lincolnton.lincolncharter.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:05:53:a8:48:b7:d7:10:00:0b:e4:d2:78:c1:8b:86:b7:04 was issued on by Let's Encrypt.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lincolnton.lincolncharter.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:05:53:a8:48:b7:d7:10:00:0b:e4:d2:78:c1:8b:86:b7:04
Serial Number (int): 263149469334306617948855930540575890519812
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 05:a6:2c:5c:73:b1:05:a3:2b:01:cb:7c:a5:7b:7e:da:5c:03:ae:38
Fingerprint (sha256): e9:04:b7:76:a0:79:75:2f:a5:3f:52:bc:b0:45:d0:fa:c1:d1:5f:e0:cd:96:c3:27:c9:7e:f1:10:c2:02:98:96

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lincolnton.lincolncharter.org

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lincolnton.lincolncharter.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.aes.lammersvilleschooldistrict.net
admin.afsenyc.org
admin.ashlandcityccs.net
admin.bes.lammersvilleschooldistrict.net
admin.bonnerprendie.com
admin.ccprep-academy.org
admin.cheathamcountyschools.net
admin.cheathamhighccs.net
admin.cheathammiddleccs.net
admin.colegioangloamericanohgo.edu.mx
admin.denver.lincolncharter.org
admin.eastcheathamccs.net
admin.estrellitahigh.com
admin.gageparkhs.org
admin.grandcenterartsacademy.org
admin.harpethmiddleccs.net
admin.hes.lammersvilleschooldistrict.net
admin.kingstonspringsccs.net
admin.lacountycharterselpa.org
admin.lammersvilleschooldistrict.net
admin.les.lammersvilleschooldistrict.net
admin.lincolncharter.org
admin.lincolnton.lincolncharter.org
admin.merrickacademy.org
admin.mhhs.lammersvilleschooldistrict.net
admin.pegramccs.net
admin.pleasantviewccs.net
admin.qes.lammersvilleschooldistrict.net
admin.sttheresaschoolpalmsprings.org
admin.sycamoremiddleccs.net
admin.twenty-eight-st.org
admin.wes.lammersvilleschooldistrict.net
aes.lammersvilleschooldistrict.net
afsenyc.org
ashlandcityccs.net
bes.lammersvilleschooldistrict.net
ccprep-academy.org
colegioangloamericanohgo.edu.mx
denver.lincolncharter.org
gageparkhs.org
glenknoll.org
grandcenterartsacademy.org
healthystartacademy.com
hes.lammersvilleschooldistrict.net
lacountycharterselpa.org
lammersvilleschooldistrict.net
les.lammersvilleschooldistrict.net
lincolncharter.org
lincolnton.lincolncharter.org
lisanorthhigh.org
mbapchs.org
merrickacademy.org
mhhs.lammersvilleschooldistrict.net
mhs.molineschools.org
msdurham.org
qes.lammersvilleschooldistrict.net
sainte-school.org
sttheresaschoolpalmsprings.org
twenty-eight-st.org
wes.lammersvilleschooldistrict.net
www.afsenyc.org
www.ashlandcityccs.net
www.bonnerprendie.com
www.bronxdalehs.org
www.ccprep-academy.org
www.cheathamcountyschools.net
www.cheathamhighccs.net
www.cheathammiddleccs.net
www.colegioangloamericanohgo.edu.mx
www.cranburyschool.org
www.eastcheathamccs.net
www.estrellitahigh.com
www.gageparkhs.org
www.grandcenterartsacademy.org
www.harpethmiddleccs.net
www.healthystartacademy.com
www.kingstonspringsccs.net
www.kraemerms.org
www.lacountycharterselpa.org
www.lammersvilleschooldistrict.net
www.lincolncharter.org
www.lisanorthhigh.org
www.mbapchs.org
www.merrickacademy.org
www.msdurham.org
www.pegramccs.net
www.pleasantviewccs.net
www.saltlakespa.org
www.sttheresaschoolpalmsprings.org
www.sycamoremiddleccs.net
www.twenty-eight-st.org
www.umecit.edu.pa

Other certificates including the domain name lincolncharter.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for lincolnton.lincolncharter.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263149469334306617948855930540575890519812
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-22 18:41:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-20 18:41:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lincolnton.lincolncharter.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2544 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.aes.lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.afsenyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ashlandcityccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bes.lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bonnerprendie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ccprep-academy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cheathamcountyschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cheathamhighccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cheathammiddleccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.colegioangloamericanohgo.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.denver.lincolncharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eastcheathamccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.estrellitahigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gageparkhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.grandcenterartsacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.harpethmiddleccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hes.lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kingstonspringsccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lacountycharterselpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.les.lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lincolncharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lincolnton.lincolncharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.merrickacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mhhs.lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pegramccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pleasantviewccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.qes.lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sttheresaschoolpalmsprings.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sycamoremiddleccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.twenty-eight-st.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wes.lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aes.lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afsenyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashlandcityccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bes.lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccprep-academy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colegioangloamericanohgo.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denver.lincolncharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gageparkhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenknoll.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandcenterartsacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthystartacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hes.lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacountycharterselpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'les.lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincolncharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincolnton.lincolncharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lisanorthhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbapchs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merrickacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhhs.lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhs.molineschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msdurham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qes.lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sainte-school.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sttheresaschoolpalmsprings.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twenty-eight-st.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wes.lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afsenyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashlandcityccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bonnerprendie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bronxdalehs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccprep-academy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheathamcountyschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheathamhighccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheathammiddleccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegioangloamericanohgo.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cranburyschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastcheathamccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.estrellitahigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gageparkhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandcenterartsacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harpethmiddleccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthystartacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingstonspringsccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kraemerms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lacountycharterselpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lammersvilleschooldistrict.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lincolncharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lisanorthhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbapchs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.merrickacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msdurham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pegramccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pleasantviewccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saltlakespa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sttheresaschoolpalmsprings.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sycamoremiddleccs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twenty-eight-st.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.umecit.edu.pa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016df4fca34d0000040300473045022047551523abb442ee5e30354f10192b1bf8270686878721b76d13b5048037e85e022100ff05fe4fb0ce87c4d740f96c6f27e3341965f212e2eb570bc7a988ff41d6d00100770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016df4fca3360000040300483046022100de3c6a937459616ccc13594b9f6d71186bf2ad35410123052e530e8639218fa2022100b47174a30883f500de142beaa0157c37a74622fd698aa5dc32df1eadd733d1a4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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