middlehigh.alexandercsd.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:16:0f:cc:9f:26:25:7a:49:fa:e2:91:c4:53:72:5e:4f:94 was issued on by Let's Encrypt.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=middlehigh.alexandercsd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:16:0f:cc:9f:26:25:7a:49:fa:e2:91:c4:53:72:5e:4f:94
Serial Number (int): 268844070743962696918827507500620372135828
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 79:d7:8a:e4:02:50:f5:59:23:f6:3c:b9:d6:99:71:a9:8e:1e:59:28
Fingerprint (sha256): e9:b4:fb:4e:85:33:06:7f:bb:a1:16:8f:5e:44:8d:34:c4:de:4e:b9:b1:a0:8c:4a:18:03:2a:11:f9:38:b0:dc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate middlehigh.alexandercsd.org

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for middlehigh.alexandercsd.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aak.potsdam.k12.ny.us
admin.aak.potsdam.k12.ny.us
admin.ahs.airportschools.com
admin.airportschools.com
admin.alexandercsd.org
admin.ava.airportschools.com
admin.berrienschools.org
admin.bls.lcdoe.org
admin.curiehs.org
admin.eastvalleyhs.net
admin.eyler.airportschools.com
admin.fes.lcdoe.org
admin.hrs.lcdoe.org
admin.kabbalahacademy.net
admin.lae.potsdam.k12.ny.us
admin.lcdoe.org
admin.lchs.lcdoe.org
admin.mlvrcs.org
admin.nce.airportschools.com
admin.nga.lcdoe.org
admin.phs.potsdam.k12.ny.us
admin.potsdam.k12.ny.us
admin.ritter.airportschools.com
admin.sle.lcdoe.org
admin.sterling.airportschools.com
admin.thevalleyacademy.net
admin.ujh.lcdoe.org
admin.wagar56.airportschools.com
admin.wagar78.airportschools.com
admin.wcr.centerusd.org
admin.windberschools.org
ahs.airportschools.com
airportschools.com
alexandercsd.org
ava.airportschools.com
berrienschools.com
berrienschools.org
bls.lcdoe.org
cmschl.org
csisd.org
curiehs.org
eastvalleyhs.net
elementary.alexandercsd.org
eurotexcoco.edu.mx
eyler.airportschools.com
fes.lcdoe.org
hrs.lcdoe.org
jatl.jubileeacademies.org
jd.jubileeacademies.org
jhp.jubileeacademies.org
jkv.jubileeacademies.org
jlv.jubileeacademies.org
jlw.jubileeacademies.org
jubileeacademies.org
lae.potsdam.k12.ny.us
lcdoe.org
lchs.lcdoe.org
lennox.k12.ca.us
middlehigh.alexandercsd.org
mlvrcs.org
nce.airportschools.com
nga.lcdoe.org
phs.potsdam.k12.ny.us
ritter.airportschools.com
sle.lcdoe.org
sterling.airportschools.com
thevalleyacademy.net
ujh.lcdoe.org
wagar56.airportschools.com
wagar78.airportschools.com
wcr.centerusd.org
windberschools.org
www.airportschools.com
www.alexandercsd.org
www.berrienschools.com
www.berrienschools.org
www.curiehs.org
www.eastvalleyhs.net
www.eurotexcoco.edu.mx
www.jubileeacademies.org
www.lcdoe.org
www.mlvrcs.org
www.potsdam.k12.ny.us
www.thevalleyacademy.net
www.windberschools.org

Other certificates including the domain name alexandercsd.org

(limited to 100 certificates)
alexandercsd.org
alexandercsd.org
sv.gvusd.k12.ca.us
acatitlan.edu.mx
acatitlan.edu.mx
admin.adulted.erusd.org
bps.berrienschools.org
admin.jww.jubileeacademies.org
acatitlan.edu.mx
alexandercsd.org
admin.berrienschools.org
aak.potsdam.k12.ny.us
excel.dcs.edu
centerpreschool.centerusd.org
fcctc.franklincountyschoolsms.com
landrum.sbcisd.net
smclassroom.alexandercsd.org
acatitlan.edu.mx
acatitlan.edu.mx
aak.potsdam.k12.ny.us
dudley.centerusd.org
admin.bes.berrienschools.org
alexandercsd.org
admin.middlehigh.alexandercsd.org
aak.potsdam.k12.ny.us
alexandercsd.org
clinksso.alexandercsd.org
admin.centerpreschool.centerusd.org
instructionaltech.sbcisd.net
smclassroom.alexandercsd.org
aak.potsdam.k12.ny.us
alexandercsd.org
ochoaprep.erusd.org
alexandercsd.org
acatitlan.edu.mx
aak.potsdam.k12.ny.us
acatitlan.edu.mx
aak.potsdam.k12.ny.us
mta-sts.alexandercsd.org
aak.potsdam.k12.ny.us
admin.elementary.alexandercsd.org
alexandercsd.org
aak.potsdam.k12.ny.us
admin.erusd.org
alexandercsd.org
acatitlan.edu.mx
aak.potsdam.k12.ny.us
acatitlan.edu.mx
aak.potsdam.k12.ny.us
www.centerusd.org
alexandercsd.org
erhs.erusd.org
aak.potsdam.k12.ny.us
tiegerman.org
aak.potsdam.k12.ny.us
middlehigh.alexandercsd.org
aak.potsdam.k12.ny.us

Certificate

The complete raw certificate details for middlehigh.alexandercsd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINljCCDH6gAwIBAgISAxYPzJ8mJXpJ+uKRxFNyXk+UMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA5MDIwMDU5MDBaFw0x
NzEyMDEwMDU5MDBaMCYxJDAiBgNVBAMTG21pZGRsZWhpZ2guYWxleGFuZGVyY3Nk
Lm9yZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK2shenuZt6MUG0x
2/ts+632FQpfqYeZvBSSThIBLbBZ4fODBV4SJe7hDrakpTCrEdtnc3DQLStRuaVd
0eEQYJ9fEUx50w/X0tuyccnsn5V33VF+1cOGhq8jH/DBPmRoaGkD9F2Ad1wxq5kB
d2f4dnukrWoLmzvqVcBcxvFQwHZ2obFK2x66Unn4ms4soYXj5C980IPzpmkJCu8A
ISTvHpds9++Sw3dlSMK3VkD9iY1fPdmHfrSGTpwJNo8g5b9zGFylxopQcq0JVmdQ
HYzin0YmNHJBbrvw2JLr5DSptn981Gr8N7JQro2Vh5CB2TaWjbcX7K6SLVCKuU7u
823pPzEfyTEfZ3HlsmdjLp3fkm4Hy3/esD4VQWq67KdRzUfiJKMra+TzDUQc8Fsw
b0w/Be6unJFGyIKXqO7LZ+29CDVz2IDU+8xV/1DQnFo/mmifirvDCleBBBLmor41
vz/k5uuF41zYz/RdVvPubZXCYCYRlMhMpQlLQEaoT6I1M0J64dYlEjETSNpYieCL
ncf6N0OBNsOgLnfT2MldOaRYDHUi2DURkE8kEUmkm0Nx5n2Yv6UIxclKIYgO/4dK
JlJgiA4kFRt9Hh4W9ziD92yYrF2SuKhK5+WQ5inVIDQtxkvssK0wAWI9DfhFJ6IZ
FIuopA+JnuqOfLKvyEFZsnptTPxNAgMBAAGjggmYMIIJlDAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw
HQYDVR0OBBYEFC9ryE1sLC4y8gAg/y1NbFr8brq7MB8GA1UdIwQYMBaAFKhKamME
fd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0
cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0
cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wggehBgNVHREEggeYMIIH
lIIVYWFrLnBvdHNkYW0uazEyLm55LnVzghthZG1pbi5hYWsucG90c2RhbS5rMTIu
bnkudXOCHGFkbWluLmFocy5haXJwb3J0c2Nob29scy5jb22CGGFkbWluLmFpcnBv
cnRzY2hvb2xzLmNvbYIWYWRtaW4uYWxleGFuZGVyY3NkLm9yZ4IcYWRtaW4uYXZh
LmFpcnBvcnRzY2hvb2xzLmNvbYIYYWRtaW4uYmVycmllbnNjaG9vbHMub3JnghNh
ZG1pbi5ibHMubGNkb2Uub3JnghFhZG1pbi5jdXJpZWhzLm9yZ4IWYWRtaW4uZWFz
dHZhbGxleWhzLm5ldIIeYWRtaW4uZXlsZXIuYWlycG9ydHNjaG9vbHMuY29tghNh
ZG1pbi5mZXMubGNkb2Uub3JnghNhZG1pbi5ocnMubGNkb2Uub3JnghlhZG1pbi5r
YWJiYWxhaGFjYWRlbXkubmV0ghthZG1pbi5sYWUucG90c2RhbS5rMTIubnkudXOC
D2FkbWluLmxjZG9lLm9yZ4IUYWRtaW4ubGNocy5sY2RvZS5vcmeCEGFkbWluLm1s
dnJjcy5vcmeCHGFkbWluLm5jZS5haXJwb3J0c2Nob29scy5jb22CE2FkbWluLm5n
YS5sY2RvZS5vcmeCG2FkbWluLnBocy5wb3RzZGFtLmsxMi5ueS51c4IXYWRtaW4u
cG90c2RhbS5rMTIubnkudXOCH2FkbWluLnJpdHRlci5haXJwb3J0c2Nob29scy5j
b22CE2FkbWluLnNsZS5sY2RvZS5vcmeCIWFkbWluLnN0ZXJsaW5nLmFpcnBvcnRz
Y2hvb2xzLmNvbYIaYWRtaW4udGhldmFsbGV5YWNhZGVteS5uZXSCE2FkbWluLnVq
aC5sY2RvZS5vcmeCIGFkbWluLndhZ2FyNTYuYWlycG9ydHNjaG9vbHMuY29tgiBh
ZG1pbi53YWdhcjc4LmFpcnBvcnRzY2hvb2xzLmNvbYIXYWRtaW4ud2NyLmNlbnRl
cnVzZC5vcmeCGGFkbWluLndpbmRiZXJzY2hvb2xzLm9yZ4IWYWhzLmFpcnBvcnRz
Y2hvb2xzLmNvbYISYWlycG9ydHNjaG9vbHMuY29tghBhbGV4YW5kZXJjc2Qub3Jn
ghZhdmEuYWlycG9ydHNjaG9vbHMuY29tghJiZXJyaWVuc2Nob29scy5jb22CEmJl
cnJpZW5zY2hvb2xzLm9yZ4INYmxzLmxjZG9lLm9yZ4IKY21zY2hsLm9yZ4IJY3Np
c2Qub3JnggtjdXJpZWhzLm9yZ4IQZWFzdHZhbGxleWhzLm5ldIIbZWxlbWVudGFy
eS5hbGV4YW5kZXJjc2Qub3JnghJldXJvdGV4Y29jby5lZHUubXiCGGV5bGVyLmFp
cnBvcnRzY2hvb2xzLmNvbYINZmVzLmxjZG9lLm9yZ4INaHJzLmxjZG9lLm9yZ4IZ
amF0bC5qdWJpbGVlYWNhZGVtaWVzLm9yZ4IXamQuanViaWxlZWFjYWRlbWllcy5v
cmeCGGpocC5qdWJpbGVlYWNhZGVtaWVzLm9yZ4IYamt2Lmp1YmlsZWVhY2FkZW1p
ZXMub3JnghhqbHYuanViaWxlZWFjYWRlbWllcy5vcmeCGGpsdy5qdWJpbGVlYWNh
ZGVtaWVzLm9yZ4IUanViaWxlZWFjYWRlbWllcy5vcmeCFWxhZS5wb3RzZGFtLmsx
Mi5ueS51c4IJbGNkb2Uub3Jngg5sY2hzLmxjZG9lLm9yZ4IQbGVubm94LmsxMi5j
YS51c4IbbWlkZGxlaGlnaC5hbGV4YW5kZXJjc2Qub3JnggptbHZyY3Mub3JnghZu
Y2UuYWlycG9ydHNjaG9vbHMuY29tgg1uZ2EubGNkb2Uub3JnghVwaHMucG90c2Rh
bS5rMTIubnkudXOCGXJpdHRlci5haXJwb3J0c2Nob29scy5jb22CDXNsZS5sY2Rv
ZS5vcmeCG3N0ZXJsaW5nLmFpcnBvcnRzY2hvb2xzLmNvbYIUdGhldmFsbGV5YWNh
ZGVteS5uZXSCDXVqaC5sY2RvZS5vcmeCGndhZ2FyNTYuYWlycG9ydHNjaG9vbHMu
Y29tghp3YWdhcjc4LmFpcnBvcnRzY2hvb2xzLmNvbYIRd2NyLmNlbnRlcnVzZC5v
cmeCEndpbmRiZXJzY2hvb2xzLm9yZ4IWd3d3LmFpcnBvcnRzY2hvb2xzLmNvbYIU
d3d3LmFsZXhhbmRlcmNzZC5vcmeCFnd3dy5iZXJyaWVuc2Nob29scy5jb22CFnd3
dy5iZXJyaWVuc2Nob29scy5vcmeCD3d3dy5jdXJpZWhzLm9yZ4IUd3d3LmVhc3R2
YWxsZXlocy5uZXSCFnd3dy5ldXJvdGV4Y29jby5lZHUubXiCGHd3dy5qdWJpbGVl
YWNhZGVtaWVzLm9yZ4INd3d3LmxjZG9lLm9yZ4IOd3d3Lm1sdnJjcy5vcmeCFXd3
dy5wb3RzZGFtLmsxMi5ueS51c4IYd3d3LnRoZXZhbGxleWFjYWRlbXkubmV0ghZ3
d3cud2luZGJlcnNjaG9vbHMub3JnMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHm
BgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5j
cnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkg
b25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkg
aW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQg
YXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcN
AQELBQADggEBABfgb0r9baFrN5UM+rvMF8fEI1WdpL7obEflNE3IiMFhotjt1m/w
U6lqqqAue1kNp7teLLNwHVzYqqt8KYLSn2MqqO0NgaHhjNBLh8Gcy4HZHdNgEvlv
1EzSSeE85ysfYzWY4R3h0fa/z159RIOZkzA05lkmbubUqEXiZkKLJFd+frVIcQgg
Mefef2yZSuF8xWL9KlBK4+8udklUAxH/jX5ZNEIA5Gkk6svgk5SJJF6WSSTAqnMV
xxYk6pdf5iPOnu2aChpeUtqtVnH28Kc12ak8twYdoT2FrC48EzrW7Pi5NA1F60Li
rmx29lFAqsAt9W4UY5czdcWbcv1xnznpJ7o=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268844070743962696918827507500620372135828
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-02 00:59:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-01 00:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'middlehigh.alexandercsd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1944 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aak.potsdam.k12.ny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.aak.potsdam.k12.ny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ahs.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.alexandercsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ava.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.berrienschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bls.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.curiehs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eastvalleyhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eyler.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fes.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hrs.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kabbalahacademy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lae.potsdam.k12.ny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lchs.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mlvrcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nce.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nga.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.phs.potsdam.k12.ny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.potsdam.k12.ny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ritter.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sle.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sterling.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.thevalleyacademy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ujh.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wagar56.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wagar78.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wcr.centerusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.windberschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahs.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexandercsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ava.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berrienschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berrienschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bls.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmschl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curiehs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastvalleyhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elementary.alexandercsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eurotexcoco.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyler.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fes.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrs.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jatl.jubileeacademies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jd.jubileeacademies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhp.jubileeacademies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jkv.jubileeacademies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jlv.jubileeacademies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jlw.jubileeacademies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jubileeacademies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lae.potsdam.k12.ny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lchs.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lennox.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'middlehigh.alexandercsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlvrcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nce.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nga.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phs.potsdam.k12.ny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ritter.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sle.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sterling.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thevalleyacademy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ujh.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wagar56.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wagar78.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcr.centerusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windberschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airportschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alexandercsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berrienschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berrienschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.curiehs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastvalleyhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eurotexcoco.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jubileeacademies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lcdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mlvrcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.potsdam.k12.ny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thevalleyacademy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.windberschools.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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