbGlzZC5vcmeCDGJlLmdsY3NkLm9yZ4ITYmVuZWRpY3RpbmVhY2FkLm9y
Z4IRYnJvbWxleWVhc3Rjcy5vcmeCEWNsaHMuY29tYWxpc2Qub3JnghBkaHMuY29t
YWxpc2Qub3JnggxlZS5nbGNzZC5vcmeCDGVoLmdsY3NkLm9yZ4INZWpoLmdsY3Nk
Lm9yZ4IbZXMtYWRtaW4ua2lsaW1hbmphcm9pc20uY29tghVlcy5raWxpbWFuamFy
b2lzbS5jb22CEmZyZWRlcmljLmsxMi53aS51c4INZ2hzY2hvb2xzLm9yZ4ITa2Vz
LmtleWVzLmsxMi5jYS51c4IPa2V5ZXMuazEyLmNhLnVzghJraWxpbWFuamFyb2lz
bS5jb22CDGxlLmdsY3NkLm9yZ4IMbGguZ2xjc2Qub3Jngg5sdnNkLmsxMi5wYS51
c4ILbWxmYTU4MS5jb22CFXBzMjg3Ymtpbm5vdmF0b3JzLm9yZ4ITcml2ZXJjcmVz
dGNvbHRzLm9yZ4IKcnNkZWFmLm9yZ4IOc2Vtc3RpZ2Vycy5vcmeCF3NodWxhbWl0
aGhpZ2hzY2hvb2wub3Jngg9zaHVsYW1pdGhocy5vcmeCE3Ntcy5rZXllcy5rMTIu
Y2EudXOCFnZhbmJ1cmVuZWxlbWVudGFyeS5vcmeCEHZvdGVjaC5nbGNzZC5vcmeC
GXd3dy5iZWFyZGVuZWxlbWVudGFyeS5vcmeCF3d3dy5iZW5lZGljdGluZWFjYWQu
b3JnghV3d3cuYnJvbWxleWVhc3Rjcy5vcmeCFnd3dy5mcmVkZXJpYy5rMTIud2ku
dXOCEXd3dy5naHNjaG9vbHMub3JnghZ3d3cuaXJsYW5kZXNtZXhpY28uY29tghN3
d3cua2V5ZXMuazEyLmNhLnVzghZ3d3cua2lsaW1hbmphcm9pc20uY29tghJ3d3cu
bHZzZC5rMTIucGEudXOCD3d3dy5tbGZhNTgxLmNvbYIZd3d3LnBzMjg3Ymtpbm5v
dmF0b3JzLm9yZ4IXd3d3LnJpdmVyY3Jlc3Rjb2x0cy5vcmeCFnd3dy5yb3dsZXR0
YWNhZGVteS5vcmeCDnd3dy5yc2RlYWYub3JnghJ3d3cuc2Vtc3RpZ2Vycy5vcmeC
G3d3dy5zaHVsYW1pdGhoaWdoc2Nob29sLm9yZ4ITd3d3LnNodWxhbWl0aGhzLm9y
Z4Iad3d3LnZhbmJ1cmVuZWxlbWVudGFyeS5vcmeCFXd3dy55YXZuZWhhY2FkZW15
Lm9yZ4IReWF2bmVoYWNhZGVteS5vcmcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYL
KwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlw
dC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgB0ftqDMa0zEJEhnM4lT0Jw
wr/9XkIgCMY3NXnmEHvMVgAAAWy3DizsAAAEAwBHMEUCIQCtvJPOgnZq//e+5ZI5
KvesEUKYNBwGlUX2y5xFdo1vLwIgeU0ncMEBXhzzM9vYpwtuieaIFakAu4Y2N6Un
E4kA1pMAdgApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWy3Di0I
AAAEAwBHMEUCIAIgd6K1UqpxdB8QKDo/agvXEqTa50su8jZu9YOSNQhnAiEA3eME
y7VLugLUtfBZZ/s5Pr2cR0WGFH1+ICB3S3RjQ4cwDQYJKoZIhvcNAQELBQADggEB
AI5FH4Bj6QtycUEktS4+iu5be1rIlNUL6IsQgFOOZabJX9GcC6vK2zcppwy61e7o
IACHT+1/eSBiTYz2wJe77F4rsDsp6qC15NuE7m8j5/1e9vTGtoOwQWT8s2IcFKvB
3vL4OmJlBsz90kQQ++VoSk35BzRm+K+SBOZy5hCdZAHJQBKlDMWbexZ4S9+POaER
j+H6MsKQKrgJGyxufvBSV30c1aqecqy4pTIjzCJ+S4fS734aCTAz3p5s4wdz1Ibf
qX4uXniepIUySPrSdcOU/Wjq9zucjcKvDwDOnt37CC2nGVpdgeY6VMAgg9KE0iss
80p1XRfe6SXWJbpkiQxf9UQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334652021526001681507320925281631576470182
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-22 01:00:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-20 01:00:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dhs.comalisd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1525 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.be.glcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.beardenelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.benedictineacad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bromleyeastcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ee.glcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eh.glcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ejh.glcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gmcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kes.keyes.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.keyes.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kilimanjaroism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.le.glcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lh.glcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lvsd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mlfa581.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ps287bkinnovators.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rsdeaf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.semstigers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.shulamithhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sms.keyes.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.vanburenelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.votech.glcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.yavnehacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbes.comalisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be.glcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benedictineacad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bromleyeastcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clhs.comalisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhs.comalisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ee.glcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eh.glcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ejh.glcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es-admin.kilimanjaroism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.kilimanjaroism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frederic.k12.wi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kes.keyes.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keyes.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kilimanjaroism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'le.glcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lh.glcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lvsd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlfa581.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps287bkinnovators.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rivercrestcolts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsdeaf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'semstigers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shulamithhighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shulamithhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms.keyes.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vanburenelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'votech.glcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beardenelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benedictineacad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bromleyeastcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frederic.k12.wi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.irlandesmexico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keyes.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kilimanjaroism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvsd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mlfa581.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps287bkinnovators.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rivercrestcolts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rowlettacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rsdeaf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.semstigers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shulamithhighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shulamithhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vanburenelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yavnehacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yavnehacademy.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016cb70e2cec0000040300473045022100adbc93ce82766afff7bee592392af7ac114298341c069545f6cb9c45768d6f2f0220794d2770c1015e1cf333dbd8a70b6e89e68815a900bb863637a527138900d693007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016cb70e2d0800000403004730450220022077a2b552aa71741f10283a3f6a0bd712a4dae74b2ef2366ef58392350867022100dde304cbb54bba02d4b5f05967fb393ebd9c474586147d7e2020774b74634387
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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