admin.sfva.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:de:3b:9e:bf:fd:5f:ea:03:2a:49:f5:32:5a:52:61:4d:90 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.sfva.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:de:3b:9e:bf:fd:5f:ea:03:2a:49:f5:32:5a:52:61:4d:90
Serial Number (int): 336958791980398680761107431703076747169168
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fc:ba:dc:25:66:d0:d0:5d:cb:86:20:50:60:86:a0:4d:ec:35:04:54
Fingerprint (sha256): e9:9b:ba:b8:c1:2f:8f:e5:21:47:84:4f:b1:e0:39:89:9b:85:24:9b:64:0a:c4:0b:ac:58:31:8a:a9:68:1c:b3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate admin.sfva.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.sfva.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acsaregionxv.org
admin.acsaregionxv.org
admin.binghamminers.org
admin.gmstigers.com
admin.goldenvalleyhs.org
admin.kauaihigh.org
admin.metro-arts.org
admin.millikanmiddleschool.org
admin.novaacademy.org
admin.oakridgereformed.org
admin.orcaeagles.org
admin.sfva.org
admin.smidttech.org
admin.stcroixcatholic.org
admin.stgeorgeontario.com
admin.sunnysandses.com
admin.tahquitzhs.org
admin.thefranklinranch.com
admin.waimeaelementary.org
admin.washburnschoolpr.com
alt.fisd.us
binghamminers.org
bp.smithvilleisd.org
es.hisdbrahmas.org
esbmm.lausd.net
gmstigers.com
goldenvalleyhighschool.com
goldenvalleyhighschool.net
goldenvalleyhighschool.org
goldenvalleyhs.org
gt.rs-wolves.com
hanak12school.org
hs.fisd.us
hs.hisdbrahmas.org
jh.hisdbrahmas.org
kauaihigh.org
lis.lausd.net
mcharris.bryanisd.org
metro-arts.com
metro-arts.org
millikanmiddleschool.org
ms.fisd.us
north.fisd.us
oakridgereformed.org
orcaeagles.org
pilotschools.lausd.net
school.americanmartyrs.org
ses.smithvilleisd.org
sfva.org
shs.smithvilleisd.org
sjh.smithvilleisd.org
smidttech.org
south.fisd.us
stcroixcatholic.org
sunnysandses.com
tahquitzhs.org
thefranklinranch.com
waimeaelementary.org
washburnschoolpr.com
www.acsaregionxv.org
www.americanmartyrs.org
www.americanmartyrsschool.org
www.binghamminers.org
www.bishopamat.org
www.claytonvalley.org
www.fisd.us
www.gmstigers.com
www.gmstigers.org
www.goldenvalleyhighschool.com
www.goldenvalleyhighschool.net
www.goldenvalleyhighschool.org
www.goldenvalleyhs.org
www.highlandhall.org
www.kauaihigh.org
www.metro-arts.com
www.metro-arts.org
www.millikanmiddleschool.org
www.nhstitans.org
www.novaacademy.org
www.nweccharter.com
www.nweccharter.org
www.oakridgechristian.org
www.oakridgereformed.org
www.orcaeagles.org
www.orrb.org
www.peabodycharter.org
www.rsu24.org
www.saltlakespa.org
www.sfayl.org
www.smidttech.org
www.sojournacademy.org
www.sojournbaptist.org
www.stcroixcatholic.org
www.stgeorgeontario.com
www.stggcs.org
www.sunnysandses.com
www.tahquitzhs.org
www.thefranklinranch.com
www.waimeaelementary.org
www.washburnschoolpr.com

Other certificates including the domain name sfva.org

(limited to 100 certificates)
sni194454.cloudflaressl.com
sni194454.cloudflaressl.com
sni43256.cloudflaressl.com
sni249409.cloudflaressl.com
sni194454.cloudflaressl.com
sni194454.cloudflaressl.com
sni194454.cloudflaressl.com
www.collegeachievegreaterasburyparkcharterschool.org
eastprimary.kiskiarea.org
sni43256.cloudflaressl.com
sfva.org
sni43256.cloudflaressl.com
sni43256.cloudflaressl.com
acsaregionxv.org
sfva.org
sni194454.cloudflaressl.com
acsaregionxv.org
admin.e3civichigh.com
sfva.org
sni43256.cloudflaressl.com
sfva.org
sni43256.cloudflaressl.com
sni194454.cloudflaressl.com
sfva.org
sni194454.cloudflaressl.com
admin.e3civichigh.com
sni43256.cloudflaressl.com
www.lasallesancristobal.edu.mx
sni194454.cloudflaressl.com
sfva.org
sfva.org
sfva.org
sfva.org
sfva.org
admin.dmc.lockhartisd.org
admin.dz.aceroschools.org
kohalahs.org
acsaregionxv.org
sfva.org
admin.dmc.lockhartisd.org
sfva.org
sni43256.cloudflaressl.com
sni194454.cloudflaressl.com
admin.cms.davidson.k12.nc.us
sni43256.cloudflaressl.com
es.unitedsd.net
sni194454.cloudflaressl.com
acsaregionxv.org
sfva.org
www.leusd.k12.ca.us
komarek94.org
sni194454.cloudflaressl.com
admin.e3civichigh.com
sni194454.cloudflaressl.com
sni194454.cloudflaressl.com
sni194454.cloudflaressl.com
sni194454.cloudflaressl.com
acsaregionxv.org
sfva.org
sni194454.cloudflaressl.com
sni194454.cloudflaressl.com
sfva.org
sni194454.cloudflaressl.com
sni194454.cloudflaressl.com
sni43256.cloudflaressl.com
sni249409.cloudflaressl.com
sni43256.cloudflaressl.com
admin.e3civichigh.com
admin.sfva.org
sni43256.cloudflaressl.com
acsaregionxv.org

Certificate

The complete raw certificate details for admin.sfva.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQbTHb+2z7
rfYVCl+ph5m8FJJOEgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5pV3R4RBg
n18RTHnTD9fS27JxyeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGrmQF3Z/h2
e6StagubO+pVwFzG8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK7wAhJO8e
l2z375LDd2VIwrdWQP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlWZ1AdjOKf
RiY0ckFuu/DYkuvkNKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5Tu7zbek/
MR/JMR9nceWyZ2Mund+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzwWzBvTD8F
7q6ckUbIgpeo7stn7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuaivjW/P+Tm
64XjXNjP9F1W8+5tlcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ4Iudx/o3
Q4E2w6Aud9PYyV05pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/h0omUmCI
DiQVG30eHhb3OIP3bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUnohkUi6ik
D4me6o58sq/IQVmyem1M/E0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336958791980398680761107431703076747169168
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-06 17:29:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-05 17:29:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.sfva.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acsaregionxv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.acsaregionxv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.binghamminers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gmstigers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.goldenvalleyhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kauaihigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.metro-arts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.millikanmiddleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.novaacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.oakridgereformed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.orcaeagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sfva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.smidttech.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stcroixcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stgeorgeontario.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sunnysandses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tahquitzhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.thefranklinranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.waimeaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.washburnschoolpr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alt.fisd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'binghamminers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bp.smithvilleisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.hisdbrahmas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esbmm.lausd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmstigers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldenvalleyhighschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldenvalleyhighschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldenvalleyhighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldenvalleyhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gt.rs-wolves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hanak12school.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.fisd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.hisdbrahmas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jh.hisdbrahmas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kauaihigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lis.lausd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcharris.bryanisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metro-arts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metro-arts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'millikanmiddleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.fisd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'north.fisd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oakridgereformed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orcaeagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilotschools.lausd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.americanmartyrs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ses.smithvilleisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shs.smithvilleisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjh.smithvilleisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smidttech.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'south.fisd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcroixcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunnysandses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tahquitzhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefranklinranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waimeaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washburnschoolpr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acsaregionxv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.americanmartyrs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.americanmartyrsschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.binghamminers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bishopamat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.claytonvalley.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fisd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmstigers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmstigers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldenvalleyhighschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldenvalleyhighschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldenvalleyhighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldenvalleyhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highlandhall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kauaihigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metro-arts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metro-arts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.millikanmiddleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhstitans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novaacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nweccharter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nweccharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oakridgechristian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oakridgereformed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orcaeagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orrb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peabodycharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rsu24.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saltlakespa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfayl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smidttech.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sojournacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sojournbaptist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcroixcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stgeorgeontario.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stggcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunnysandses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tahquitzhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thefranklinranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waimeaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.washburnschoolpr.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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