admin.bces.davidson.k12.nc.us

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d3:e7:dd:65:1e:27:17:92:e5:4a:02:f3:3e:69:67:42:11 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.bces.davidson.k12.nc.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d3:e7:dd:65:1e:27:17:92:e5:4a:02:f3:3e:69:67:42:11
Serial Number (int): 333444638431143120752809095871150409859601
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 19:d3:42:44:62:07:18:2d:cf:56:3d:71:94:42:cc:a4:58:b7:3d:89
Fingerprint (sha256): df:9a:ca:e2:28:1e:71:3c:19:bd:77:cd:98:ce:fb:8b:09:42:da:ac:93:e1:fb:a1:08:b3:23:08:41:15:cc:4e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate admin.bces.davidson.k12.nc.us

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.bces.davidson.k12.nc.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.adultlearning.sunrisesd.ca
admin.bces.davidson.k12.nc.us
admin.cdhs.davidson.k12.nc.us
admin.ces.davidson.k12.nc.us
admin.des.davidson.k12.nc.us
admin.dtes.davidson.k12.nc.us
admin.echs.davidson.k12.nc.us
admin.edhs.davidson.k12.nc.us
admin.fbe.davidson.k12.nc.us
admin.fges.davidson.k12.nc.us
admin.hes.davidson.k12.nc.us
admin.hs.hpisd.org
admin.lhs.davidson.k12.nc.us
admin.lms.davidson.k12.nc.us
admin.mes.davidson.k12.nc.us
admin.ndhs.davidson.k12.nc.us
admin.nes.davidson.k12.nc.us
admin.nms.davidson.k12.nc.us
admin.oghs.davidson.k12.nc.us
admin.ogms.davidson.k12.nc.us
admin.pes.davidson.k12.nc.us
admin.rallsisd.org
admin.sgmission.org
admin.stmaryschoolwayne.org
admin.thesae.k12.ca.us
admin.tphs.monroe.k12.tn.us
admin.ves.monroe.k12.tn.us
admin.wal.davidson.k12.nc.us
ar.hpisd.org
aristoiclassical.org
armstrong.hpisd.org
bces.davidson.k12.nc.us
bms.davidson.k12.nc.us
br.hpisd.org
bradfield.hpisd.org
cdhs.davidson.k12.nc.us
ces.davidson.k12.nc.us
che.lifeschools.net
cms.davidson.k12.nc.us
dnn.portervilleschools.org
elkhartisd.org
es.glendaleacademy.org
hartorah.org
holyfamilyhs.com
hpms.hpisd.org
hs.cumberlandacademy.com
hs.glendaleacademy.org
hy.hpisd.org
hyer.hpisd.org
itchome.lpisd.org
jr.glendaleacademy.org
kahoiwai.kalo.org
kanu.kalo.org
le.lifeschools.net
lhs.lifeschools.net
lifeschools.net
lphome.lpisd.org
mas.mpusd.net
mce.lifeschools.net
mis.hpisd.org
mishpms.hpisd.org
rallsisd.org
resedahs.net
roe.lifeschools.net
ros.lifeschools.net
rosebudacademy.com
stmaryschoolwayne.org
thesae.k12.ca.us
tphs.monroe.k12.tn.us
tpjhs.monroe.k12.tn.us
universitypark.hpisd.org
up.hpisd.org
www.advantageacademy.org
www.advantageisd.com
www.advantageisd.net
www.advantageisd.org
www.aristoiclassical.org
www.arrowacademy.com
www.arrowacademy.org
www.gesd32.org
www.holyfamilyhs.com
www.kalo.org
www.lazbuddieisd.org
www.lifeschools.net
www.lpisd.org
www.mcgill-toolen.org
www.mcisd.net
www.nyos.org
www.portervilleschools.org
www.rallsisd.org
www.resedahs.net
www.saisd.us
www.sgmission.org
www.stcathmont.org
www.stmaryschoolwayne.org
www.thesae.k12.ca.us
www.thesae.org
www.towandasd.org
www.tsd.k12.pa.us
www.wswaldorf.org

Other certificates including the domain name davidson.k12.nc.us

(limited to 100 certificates)
wps.windhamraymondschools.org
fes.davidson.k12.nc.us
www.cfn.edu.mx
sdhs.davidson.k12.nc.us
admin.adultlearning.sunrisesd.ca
www.bluehazeelementaryschool.wsisd.com
lumberton.k12.tx.us
admin.sves.davidson.k12.nc.us
admin.lms.davidson.k12.nc.us
acldtillotsonschool.org
www.oahornets.org
mail2.davidson.k12.nc.us
abramfriedmanoc.org
abramfriedmanoc.org
admin.aristoiclassical.org
admin.preescolar.semperaltius.edu.mx
ac21.clps.org
admin.aceroschools.org
elementary.plsd.k12.pa.us
admin.davidson.k12.nc.us
admin.sts.davidson.k12.nc.us
admin.eastprimary.kiskiarea.com
ees.elkincityschools.org
hes.davidson.k12.nc.us
abramfriedmanoc.org
admin.aristoiclassical.org
materdeicatholic.org
www.bonnydoon.santacruz.k12.ca.us
www.livingstonusd.org
adams.k12k.com
sre.dcs.edu
admin.sms.davidson.k12.nc.us
admin.cdhs.davidson.k12.nc.us
res.davidson.k12.nc.us
acldtillotsonschool.org
admin.bms.davidson.k12.nc.us
sgmission.org
admin.va.davidson.k12.nc.us
adams.k12k.com
admin.wdhs.davidson.k12.nc.us
nms.davidson.k12.nc.us
adams.k12k.com
acldtillotsonschool.org
admin.escalonhigh.org
dz.aceroschools.org
summer.materdeicatholic.org
admin.aileencolburn.school
www.colegioverdi.edu.mx
admin.athlosbrooklynpark.org
admin.cdhs.davidson.k12.nc.us
admin.garvyschool.org
admin.aspiraacademy.org
admin.nms.davidson.k12.nc.us
adams.k12k.com
admin.cms.davidson.k12.nc.us
admin.grupocedva.com
www.rebsamen.mx
admin.breed.exteraschools.org
dtes.davidson.k12.nc.us
ogms.davidson.k12.nc.us
admin.escalonhigh.org
www.collegeachievegreaterasburyparkcharterschool.org
admin.bms.davidson.k12.nc.us
pmes.pennsmanor.org
admin.ndhs.davidson.k12.nc.us
admin.scs.ealas.org
admin.asgl-lausd.org
escalonhigh.org
lifeschools.net
www.grandville.k12.mi.us
admin.aspiraacademy.org
davidson.k12.nc.us
cdhs.davidson.k12.nc.us
acsaregionxv.org
aak8.org
acsaregionxv.org
mes.davidson.k12.nc.us
elementary.troupisd.org
admin.fges.davidson.k12.nc.us
admin.bces.davidson.k12.nc.us
centroculturaljalilgibran.edu.mx
aceroschools.org
aak8.org
admin.res.rsu14.org
www.movalleyelementary.org
acsaregionxv.org
sme.davidson.k12.nc.us
admin.hes.davidson.k12.nc.us
admin.hg.aceroschools.org
admin.tes.davidson.k12.nc.us
admin.fges.davidson.k12.nc.us
admin.memphiseast.com
lms.davidson.k12.nc.us
mas.mpusd.net
acldtillotsonschool.org
admin.asgl-lausd.org
admin.aimschools.org
admin.bms.davidson.k12.nc.us
admin.cds.pusdschools.net
res.davidson.k12.nc.us

Certificate

The complete raw certificate details for admin.bces.davidson.k12.nc.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333444638431143120752809095871150409859601
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-11 11:06:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-11 11:06:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.bces.davidson.k12.nc.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2253 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.adultlearning.sunrisesd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bces.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cdhs.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ces.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.des.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dtes.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.echs.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.edhs.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fbe.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fges.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hes.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hs.hpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lhs.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lms.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mes.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ndhs.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nes.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nms.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.oghs.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ogms.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pes.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rallsisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sgmission.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stmaryschoolwayne.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.thesae.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tphs.monroe.k12.tn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ves.monroe.k12.tn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wal.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.hpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aristoiclassical.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armstrong.hpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bces.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bms.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'br.hpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bradfield.hpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdhs.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ces.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'che.lifeschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnn.portervilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.glendaleacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hartorah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamilyhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpms.hpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.cumberlandacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.glendaleacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hy.hpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyer.hpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itchome.lpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jr.glendaleacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kahoiwai.kalo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanu.kalo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'le.lifeschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lhs.lifeschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lphome.lpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mas.mpusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mce.lifeschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mis.hpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mishpms.hpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rallsisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resedahs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roe.lifeschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ros.lifeschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosebudacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryschoolwayne.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesae.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tphs.monroe.k12.tn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpjhs.monroe.k12.tn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universitypark.hpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'up.hpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advantageacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advantageisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advantageisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advantageisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aristoiclassical.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arrowacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arrowacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gesd32.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamilyhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kalo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lazbuddieisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifeschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcgill-toolen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nyos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portervilleschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rallsisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resedahs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saisd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sgmission.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcathmont.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryschoolwayne.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesae.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesae.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.towandasd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tsd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wswaldorf.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001683cce392900000403004730450220151e0d98a6715fc38dce7e028196e086bc75bc889660b7bfc13dd3525cc8b30a022100ec2f43e09c306008375fe5af87e6b05c7e6d8f3aa059863737b3a79329773005007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001683cce397900000403004630440220237ded618fdf7c34b3ab9c4becd77bdae8fb02b5b9b8916c594578e17412427402202b11484e145cc90928b4ee614395b050d1c5d3e5885f4fa35a01f08cf104a3b6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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