webservices.lskysd.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2f:32:68:b8:93:a0:0e:49:84:fb:8f:68:92:e1:17:1c:2a was issued on by Let's Encrypt.

With 71 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=webservices.lskysd.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2f:32:68:b8:93:a0:0e:49:84:fb:8f:68:92:e1:17:1c:2a
Serial Number (int): 277397134182886822973591818319091958488106
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 65:fd:9f:47:96:4e:6b:ef:01:27:3d:3a:04:61:26:94:65:45:9e:03
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): dd:ab:b8:e8:63:4e:3c:8b:94:f3:8a:a2:82:04:f8:ff:76:59:00:c8
Fingerprint (sha256): e5:31:ca:35:05:f2:de:aa:b7:5e:d1:e5:c6:0c:4f:56:d3:a6:97:05:ab:f8:83:a8:9d:17:8f:be:e2:aa:b4:c8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate webservices.lskysd.ca

71

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webservices.lskysd.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

artsalive.lskysd.ca
bcs.lskysd.ca
bready.lskysd.ca
cando.lskysd.ca
ckes.lskysd.ca
ckhs.lskysd.ca
connaught.lskysd.ca
ejournalism.lskysd.ca
hafford.lskysd.ca
hartleyclark.lskysd.ca
heritagechristianschool.lskysd.ca
infoliteracy.lskysd.ca
kerrobert.lskysd.ca
languageandliteracy.lskysd.ca
lawrence.lskysd.ca
learning.lskysd.ca
leoville.lskysd.ca
library.bready.lskysd.ca
library.nbchs.lskysd.ca
luseland.lskysd.ca
macklin.lskysd.ca
manacowin.lskysd.ca
maymont.lskysd.ca
mckitrick.lskysd.ca
mclurg.lskysd.ca
medstead.lskysd.ca
nbchs.lskysd.ca
normancarter.lskysd.ca
olc.nbchs.lskysd.ca
sldata.lskysd.ca
spiritwoodhs.lskysd.ca
stvital.lskysd.ca
track.lskysd.ca
treaty6education.lskysd.ca
uchs.lskysd.ca
ups.lskysd.ca
webservices.lskysd.ca
www.artsalive.lskysd.ca
www.bcs.lskysd.ca
www.bready.lskysd.ca
www.cando.lskysd.ca
www.ckes.lskysd.ca
www.ckhs.lskysd.ca
www.connaught.lskysd.ca
www.ejournalism.lskysd.ca
www.hafford.lskysd.ca
www.hartleyclark.lskysd.ca
www.heritagechristianschool.lskysd.ca
www.infoliteracy.lskysd.ca
www.kerrobert.lskysd.ca
www.languageandliteracy.lskysd.ca
www.lawrence.lskysd.ca
www.leoville.lskysd.ca
www.library.bready.lskysd.ca
www.library.nbchs.lskysd.ca
www.luseland.lskysd.ca
www.macklin.lskysd.ca
www.manacowin.lskysd.ca
www.maymont.lskysd.ca
www.mckitrick.lskysd.ca
www.mclurg.lskysd.ca
www.medstead.lskysd.ca
www.nbchs.lskysd.ca
www.normancarter.lskysd.ca
www.olc.nbchs.lskysd.ca
www.phoenix.lskysd.ca
www.spiritwoodhs.lskysd.ca
www.stvital.lskysd.ca
www.treaty6education.lskysd.ca
www.uchs.lskysd.ca
www.ups.lskysd.ca

Other certificates including the domain name lskysd.ca

(limited to 100 certificates)
helpdesk.lskysd.ca
*.lskysd.ca
artsalive.lskysd.ca
artsalive.lskysd.ca
P-CAMNE.IGLOODIGITALWORKPLACES.CA
mil.ldcsb.ca
admin.mckitrick.lskysd.ca
www.stgregsschool.org
webservices.lskysd.ca
P-CAMNE.IGLOODIGITALWORKPLACES.CA
ckcs.lskysd.ca
admin.bands.dekalbcentral.net
*.lskysd.ca
*.lskysd.ca
owa.lskysd.ca
mail.staff.lskysd.ca
P-CAMNE.IGLOODIGITALWORKPLACES.CA
shs.lskysd.ca
artsalive.lskysd.ca
admin.bcs.lskysd.ca
*.lskysd.ca
admin.bands.dekalbcentral.net
www.lskysd.ca
webservices.lskysd.ca
webservices.lskysd.ca
artsalive.lskysd.ca
fallbrookhs.org
P-CAMNE.IGLOODIGITALWORKPLACES.CA
admin.ups.lskysd.ca
P-CAMNE.IGLOODIGITALWORKPLACES.CA
mail.staff.lskysd.ca
mail.staff.lskysd.ca
*.lskysd.ca
sis.lskysd.ca
admin.bcs.lskysd.ca
lskysd.ca
webservices.lskysd.ca
artsalive.lskysd.ca
ckcs.lskysd.ca
www.northregionselpa.org
webservices.lskysd.ca
admin.bcs.lskysd.ca
webservices.lskysd.ca
webservices.lskysd.ca
ups.lskysd.ca
webservices.lskysd.ca
admin.bcs.lskysd.ca
lync.lskysd.ca

Certificate

The complete raw certificate details for webservices.lskysd.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILUjCCCjqgAwIBAgISAy8yaLiToA5JhPuPaJLhFxwqMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjA2MjQxOTQ0MDBaFw0x
NjA5MjIxOTQ0MDBaMCAxHjAcBgNVBAMTFXdlYnNlcnZpY2VzLmxza3lzZC5jYTCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJUqeG9xdMsJ5E5eKgelTRXG
TNLXz/Hy3ReyM8JnTz90Vluyz1AE2Hc9wtbdpE+lf7fbG9MnFjwsBVDJjW5v/LNU
VWQK86lG5FG2hAWHDajMbsn7bN9QQ3uJCCO23c5rFa716Xh6+KJNefxWGBla+Dzp
lnm6tbGnekRKmWwCE6+SShRusgj45Uc1MbnW9dYvmMlsdaHA9DGGtRsv6UJ/vvKu
8Vy+lybxDgi33r+mOLoiILVNmbV718nYoNQlXgHotfD/9oKNoetqTJeIx+nKFx58
6tWhrqzpDKeDdqzhpi/uvaXp8A2+6z/crZLlKZSokjZHJ77Pv6IzCkUpFH590BkC
AwEAAaOCCFowgghWMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUZf2fR5ZOa+8BJz06
BGEmlGVFngMwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwcAYIKwYB
BQUHAQEEZDBiMC8GCCsGAQUFBzABhiNodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnLzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNl
bmNyeXB0Lm9yZy8wggZiBgNVHREEggZZMIIGVYITYXJ0c2FsaXZlLmxza3lzZC5j
YYINYmNzLmxza3lzZC5jYYIQYnJlYWR5Lmxza3lzZC5jYYIPY2FuZG8ubHNreXNk
LmNhgg5ja2VzLmxza3lzZC5jYYIOY2tocy5sc2t5c2QuY2GCE2Nvbm5hdWdodC5s
c2t5c2QuY2GCFWVqb3VybmFsaXNtLmxza3lzZC5jYYIRaGFmZm9yZC5sc2t5c2Qu
Y2GCFmhhcnRsZXljbGFyay5sc2t5c2QuY2GCIWhlcml0YWdlY2hyaXN0aWFuc2No
b29sLmxza3lzZC5jYYIWaW5mb2xpdGVyYWN5Lmxza3lzZC5jYYITa2Vycm9iZXJ0
Lmxza3lzZC5jYYIdbGFuZ3VhZ2VhbmRsaXRlcmFjeS5sc2t5c2QuY2GCEmxhd3Jl
bmNlLmxza3lzZC5jYYISbGVhcm5pbmcubHNreXNkLmNhghJsZW92aWxsZS5sc2t5
c2QuY2GCGGxpYnJhcnkuYnJlYWR5Lmxza3lzZC5jYYIXbGlicmFyeS5uYmNocy5s
c2t5c2QuY2GCEmx1c2VsYW5kLmxza3lzZC5jYYIRbWFja2xpbi5sc2t5c2QuY2GC
E21hbmFjb3dpbi5sc2t5c2QuY2GCEW1heW1vbnQubHNreXNkLmNhghNtY2tpdHJp
Y2subHNreXNkLmNhghBtY2x1cmcubHNreXNkLmNhghJtZWRzdGVhZC5sc2t5c2Qu
Y2GCD25iY2hzLmxza3lzZC5jYYIWbm9ybWFuY2FydGVyLmxza3lzZC5jYYITb2xj
Lm5iY2hzLmxza3lzZC5jYYIQc2xkYXRhLmxza3lzZC5jYYIWc3Bpcml0d29vZGhz
Lmxza3lzZC5jYYIRc3R2aXRhbC5sc2t5c2QuY2GCD3RyYWNrLmxza3lzZC5jYYIa
dHJlYXR5NmVkdWNhdGlvbi5sc2t5c2QuY2GCDnVjaHMubHNreXNkLmNhgg11cHMu
bHNreXNkLmNhghV3ZWJzZXJ2aWNlcy5sc2t5c2QuY2GCF3d3dy5hcnRzYWxpdmUu
bHNreXNkLmNhghF3d3cuYmNzLmxza3lzZC5jYYIUd3d3LmJyZWFkeS5sc2t5c2Qu
Y2GCE3d3dy5jYW5kby5sc2t5c2QuY2GCEnd3dy5ja2VzLmxza3lzZC5jYYISd3d3
LmNraHMubHNreXNkLmNhghd3d3cuY29ubmF1Z2h0Lmxza3lzZC5jYYIZd3d3LmVq
b3VybmFsaXNtLmxza3lzZC5jYYIVd3d3LmhhZmZvcmQubHNreXNkLmNhghp3d3cu
aGFydGxleWNsYXJrLmxza3lzZC5jYYIld3d3Lmhlcml0YWdlY2hyaXN0aWFuc2No
b29sLmxza3lzZC5jYYIad3d3LmluZm9saXRlcmFjeS5sc2t5c2QuY2GCF3d3dy5r
ZXJyb2JlcnQubHNreXNkLmNhgiF3d3cubGFuZ3VhZ2VhbmRsaXRlcmFjeS5sc2t5
c2QuY2GCFnd3dy5sYXdyZW5jZS5sc2t5c2QuY2GCFnd3dy5sZW92aWxsZS5sc2t5
c2QuY2GCHHd3dy5saWJyYXJ5LmJyZWFkeS5sc2t5c2QuY2GCG3d3dy5saWJyYXJ5
Lm5iY2hzLmxza3lzZC5jYYIWd3d3Lmx1c2VsYW5kLmxza3lzZC5jYYIVd3d3Lm1h
Y2tsaW4ubHNreXNkLmNhghd3d3cubWFuYWNvd2luLmxza3lzZC5jYYIVd3d3Lm1h
eW1vbnQubHNreXNkLmNhghd3d3cubWNraXRyaWNrLmxza3lzZC5jYYIUd3d3Lm1j
bHVyZy5sc2t5c2QuY2GCFnd3dy5tZWRzdGVhZC5sc2t5c2QuY2GCE3d3dy5uYmNo
cy5sc2t5c2QuY2GCGnd3dy5ub3JtYW5jYXJ0ZXIubHNreXNkLmNhghd3d3cub2xj
Lm5iY2hzLmxza3lzZC5jYYIVd3d3LnBob2VuaXgubHNreXNkLmNhghp3d3cuc3Bp
cml0d29vZGhzLmxza3lzZC5jYYIVd3d3LnN0dml0YWwubHNreXNkLmNhgh53d3cu
dHJlYXR5NmVkdWNhdGlvbi5sc2t5c2QuY2GCEnd3dy51Y2hzLmxza3lzZC5jYYIR
d3d3LnVwcy5sc2t5c2QuY2Ewgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysG
AQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0
Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5
IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBh
Y2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBo
dHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsF
AAOCAQEAhJEjYC3C6M5/yoboWzCDt3+7M8JlQTpB1YdOaWBLnrt0XUOc6A9oYpHc
ZPwsGuqZN+Z/dhfekxHwjfglo43Pga3JAaQPoEDB/AdzNauf9bXaUj2SJa4nOOsg
3hNuLJSsYagyCx0MNjI/J/EJQ2FIeGr2AL846W0CQGkSJFQIu0VsMLr/JSrcAlFn
9lZyfjJwVBCZ6rKks9h8DAPuorJDFpuD4UtC+bekLOv5uPuBHBTZgNJWOyYUsFhv
sbm2CSeHB023rxbP0Y2FR6Yt8cy0+VfNxFYu2Y4ILUzEXizKZJOLJODesN+xLKIo
R8QezXNO+WFosqbmXyGTHK+UMF9W2g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSp4b3F0ywnkTl4qB6VN
FcZM0tfP8fLdF7IzwmdPP3RWW7LPUATYdz3C1t2kT6V/t9sb0ycWPCwFUMmNbm/8
s1RVZArzqUbkUbaEBYcNqMxuyfts31BDe4kII7bdzmsVrvXpeHr4ok15/FYYGVr4
POmWebq1sad6REqZbAITr5JKFG6yCPjlRzUxudb11i+YyWx1ocD0MYa1Gy/pQn++
8q7xXL6XJvEOCLfev6Y4uiIgtU2ZtXvXydig1CVeAei18P/2go2h62pMl4jH6coX
Hnzq1aGurOkMp4N2rOGmL+69penwDb7rP9ytkuUplKiSNkcnvs+/ojMKRSkUfn3Q
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277397134182886822973591818319091958488106
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-24 19:44:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-22 19:44:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webservices.lskysd.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18830450399633215743717501853542477948738662687200303353576596645726429620513094513044569815227354866758636640340324433503139074655661214280616887417178544761134891074594701240954166203822785209665321033123430284768824834258918693382545476395798024776282083877090724264015612668204314630146686853055771861328022352854341546344037867482269638915765214388372100860841579860279820979538707565327201418806799667052682701149497195646417995453007519305457206271410771959413752737842741660107519632907072313636123921097597360189373681211447933725721807811000550705634731113209450692655167301926663751895385691388591543799833
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							65fd9f47964e6bef01273d3a0461269465459e03
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1625 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artsalive.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcs.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bready.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cando.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ckes.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ckhs.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connaught.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ejournalism.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hafford.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hartleyclark.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heritagechristianschool.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infoliteracy.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kerrobert.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'languageandliteracy.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawrence.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learning.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leoville.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'library.bready.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'library.nbchs.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luseland.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macklin.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manacowin.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maymont.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mckitrick.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mclurg.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medstead.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbchs.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'normancarter.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olc.nbchs.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sldata.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiritwoodhs.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stvital.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'track.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treaty6education.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uchs.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ups.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webservices.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artsalive.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcs.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bready.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cando.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ckes.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ckhs.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connaught.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ejournalism.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hafford.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hartleyclark.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heritagechristianschool.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infoliteracy.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kerrobert.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.languageandliteracy.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lawrence.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leoville.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.library.bready.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.library.nbchs.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luseland.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macklin.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manacowin.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maymont.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mckitrick.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mclurg.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medstead.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nbchs.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.normancarter.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olc.nbchs.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phoenix.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiritwoodhs.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stvital.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.treaty6education.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uchs.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ups.lskysd.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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