parish.sangabrielmissionchurch.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0f:96:72:a9:f1:a7:27:4d:69:5e:31:93:92:25:82:9e:e2 was issued on by Let's Encrypt.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=parish.sangabrielmissionchurch.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0f:96:72:a9:f1:a7:27:4d:69:5e:31:93:92:25:82:9e:e2
Serial Number (int): 266641072867177368936490592435914015940322
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d0:53:73:2a:43:dd:52:55:46:e6:84:28:81:98:74:48:94:42:92:37
Fingerprint (sha256): e8:ae:30:fc:aa:63:e4:db:ea:3f:51:84:60:0e:9c:40:bb:66:27:ad:b3:fe:67:e5:32:3c:21:00:1f:97:76:c7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate parish.sangabrielmissionchurch.org

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for parish.sangabrielmissionchurch.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.angelocatholicschool.com
admin.bellhs.org
admin.cds.pusdschools.net
admin.compton.k12.ca.us
admin.eastlandisd.net
admin.ece.pusdschools.net
admin.elkincityschools.org
admin.ems.elkincityschools.org
admin.euroamericanosur.edu.mx
admin.greenfieldhs.org
admin.hamiltonmiddle.org
admin.kingcityhs.org
admin.newlamiddle.org
admin.redeemerschool.net
admin.rockwoodprep.org
admin.sangabrielmissionchurch.org
angelocatholicschool.com
angelocatholicschool.org
bellhs.org
cds.pusdschools.net
chs.lowndes.k12.ms.us
church.christrpv.com
cms.lowndes.k12.ms.us
compass.creightonschools.org
ctc.lowndes.k12.ms.us
eastlandisd.net
ecc.eastlandisd.net
ehs.eastlandisd.net
el.gatesvilleisd.org
elkincityschools.org
ems.eastlandisd.net
ems.elkincityschools.org
es.postisd.net
es.rs-wolves.com
ges.giddingsisd.net
ghs.giddingsisd.net
giddingsisd.net
gis.giddingsisd.net
gms.giddingsisd.net
greenfieldhs.org
hs.fairfieldcityschools.com
hs.gatesvilleisd.org
hs.postisd.net
hs.rs-wolves.com
hs.somervilleisd.org
in.gatesvilleisd.org
is.rs-wolves.com
jh.gatesvilleisd.org
kingcityhs.org
ms.postisd.net
ms.rs-wolves.com
newlamiddle.org
nhhs.lowndes.k12.ms.us
parish.sangabrielmissionchurch.org
pr.gatesvilleisd.org
preschool.christrpv.com
ps.rs-wolves.com
redeemerschool.net
sangabrielmissionchurch.org
school.christrpv.com
siebert.eastlandisd.net
web.euroamericanosur.edu.mx
wpadmin.chs.lowndes.k12.ms.us
wpadmin.cms.lowndes.k12.ms.us
wpadmin.ctc.lowndes.k12.ms.us
wpadmin.nhes.lowndes.k12.ms.us
wpadmin.nhhs.lowndes.k12.ms.us
www.angelocatholicschool.com
www.angelocatholicschool.org
www.bellhs.org
www.christrpv.com
www.cshm.org
www.darnallcharter.org
www.eastland.esc14.net
www.eastlandisd.net
www.elkincityschools.org
www.exteraschools.org
www.fairfieldcityschools.com
www.gatesvilleisd.org
www.giddings.txed.net
www.giddingsisd.net
www.greenfieldhs.org
www.hamiltonmiddle.org
www.kingcityhs.org
www.nchcityschools.org
www.newlamiddle.org
www.postisd.net
www.psusd.k12.az.us
www.psusd8.org
www.redeemerschool.net
www.rs-wolves.com
www.sangabrielmissionchurch.org
www.smithvilleisd.org
www.wlisd.net
www.wolves.k12.mo.us

Other certificates including the domain name sangabrielmissionchurch.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for parish.sangabrielmissionchurch.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIO9TCCDd2gAwIBAgISAw+WcqnxpydNaV4xk5Ilgp7iMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEyMjEwMjA2MjdaFw0x
OTAzMjEwMjA2MjdaMC0xKzApBgNVBAMTInBhcmlzaC5zYW5nYWJyaWVsbWlzc2lv
bmNodXJjaC5vcmcwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCtrIXp
7mbejFBtMdv7bPut9hUKX6mHmbwUkk4SAS2wWeHzgwVeEiXu4Q62pKUwqxHbZ3Nw
0C0rUbmlXdHhEGCfXxFMedMP19LbsnHJ7J+Vd91RftXDhoavIx/wwT5kaGhpA/Rd
gHdcMauZAXdn+HZ7pK1qC5s76lXAXMbxUMB2dqGxStseulJ5+JrOLKGF4+QvfNCD
86ZpCQrvACEk7x6XbPfvksN3ZUjCt1ZA/YmNXz3Zh360hk6cCTaPIOW/cxhcpcaK
UHKtCVZnUB2M4p9GJjRyQW678NiS6+Q0qbZ/fNRq/DeyUK6NlYeQgdk2lo23F+yu
ki1QirlO7vNt6T8xH8kxH2dx5bJnYy6d35JuB8t/3rA+FUFquuynUc1H4iSjK2vk
8w1EHPBbMG9MPwXurpyRRsiCl6juy2ftvQg1c9iA1PvMVf9Q0JxaP5pon4q7wwpX
gQQS5qK+Nb8/5ObrheNc2M/0XVbz7m2VwmAmEZTITKUJS0BGqE+iNTNCeuHWJRIx
E0jaWIngi53H+jdDgTbDoC5309jJXTmkWAx1Itg1EZBPJBFJpJtDceZ9mL+lCMXJ
SiGIDv+HSiZSYIgOJBUbfR4eFvc4g/dsmKxdkrioSuflkOYp1SA0LcZL7LCtMAFi
PQ34RSeiGRSLqKQPiZ7qjnyyr8hBWbJ6bUz8TQIDAQABo4IK8DCCCuwwDgYDVR0P
AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB
Af8EAjAAMB0GA1UdDgQWBBQva8hNbCwuMvIAIP8tTWxa/G66uzAfBgNVHSMEGDAW
gBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUH
MAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUH
MAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMIIIpQYDVR0R
BIIInDCCCJiCHmFkbWluLmFuZ2Vsb2NhdGhvbGljc2Nob29sLmNvbYIQYWRtaW4u
YmVsbGhzLm9yZ4IZYWRtaW4uY2RzLnB1c2RzY2hvb2xzLm5ldIIXYWRtaW4uY29t
cHRvbi5rMTIuY2EudXOCFWFkbWluLmVhc3RsYW5kaXNkLm5ldIIZYWRtaW4uZWNl
LnB1c2RzY2hvb2xzLm5ldIIaYWRtaW4uZWxraW5jaXR5c2Nob29scy5vcmeCHmFk
bWluLmVtcy5lbGtpbmNpdHlzY2hvb2xzLm9yZ4IdYWRtaW4uZXVyb2FtZXJpY2Fu
b3N1ci5lZHUubXiCFmFkbWluLmdyZWVuZmllbGRocy5vcmeCGGFkbWluLmhhbWls
dG9ubWlkZGxlLm9yZ4IUYWRtaW4ua2luZ2NpdHlocy5vcmeCFWFkbWluLm5ld2xh
bWlkZGxlLm9yZ4IYYWRtaW4ucmVkZWVtZXJzY2hvb2wubmV0ghZhZG1pbi5yb2Nr
d29vZHByZXAub3JngiFhZG1pbi5zYW5nYWJyaWVsbWlzc2lvbmNodXJjaC5vcmeC
GGFuZ2Vsb2NhdGhvbGljc2Nob29sLmNvbYIYYW5nZWxvY2F0aG9saWNzY2hvb2wu
b3JnggpiZWxsaHMub3JnghNjZHMucHVzZHNjaG9vbHMubmV0ghVjaHMubG93bmRl
cy5rMTIubXMudXOCFGNodXJjaC5jaHJpc3RycHYuY29tghVjbXMubG93bmRlcy5r
MTIubXMudXOCHGNvbXBhc3MuY3JlaWdodG9uc2Nob29scy5vcmeCFWN0Yy5sb3du
ZGVzLmsxMi5tcy51c4IPZWFzdGxhbmRpc2QubmV0ghNlY2MuZWFzdGxhbmRpc2Qu
bmV0ghNlaHMuZWFzdGxhbmRpc2QubmV0ghRlbC5nYXRlc3ZpbGxlaXNkLm9yZ4IU
ZWxraW5jaXR5c2Nob29scy5vcmeCE2Vtcy5lYXN0bGFuZGlzZC5uZXSCGGVtcy5l
bGtpbmNpdHlzY2hvb2xzLm9yZ4IOZXMucG9zdGlzZC5uZXSCEGVzLnJzLXdvbHZl
cy5jb22CE2dlcy5naWRkaW5nc2lzZC5uZXSCE2docy5naWRkaW5nc2lzZC5uZXSC
D2dpZGRpbmdzaXNkLm5ldIITZ2lzLmdpZGRpbmdzaXNkLm5ldIITZ21zLmdpZGRp
bmdzaXNkLm5ldIIQZ3JlZW5maWVsZGhzLm9yZ4IbaHMuZmFpcmZpZWxkY2l0eXNj
aG9vbHMuY29tghRocy5nYXRlc3ZpbGxlaXNkLm9yZ4IOaHMucG9zdGlzZC5uZXSC
EGhzLnJzLXdvbHZlcy5jb22CFGhzLnNvbWVydmlsbGVpc2Qub3JnghRpbi5nYXRl
c3ZpbGxlaXNkLm9yZ4IQaXMucnMtd29sdmVzLmNvbYIUamguZ2F0ZXN2aWxsZWlz
ZC5vcmeCDmtpbmdjaXR5aHMub3Jngg5tcy5wb3N0aXNkLm5ldIIQbXMucnMtd29s
dmVzLmNvbYIPbmV3bGFtaWRkbGUub3JnghZuaGhzLmxvd25kZXMuazEyLm1zLnVz
giJwYXJpc2guc2FuZ2FicmllbG1pc3Npb25jaHVyY2gub3JnghRwci5nYXRlc3Zp
bGxlaXNkLm9yZ4IXcHJlc2Nob29sLmNocmlzdHJwdi5jb22CEHBzLnJzLXdvbHZl
cy5jb22CEnJlZGVlbWVyc2Nob29sLm5ldIIbc2FuZ2FicmllbG1pc3Npb25jaHVy
Y2gub3JnghRzY2hvb2wuY2hyaXN0cnB2LmNvbYIXc2llYmVydC5lYXN0bGFuZGlz
ZC5uZXSCG3dlYi5ldXJvYW1lcmljYW5vc3VyLmVkdS5teIIdd3BhZG1pbi5jaHMu
bG93bmRlcy5rMTIubXMudXOCHXdwYWRtaW4uY21zLmxvd25kZXMuazEyLm1zLnVz
gh13cGFkbWluLmN0Yy5sb3duZGVzLmsxMi5tcy51c4Ied3BhZG1pbi5uaGVzLmxv
d25kZXMuazEyLm1zLnVzgh53cGFkbWluLm5oaHMubG93bmRlcy5rMTIubXMudXOC
HHd3dy5hbmdlbG9jYXRob2xpY3NjaG9vbC5jb22CHHd3dy5hbmdlbG9jYXRob2xp
Y3NjaG9vbC5vcmeCDnd3dy5iZWxsaHMub3JnghF3d3cuY2hyaXN0cnB2LmNvbYIM
d3d3LmNzaG0ub3JnghZ3d3cuZGFybmFsbGNoYXJ0ZXIub3JnghZ3d3cuZWFzdGxh
bmQuZXNjMTQubmV0ghN3d3cuZWFzdGxhbmRpc2QubmV0ghh3d3cuZWxraW5jaXR5
c2Nob29scy5vcmeCFXd3dy5leHRlcmFzY2hvb2xzLm9yZ4Icd3d3LmZhaXJmaWVs
ZGNpdHlzY2hvb2xzLmNvbYIVd3d3LmdhdGVzdmlsbGVpc2Qub3JnghV3d3cuZ2lk
ZGluZ3MudHhlZC5uZXSCE3d3dy5naWRkaW5nc2lzZC5uZXSCFHd3dy5ncmVlbmZp
ZWxkaHMub3JnghZ3d3cuaGFtaWx0b25taWRkbGUub3JnghJ3d3cua2luZ2NpdHlo
cy5vcmeCFnd3dy5uY2hjaXR5c2Nob29scy5vcmeCE3d3dy5uZXdsYW1pZGRsZS5v
cmeCD3d3dy5wb3N0aXNkLm5ldIITd3d3LnBzdXNkLmsxMi5hei51c4IOd3d3LnBz
dXNkOC5vcmeCFnd3dy5yZWRlZW1lcnNjaG9vbC5uZXSCEXd3dy5ycy13b2x2ZXMu
Y29tgh93d3cuc2FuZ2FicmllbG1pc3Npb25jaHVyY2gub3JnghV3d3cuc21pdGh2
aWxsZWlzZC5vcmeCDXd3dy53bGlzZC5uZXSCFHd3dy53b2x2ZXMuazEyLm1vLnVz
MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH
AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB
9ASB8QDvAHUA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFnzrp+
0QAABAMARjBEAiA9LuASQAmdDRsn65eLAOq4UHA0x7k5ElR/aq9kliTfIAIgaED6
OAMIYe79LNxiLzD4NMKtH+q1jJJjeMFTa8kcCRwAdgBj8tvN6DvMLM8LcoQnV2sz
pI1hd4+9daY4scdoVEvYjQAAAWfOun7QAAAEAwBHMEUCIQCqu2yGiKM00NSC+fkx
ifYauE3Cvv7JMc+KuMabzwQ8NgIgYom5CWZcCzp/wyVMArBvALkSyu/7PmmBL4AD
LEgRhEQwDQYJKoZIhvcNAQELBQADggEBAH/KtkGbboPOqy9fyjGPjVg+tupDJDhq
ACvwiTDA5wJXuN4WNME3gIp386I8IhdP3v+TVWp405T0mOkFhiR+3tTpTpLArd2S
iYEjHl1v0ifG2LbWRxek3RJ83AGKXvpXtdUFVsKD1A618FL/2Nr63bKXHuHzKr9m
YpNB+DzD8MLP+6jQdhrarWCPvWWyL2zhZzNGiQqGg3VrSnUG7DU4kKfl5KDPI2i1
D68HWElrw4xCFoF+KDvyTVRByt+gmGN7JSeJCm56SgEJps5VUtHLWk9SE3/USpJd
Y/Q9FSZovQv2rczIXqE87gvMexhs+HzvT+dt9xsfqlGA9PzSGzA1UbY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266641072867177368936490592435914015940322
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-21 02:06:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-21 02:06:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'parish.sangabrielmissionchurch.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2204 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.angelocatholicschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bellhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cds.pusdschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.compton.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eastlandisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ece.pusdschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.elkincityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ems.elkincityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.euroamericanosur.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.greenfieldhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hamiltonmiddle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kingcityhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.newlamiddle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.redeemerschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rockwoodprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sangabrielmissionchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angelocatholicschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angelocatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cds.pusdschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chs.lowndes.k12.ms.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'church.christrpv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.lowndes.k12.ms.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compass.creightonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctc.lowndes.k12.ms.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastlandisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecc.eastlandisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehs.eastlandisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'el.gatesvilleisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elkincityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ems.eastlandisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ems.elkincityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.postisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.rs-wolves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ges.giddingsisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghs.giddingsisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giddingsisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gis.giddingsisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gms.giddingsisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenfieldhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.fairfieldcityschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.gatesvilleisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.postisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.rs-wolves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.somervilleisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in.gatesvilleisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is.rs-wolves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jh.gatesvilleisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingcityhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.postisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.rs-wolves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newlamiddle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhhs.lowndes.k12.ms.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parish.sangabrielmissionchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.gatesvilleisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preschool.christrpv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps.rs-wolves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redeemerschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sangabrielmissionchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.christrpv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siebert.eastlandisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.euroamericanosur.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpadmin.chs.lowndes.k12.ms.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpadmin.cms.lowndes.k12.ms.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpadmin.ctc.lowndes.k12.ms.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpadmin.nhes.lowndes.k12.ms.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpadmin.nhhs.lowndes.k12.ms.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.angelocatholicschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.angelocatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christrpv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cshm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.darnallcharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastland.esc14.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastlandisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elkincityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exteraschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fairfieldcityschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gatesvilleisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giddings.txed.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giddingsisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenfieldhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hamiltonmiddle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingcityhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nchcityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newlamiddle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.postisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.psusd.k12.az.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.psusd8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redeemerschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rs-wolves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sangabrielmissionchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smithvilleisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wlisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wolves.k12.mo.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000167ceba7ed1000004030046304402203d2ee01240099d0d1b27eb978b00eab8507034c7b93912547f6aaf649624df2002206840fa38030861eefd2cdc622f30f834c2ad1feab58c926378c1536bc91c091c00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000167ceba7ed00000040300473045022100aabb6c8688a334d0d482f9f93189f61ab84dc2befec931cf8ab8c69bcf043c3602206289b909665c0b3a7fc3254c02b06f00b912caeffb3e69812f80032c48118444
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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