tiegerman.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e7:17:76:8a:d8:97:a8:e0:4b:fe:b8:1d:69:ae:32:eb:08 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tiegerman.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e7:17:76:8a:d8:97:a8:e0:4b:fe:b8:1d:69:ae:32:eb:08
Serial Number (int): 339973272305082629976892473194244526500616
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 21:b4:37:a8:a1:26:2f:eb:96:b7:86:73:68:2f:07:5e:d1:0c:16:76
Fingerprint (sha256): e4:56:bd:6d:55:00:f3:9a:ab:39:dd:2f:34:9b:54:b7:45:85:9a:34:18:e8:fe:45:a1:7c:e7:76:df:37:12:13

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tiegerman.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tiegerman.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acatitlan.edu.mx
admin.acatitlan.edu.mx
admin.aikman.herefordisd.net
admin.athletics.rimsd41.org
admin.bluebonnet.herefordisd.net
admin.bradfordprep.org
admin.branch.luciamarschools.org
admin.carruselamericas.edu.mx
admin.cescalhanschool.org
admin.chscalhanschool.org
admin.cmscalhanschool.org
admin.dana.luciamarschools.org
admin.elementary.alexandercsd.org
admin.fairgrove.luciamarschools.org
admin.fcctc.franklincountyschoolsms.com
admin.fcle.franklincountyschoolsms.com
admin.fhs.franklincountyschoolsms.com
admin.fms.franklincountyschoolsms.com
admin.groverbeach.luciamarschools.org
admin.hcal.herefordisd.net
admin.hhs.herefordisd.net
admin.hjh.herefordisd.net
admin.hmelc.rimsd41.org
admin.hpa.herefordisd.net
admin.lopez.luciamarschools.org
admin.luciamarschools.org
admin.mesa.luciamarschools.org
admin.mhs.centerusd.org
admin.middlehigh.alexandercsd.org
admin.nw.herefordisd.net
admin.paulding.luciamarschools.org
admin.peninsulaheritage.org
admin.preparatoriagea.edu.mx
admin.riverside.k12.pa.us
admin.slc.herefordisd.net
admin.somersetprepdc.org
admin.sunrayisd.org
admin.tb.herefordisd.net
admin.thenewmvb.com
admin.tmlc.rimsd41.org
admin.todaysfreshstart.org
admin.wc.herefordisd.net
aikman.herefordisd.net
athletics.rimsd41.org
bluebonnet.herefordisd.net
bradfordprep.org
branch.luciamarschools.org
carruselamericas.edu.mx
cescalhanschool.org
chscalhanschool.org
cmscalhanschool.org
dana.luciamarschools.org
dlsnc.org
excel.dcs.edu
fairgrove.luciamarschools.org
fcctc.franklincountyschoolsms.com
fcle.franklincountyschoolsms.com
fcue.franklincountyschoolsms.com
fhs.franklincountyschoolsms.com
fms.franklincountyschoolsms.com
groverbeach.luciamarschools.org
hcal.herefordisd.net
hhs.herefordisd.net
hjh.herefordisd.net
hmelc.rimsd41.org
hpa.herefordisd.net
jhar.jubileeacademies.org
judkins.luciamarschools.org
lopez.luciamarschools.org
luciamarschools.org
mesa.luciamarschools.org
mhs.centerusd.org
nw.herefordisd.net
paulding.luciamarschools.org
peninsulaheritage.org
preparatoriagea.edu.mx
riverside.k12.pa.us
slc.herefordisd.net
somersetprepdc.org
sunrayisd.org
tb.herefordisd.net
thenewmvb.com
tiegerman.org
tmlc.rimsd41.org
todaysfreshstart.org
wc.herefordisd.net
www.bradfordprep.org
www.cescalhanschool.org
www.chscalhanschool.org
www.cmscalhanschool.org
www.dlsnc.org
www.herefordisd.net
www.luciamarschools.org
www.peninsulaheritage.org
www.riverside.k12.pa.us
www.somersetdc.com
www.somersetprepdc.org
www.sunrayisd.org
www.thenewmvb.com
www.todaysfreshstart.org

Other certificates including the domain name tiegerman.org

(limited to 100 certificates)
admin.adulted.lex2.org
admin.ames.spart6.org
tiegerman.org
admin.adulted.lex2.org
acatitlan.edu.mx
admin.adulted.lex2.org
www.tiegerman.org
acatitlan.edu.mx
tiegerman.org
adulted.lex2.org
admin.adulted.lex2.org
hayden.wsdk8.us
acatitlan.edu.mx
admin.l2ic.lex2.org
admin.adulted.lex2.org
tiegerman.org
www.tiegerman.org
admin.adulted.lex2.org
admin.adulted.lex2.org
admin.adulted.lex2.org
admin.adulted.lex2.org
acatitlan.edu.mx
tiegerman.org
tiegerman.org
acatitlan.edu.mx
tiegerman.org
tiegerman.org
anderson.wsdk8.us
tiegerman.org
bas.beaumontusd.us
acatitlan.edu.mx
admin.adulted.lex2.org
tiegerman.org
tiegerman.org
admin.adulted.lex2.org
www.stisaacjoguesschool.org
tiegerman.org

Certificate

The complete raw certificate details for tiegerman.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339973272305082629976892473194244526500616
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-21 01:57:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-19 01:57:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tiegerman.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2593 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acatitlan.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.acatitlan.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.aikman.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.athletics.rimsd41.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bluebonnet.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bradfordprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.branch.luciamarschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.carruselamericas.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cescalhanschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.chscalhanschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cmscalhanschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dana.luciamarschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.elementary.alexandercsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fairgrove.luciamarschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fcctc.franklincountyschoolsms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fcle.franklincountyschoolsms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fhs.franklincountyschoolsms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fms.franklincountyschoolsms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.groverbeach.luciamarschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hcal.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hhs.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hjh.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hmelc.rimsd41.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hpa.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lopez.luciamarschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.luciamarschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mesa.luciamarschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mhs.centerusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.middlehigh.alexandercsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nw.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.paulding.luciamarschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.peninsulaheritage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.preparatoriagea.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.riverside.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.slc.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.somersetprepdc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sunrayisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tb.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.thenewmvb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tmlc.rimsd41.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.todaysfreshstart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wc.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aikman.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athletics.rimsd41.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluebonnet.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bradfordprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branch.luciamarschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carruselamericas.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cescalhanschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chscalhanschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmscalhanschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dana.luciamarschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlsnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'excel.dcs.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fairgrove.luciamarschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcctc.franklincountyschoolsms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcle.franklincountyschoolsms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcue.franklincountyschoolsms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fhs.franklincountyschoolsms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fms.franklincountyschoolsms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groverbeach.luciamarschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcal.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhs.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hjh.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hmelc.rimsd41.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpa.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhar.jubileeacademies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'judkins.luciamarschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lopez.luciamarschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luciamarschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesa.luciamarschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhs.centerusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nw.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paulding.luciamarschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peninsulaheritage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preparatoriagea.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riverside.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slc.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'somersetprepdc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunrayisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tb.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thenewmvb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiegerman.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmlc.rimsd41.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'todaysfreshstart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wc.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bradfordprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cescalhanschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chscalhanschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmscalhanschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dlsnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.herefordisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luciamarschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peninsulaheritage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverside.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.somersetdc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.somersetprepdc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunrayisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thenewmvb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.todaysfreshstart.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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