roseville.johnadamsacademy.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:07:f2:47:58:a8:9d:53:ba:0b:bd:b2:55:e4:3c:be:42:1f was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=roseville.johnadamsacademy.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:07:f2:47:58:a8:9d:53:ba:0b:bd:b2:55:e4:3c:be:42:1f
Serial Number (int): 264040877989995281587824802027354967654943
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5e:5b:11:a2:e0:06:18:19:2f:3b:00:51:9e:1b:e0:57:c5:12:5a:3a
Fingerprint (sha256): e0:29:6e:42:dd:17:da:73:c3:b9:2c:0c:c7:7e:03:fb:d3:d4:c4:6a:ad:6a:92:cf:0a:5b:fb:79:0b:08:00:c5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate roseville.johnadamsacademy.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for roseville.johnadamsacademy.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adairsvillehigh.bartow.k12.ga.us
admin.akinseagles.org
admin.bpsd.k12.ca.us
admin.clhscadets.com
admin.emery.bpsd.k12.ca.us
admin.gilbert.bpsd.k12.ca.us
admin.guerrerothompson.org
admin.haaheo.org
admin.halb.org
admin.hickam.k12.hi.us
admin.johnadamsacademy.org
admin.lecontems.net
admin.lincolnparkpublicschools.com
admin.missionviejochristian.com
admin.newhope-christianschool.org
admin.pendleton.bpsd.k12.ca.us
admin.ramonaschool.org
admin.stjoebruins.com
admin.stpatrickcatholicschool.org
admin.tekoacharterschool.org
admin.valenciavikings.com
admin.wheeler.k12.hi.us
admin.whitaker.bpsd.k12.ca.us
akinseagles.org
bartowacademy.bartow.k12.ga.us
bpsd.k12.ca.us
carjes.sanjacinto.k12.ca.us
clhscadets.com
corey.bpsd.k12.ca.us
daes.sanjacinto.k12.ca.us
ehes.sanjacinto.k12.ca.us
emery.bpsd.k12.ca.us
gilbert.bpsd.k12.ca.us
guerrerothompson.org
haaheo.org
hickam.k12.hi.us
iroquois.k12.hi.us
jaees.sanjacinto.k12.ca.us
johnadamsacademy.com
johnadamsacademy.org
kahuluischool.k12.hi.us
lecontems.net
lee.tkschools.org
lincoln.johnadamsacademy.com
lincoln.johnadamsacademy.org
mces.sanjacinto.k12.ca.us
mcfall.tkschools.org
missionviejochristian.com
mvhs.sanjacinto.k12.ca.us
mvms.sanjacinto.k12.ca.us
newhope-christianschool.org
nmms.sanjacinto.k12.ca.us
page.tkschools.org
pendleton.bpsd.k12.ca.us
phes.sanjacinto.k12.ca.us
ramonaschool.org
roseville.johnadamsacademy.com
roseville.johnadamsacademy.org
sjes.sanjacinto.k12.ca.us
sjhs.sanjacinto.k12.ca.us
sjla.sanjacinto.k12.ca.us
stjoebruins.com
stpatrickcatholicschool.org
tkhs.tkschools.org
tkms.tkschools.org
valenciavikings.com
whitaker.bpsd.k12.ca.us
woodland.bartow.k12.ga.us
www.akinseagles.org
www.bishopdubourg.org
www.bmhs.us
www.bpsd.k12.ca.us
www.clhscadets.com
www.cpdlf.org
www.cristoreydallas.org
www.cristoreysanjose.org
www.guerrerothompson.org
www.haaheo.org
www.haledon.org
www.hickam.k12.hi.us
www.johnadamsacademy.com
www.johnadamsacademy.org
www.lecontems.net
www.missionviejochristian.com
www.mrhs.net
www.ourshepherd.net
www.ppas.org
www.ramonaschool.org
www.sanjacinto.k12.ca.us
www.stjoebruins.com
www.stpatrickcatholicschool.org
www.tkschools.org
www.valenciavikings.com
www.wheeler.k12.hi.us

Other certificates including the domain name johnadamsacademy.com

(limited to 100 certificates)
roseville.johnadamsacademy.com
wps.windhamraymondschools.org
kahuluischool.k12.hi.us
edh.johnadamsacademy.com
admin.akinseagles.org
admin.akinseagles.org
johnadamsacademy.org
whitaker.bpsd.k12.ca.us
www.stedschool.org
ees.elkincityschools.org
admin.adulteducation.pleasantonusd.net
www.marianhs.org
admin.aspiraacademy.org
admin.adulteducation.pleasantonusd.net
admin.lincolnparkpublicschools.com
admin.aspiraacademy.org
sphstigers.org
www.ps229q.org
admin.akinseagles.org
lincoln.johnadamsacademy.com
mail.johnadamsacademy.com
admin.akinseagles.org
admin.aspiraacademy.org
admin.beatty.bpsd.k12.ca.us
roseville.johnadamsacademy.com
edh.johnadamsacademy.com
admin.ps229q.org
adairsvillehigh.bartow.k12.ga.us
admin.akinseagles.org
admin.akinseagles.org
adulted.sanjacinto.k12.ca.us
kahuluischool.k12.hi.us
admin.veritasca.org
admin.cra.freeholdtwp.k12.nj.us
admin.adulteducation.pleasantonusd.net
admin.newhope-christianschool.org
admin.hamlincharter.org
mail.johnadamsacademy.com
admin.highlandcreekelementaryschool.wearecms.com
admin.bpsd.k12.ca.us
admin.op.aceroschools.org
admin.church.spxtulsa.org
windhamraymondschools.org
admin.akinseagles.org
centralvalley.kernhigh.org
admin.adulteducation.pleasantonusd.net
admin.aspiraacademy.org
mail.johnadamsacademy.com
www.stanns.us
stonecanyon.owassops.org
admin.akinseagles.org
johnadamsacademy.com
lincoln.johnadamsacademy.com
admin.adulteducation.pleasantonusd.net
admin.famudrs.org
admin.akinseagles.org
admin.akinseagles.org
www.rosedrive.pylusd.org
admin.tekoacharterschool.org
admin.akinseagles.org
adairsvillemiddle.bartow.k12.ga.us
admin.hs.notredameacademy.org
admin.akinseagles.org
hs.westwoodisd.net
athletics.northhavenschools.org
www.johnadamsacademy.com
admin.notredameacademy.org
www.halb.org
admin.akinseagles.org
www.frontieracademy.net
dudley.centerusd.org
admin.adulteducation.pleasantonusd.net
mail.johnadamsacademy.com
admin.hilohs.k12.hi.us
admin.johnadamsacademy.com
www.kalama.k12.hi.us
admin.aspiraacademy.org
famudrs.org
admin.hallett.mlsd.org
www.cpdlf.org
johnadamsacademy.org
admin.bpjh.bpsd.k12.ca.us
adulted.sanjacinto.k12.ca.us
admin.dm.aceroschools.org
admin.ahs.alleghany.k12.nc.us
admin.adulteducation.pleasantonusd.net
wfs.freeholdtwp.k12.nj.us
northhavenschools.org
admin.aspiraacademy.org
woodlandms.bartow.k12.ga.us
admin.adulteducation.pleasantonusd.net
rt.aceroschools.org
admin.shyaa.arthuracademy.org
roseville.johnadamsacademy.com
admin.aspiraacademy.org
admin.akinseagles.org
admin.akinseagles.org
admin.adulteducation.pleasantonusd.net
admin.adulteducation.pleasantonusd.net
admin.akinseagles.org

Certificate

The complete raw certificate details for roseville.johnadamsacademy.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264040877989995281587824802027354967654943
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-19 11:05:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-20 11:05:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'roseville.johnadamsacademy.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2269 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adairsvillehigh.bartow.k12.ga.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.akinseagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bpsd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.clhscadets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.emery.bpsd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gilbert.bpsd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.guerrerothompson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.haaheo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.halb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hickam.k12.hi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.johnadamsacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lecontems.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lincolnparkpublicschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.missionviejochristian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.newhope-christianschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pendleton.bpsd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ramonaschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stjoebruins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stpatrickcatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tekoacharterschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.valenciavikings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wheeler.k12.hi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.whitaker.bpsd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akinseagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bartowacademy.bartow.k12.ga.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bpsd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carjes.sanjacinto.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clhscadets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corey.bpsd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daes.sanjacinto.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehes.sanjacinto.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emery.bpsd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gilbert.bpsd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guerrerothompson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haaheo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hickam.k12.hi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iroquois.k12.hi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaees.sanjacinto.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnadamsacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnadamsacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kahuluischool.k12.hi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lecontems.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lee.tkschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincoln.johnadamsacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincoln.johnadamsacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mces.sanjacinto.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcfall.tkschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missionviejochristian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvhs.sanjacinto.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvms.sanjacinto.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newhope-christianschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmms.sanjacinto.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'page.tkschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pendleton.bpsd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phes.sanjacinto.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramonaschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roseville.johnadamsacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roseville.johnadamsacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjes.sanjacinto.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjhs.sanjacinto.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjla.sanjacinto.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjoebruins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpatrickcatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tkhs.tkschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tkms.tkschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valenciavikings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitaker.bpsd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodland.bartow.k12.ga.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akinseagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bishopdubourg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmhs.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bpsd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clhscadets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpdlf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cristoreydallas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cristoreysanjose.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guerrerothompson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haaheo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haledon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hickam.k12.hi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnadamsacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnadamsacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lecontems.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missionviejochristian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mrhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourshepherd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ppas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ramonaschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanjacinto.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjoebruins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpatrickcatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tkschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valenciavikings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wheeler.k12.hi.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016905a5839300000403004630440220131dabdb00df631b2418eebbd8b709b07bed9b1e166d266b070182b9eaf0b481022029e1cc6aea573289c78290c834836a59619bf3f6b58e7b8b89df6c977581335200760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016905a583e50000040300473045022100f3aea9ba62b0c965f5c5904e0f0feff45c14694ae0403c998d74eb7c0269c1e70220475acf486389c908a7aa553b89df6a22ad065e707524c0a8ebd27cb941cb6166
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009bfbb258b1e066cfdb68602747f3b3090bc5eb15b0d7fe5893880bb8fbc684775a657faa6567cf8bcb5db563a79f27d960ef523f1949348a5a6021c1a01d54ae712e856eb83b77432c89cd8e24d3c4e62a38d6944254c23fd8ee7b21a8fe18cfcc515a7306a0c5d0842a5cf3c25d5d9fbaa2662e4cb71c790943d98d9dcacc45b07fb8d57382b2f0f92f3af691b81b49fc979bfe854ec82fdb748d4429089d4ff37e44101300c9d9f8d12b9ab41dd2e806d25075888a5a8543f2d857e0e92aa19854ffa176b8bcde990d0fc38f8a7be84c7012b2462d617aea80e41afb47ea6d6e3a08e98acb2098e359555749580019f1342ebe35d4109c073edbcc632ae062