ups.lskysd.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:13:4e:a1:a8:19:aa:9f:7c:e8:89:f2:37:e8:d1:4c:93:32 was issued on by Let's Encrypt.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ups.lskysd.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:13:4e:a1:a8:19:aa:9f:7c:e8:89:f2:37:e8:d1:4c:93:32
Serial Number (int): 355019027851482587674709621532381187707698
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 85:ca:1a:44:e2:02:4a:a5:85:64:d9:2b:07:65:75:a1:84:a1:62:9f
Fingerprint (sha256): ec:e1:df:3f:62:6b:f7:ce:cc:b5:22:21:39:9d:94:14:d5:27:a3:55:fc:56:fb:ac:79:fa:1b:27:96:ff:31:2b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ups.lskysd.ca

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ups.lskysd.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.bands.dekalbcentral.net
admin.benchmarkbobcats.org
admin.cardinalritterprep.net
admin.es.lorenaisd.net
admin.holyfamilycatholicacademy.net
admin.hs.lorenaisd.net
admin.lorenaisd.net
admin.ms.lorenaisd.net
admin.ps.lorenaisd.net
admin.rosemont78.org
admin.stjosaphat.net
admin.swake.org
admin.valparaisohes.valpo.k12.in.us
admin.valparaisones.valpo.k12.in.us
admin.valparaisotjes.valpo.k12.in.us
admin.westpines.greenek12.org
baileyton.greenek12.org
bands.dekalbcentral.net
bcs.lskysd.ca
benchmarkbobcats.org
bready.lskysd.ca
cando.lskysd.ca
cardinalritterprep.net
cardinalritterprep.org
cdhs.greenek12.org
coahomak12.org
connaught.lskysd.ca
elem.ogisd.net
es.lorenaisd.net
friarspoint.coahomak12.org
fuhsdadultschool.org
glenwood.greenek12.org
greenek12.org
hafford.lskysd.ca
holyfamilycatholicacademy.net
hs.lorenaisd.net
jhcommunityschool.org
lawrence.lskysd.ca
legacy.colegioedlio.org
leoville.lskysd.ca
luseland.lskysd.ca
lyon.coahomak12.org
macklin.lskysd.ca
maymont.lskysd.ca
mckitrick.lskysd.ca
mclurg.lskysd.ca
medstead.lskysd.ca
mosheim.greenek12.org
ms.lorenaisd.net
mstmaatroosevelt.org
nbchs.lskysd.ca
nghs.greenek12.org
ps.lorenaisd.net
ps17queens.com
rosemont78.org
sghs.greenek12.org
south.mthcs.org
southernwakeacademy.org
stjosaphat.net
stvital.lskysd.ca
swake.org
uchs.lskysd.ca
ups.lskysd.ca
valparaisocces.valpo.k12.in.us
valparaisoces.valpo.k12.in.us
valparaisohigh.valpo.k12.in.us
valparaisomes.valpo.k12.in.us
valparaisopes.valpo.k12.in.us
valparaisotjms.valpo.k12.in.us
westpines.greenek12.org
www.avrlacademy.org
www.benchmarkbobcats.org
www.benporatyosef.org
www.cardinalritterprep.net
www.cardinalritterprep.org
www.holyfamilycatholicacademy.net
www.lorenaisd.net
www.mstmaatroosevelt.org
www.rosemont78.org
www.southampton.k12.nj.us
www.southernwakeacademy.org
www.stjosaphat.net
www.swake.org
www.thhs.qc.edu

Other certificates including the domain name lskysd.ca

(limited to 100 certificates)
helpdesk.lskysd.ca
*.lskysd.ca
artsalive.lskysd.ca
artsalive.lskysd.ca
P-CAMNE.IGLOODIGITALWORKPLACES.CA
mil.ldcsb.ca
admin.mckitrick.lskysd.ca
www.stgregsschool.org
webservices.lskysd.ca
P-CAMNE.IGLOODIGITALWORKPLACES.CA
ckcs.lskysd.ca
admin.bands.dekalbcentral.net
*.lskysd.ca
*.lskysd.ca
owa.lskysd.ca
mail.staff.lskysd.ca
P-CAMNE.IGLOODIGITALWORKPLACES.CA
shs.lskysd.ca
artsalive.lskysd.ca
admin.bcs.lskysd.ca
*.lskysd.ca
admin.bands.dekalbcentral.net
www.lskysd.ca
webservices.lskysd.ca
webservices.lskysd.ca
artsalive.lskysd.ca
fallbrookhs.org
P-CAMNE.IGLOODIGITALWORKPLACES.CA
admin.ups.lskysd.ca
P-CAMNE.IGLOODIGITALWORKPLACES.CA
mail.staff.lskysd.ca
mail.staff.lskysd.ca
*.lskysd.ca
sis.lskysd.ca
admin.bcs.lskysd.ca
lskysd.ca
webservices.lskysd.ca
artsalive.lskysd.ca
ckcs.lskysd.ca
www.northregionselpa.org
webservices.lskysd.ca
admin.bcs.lskysd.ca
webservices.lskysd.ca
webservices.lskysd.ca
ups.lskysd.ca
webservices.lskysd.ca
admin.bcs.lskysd.ca
lync.lskysd.ca

Certificate

The complete raw certificate details for ups.lskysd.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIN0jCCDLqgAwIBAgISBBNOoagZqp986InyN+jRTJMyMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMjMwMjU0MTJaFw0y
MDAyMjEwMjU0MTJaMBgxFjAUBgNVBAMTDXVwcy5sc2t5c2QuY2EwggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQCtrIXp7mbejFBtMdv7bPut9hUKX6mHmbwU
kk4SAS2wWeHzgwVeEiXu4Q62pKUwqxHbZ3Nw0C0rUbmlXdHhEGCfXxFMedMP19Lb
snHJ7J+Vd91RftXDhoavIx/wwT5kaGhpA/RdgHdcMauZAXdn+HZ7pK1qC5s76lXA
XMbxUMB2dqGxStseulJ5+JrOLKGF4+QvfNCD86ZpCQrvACEk7x6XbPfvksN3ZUjC
t1ZA/YmNXz3Zh360hk6cCTaPIOW/cxhcpcaKUHKtCVZnUB2M4p9GJjRyQW678NiS
6+Q0qbZ/fNRq/DeyUK6NlYeQgdk2lo23F+yuki1QirlO7vNt6T8xH8kxH2dx5bJn
Yy6d35JuB8t/3rA+FUFquuynUc1H4iSjK2vk8w1EHPBbMG9MPwXurpyRRsiCl6ju
y2ftvQg1c9iA1PvMVf9Q0JxaP5pon4q7wwpXgQQS5qK+Nb8/5ObrheNc2M/0XVbz
7m2VwmAmEZTITKUJS0BGqE+iNTNCeuHWJRIxE0jaWIngi53H+jdDgTbDoC5309jJ
XTmkWAx1Itg1EZBPJBFJpJtDceZ9mL+lCMXJSiGIDv+HSiZSYIgOJBUbfR4eFvc4
g/dsmKxdkrioSuflkOYp1SA0LcZL7LCtMAFiPQ34RSeiGRSLqKQPiZ7qjnyyr8hB
WbJ6bUz8TQIDAQABo4IJ4jCCCd4wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQva8hN
bCwuMvIAIP8tTWxa/G66uzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js
oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14
My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMIIHlQYDVR0RBIIHjDCCB4iCHWFkbWluLmJhbmRz
LmRla2FsYmNlbnRyYWwubmV0ghphZG1pbi5iZW5jaG1hcmtib2JjYXRzLm9yZ4Ic
YWRtaW4uY2FyZGluYWxyaXR0ZXJwcmVwLm5ldIIWYWRtaW4uZXMubG9yZW5haXNk
Lm5ldIIjYWRtaW4uaG9seWZhbWlseWNhdGhvbGljYWNhZGVteS5uZXSCFmFkbWlu
LmhzLmxvcmVuYWlzZC5uZXSCE2FkbWluLmxvcmVuYWlzZC5uZXSCFmFkbWluLm1z
LmxvcmVuYWlzZC5uZXSCFmFkbWluLnBzLmxvcmVuYWlzZC5uZXSCFGFkbWluLnJv
c2Vtb250Nzgub3JnghRhZG1pbi5zdGpvc2FwaGF0Lm5ldIIPYWRtaW4uc3dha2Uu
b3JngiNhZG1pbi52YWxwYXJhaXNvaGVzLnZhbHBvLmsxMi5pbi51c4IjYWRtaW4u
dmFscGFyYWlzb25lcy52YWxwby5rMTIuaW4udXOCJGFkbWluLnZhbHBhcmFpc290
amVzLnZhbHBvLmsxMi5pbi51c4IdYWRtaW4ud2VzdHBpbmVzLmdyZWVuZWsxMi5v
cmeCF2JhaWxleXRvbi5ncmVlbmVrMTIub3JnghdiYW5kcy5kZWthbGJjZW50cmFs
Lm5ldIINYmNzLmxza3lzZC5jYYIUYmVuY2htYXJrYm9iY2F0cy5vcmeCEGJyZWFk
eS5sc2t5c2QuY2GCD2NhbmRvLmxza3lzZC5jYYIWY2FyZGluYWxyaXR0ZXJwcmVw
Lm5ldIIWY2FyZGluYWxyaXR0ZXJwcmVwLm9yZ4ISY2Rocy5ncmVlbmVrMTIub3Jn
gg5jb2Fob21hazEyLm9yZ4ITY29ubmF1Z2h0Lmxza3lzZC5jYYIOZWxlbS5vZ2lz
ZC5uZXSCEGVzLmxvcmVuYWlzZC5uZXSCGmZyaWFyc3BvaW50LmNvYWhvbWFrMTIu
b3JnghRmdWhzZGFkdWx0c2Nob29sLm9yZ4IWZ2xlbndvb2QuZ3JlZW5lazEyLm9y
Z4INZ3JlZW5lazEyLm9yZ4IRaGFmZm9yZC5sc2t5c2QuY2GCHWhvbHlmYW1pbHlj
YXRob2xpY2FjYWRlbXkubmV0ghBocy5sb3JlbmFpc2QubmV0ghVqaGNvbW11bml0
eXNjaG9vbC5vcmeCEmxhd3JlbmNlLmxza3lzZC5jYYIXbGVnYWN5LmNvbGVnaW9l
ZGxpby5vcmeCEmxlb3ZpbGxlLmxza3lzZC5jYYISbHVzZWxhbmQubHNreXNkLmNh
ghNseW9uLmNvYWhvbWFrMTIub3JnghFtYWNrbGluLmxza3lzZC5jYYIRbWF5bW9u
dC5sc2t5c2QuY2GCE21ja2l0cmljay5sc2t5c2QuY2GCEG1jbHVyZy5sc2t5c2Qu
Y2GCEm1lZHN0ZWFkLmxza3lzZC5jYYIVbW9zaGVpbS5ncmVlbmVrMTIub3JnghBt
cy5sb3JlbmFpc2QubmV0ghRtc3RtYWF0cm9vc2V2ZWx0Lm9yZ4IPbmJjaHMubHNr
eXNkLmNhghJuZ2hzLmdyZWVuZWsxMi5vcmeCEHBzLmxvcmVuYWlzZC5uZXSCDnBz
MTdxdWVlbnMuY29tgg5yb3NlbW9udDc4Lm9yZ4ISc2docy5ncmVlbmVrMTIub3Jn
gg9zb3V0aC5tdGhjcy5vcmeCF3NvdXRoZXJud2FrZWFjYWRlbXkub3Jngg5zdGpv
c2FwaGF0Lm5ldIIRc3R2aXRhbC5sc2t5c2QuY2GCCXN3YWtlLm9yZ4IOdWNocy5s
c2t5c2QuY2GCDXVwcy5sc2t5c2QuY2GCHnZhbHBhcmFpc29jY2VzLnZhbHBvLmsx
Mi5pbi51c4IddmFscGFyYWlzb2Nlcy52YWxwby5rMTIuaW4udXOCHnZhbHBhcmFp
c29oaWdoLnZhbHBvLmsxMi5pbi51c4IddmFscGFyYWlzb21lcy52YWxwby5rMTIu
aW4udXOCHXZhbHBhcmFpc29wZXMudmFscG8uazEyLmluLnVzgh52YWxwYXJhaXNv
dGptcy52YWxwby5rMTIuaW4udXOCF3dlc3RwaW5lcy5ncmVlbmVrMTIub3JnghN3
d3cuYXZybGFjYWRlbXkub3Jnghh3d3cuYmVuY2htYXJrYm9iY2F0cy5vcmeCFXd3
dy5iZW5wb3JhdHlvc2VmLm9yZ4Iad3d3LmNhcmRpbmFscml0dGVycHJlcC5uZXSC
Gnd3dy5jYXJkaW5hbHJpdHRlcnByZXAub3JngiF3d3cuaG9seWZhbWlseWNhdGhv
bGljYWNhZGVteS5uZXSCEXd3dy5sb3JlbmFpc2QubmV0ghh3d3cubXN0bWFhdHJv
b3NldmVsdC5vcmeCEnd3dy5yb3NlbW9udDc4Lm9yZ4IZd3d3LnNvdXRoYW1wdG9u
LmsxMi5uai51c4Ibd3d3LnNvdXRoZXJud2FrZWFjYWRlbXkub3JnghJ3d3cuc3Rq
b3NhcGhhdC5uZXSCDXd3dy5zd2FrZS5vcmeCD3d3dy50aGhzLnFjLmVkdTBMBgNV
HSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpo
dHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA
8QB3AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABbpZlUSEAAAQD
AEgwRgIhAKxa1GdcmbIEl8D1S2EZK4U/NeBJh+Lai5fJDk5idalaAiEA2neAOixf
zxOl52wmYn8GlR3FQXkGRVBW/snABdpwS7EAdgAHt1wb5X1o//Gwxh0jFce65ld8
V5S3au68YToaadOiHAAAAW6WZVEnAAAEAwBHMEUCICGg3rTT8K7ZtXb53zxVFkTC
IPoAfeyBA7NBxayFI68bAiEAr39XQHu+bf6vDncQzdGggT6RemDgwFJELnuuDvNC
kQEwDQYJKoZIhvcNAQELBQADggEBAHjK1GqnePBEuyCHFRGTuM27XsDqmDPs7r0v
SuRggWL7I1iNgOG25koU8heZPHJzxxwx41bFg+POKmGOUbuWAIQ14wGIYUisHF8M
wl6ETKw2FvAddXY6IVySUNe4g3gYj9pkVRRO73I/NItZ2rVZhKpS662w7TjsoNqH
ciVsPzRvn8eRH8vvmSXrfz68lrER1fHee/3kgOh6gMDYNLH/BH31ggz/Ac98SlS4
COw7aHsmb3YPTyiTdhoewGUE/0uC4fXaSmJlm+MA/820SIvw7iC4EtTfuKfKVubo
HVZBs0duPjawobDTg+ObwUtahUMwh6cdfKOymf7DPoDOysc/H3E=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 355019027851482587674709621532381187707698
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-23 02:54:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-21 02:54:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ups.lskysd.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1932 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bands.dekalbcentral.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.benchmarkbobcats.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cardinalritterprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.es.lorenaisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.holyfamilycatholicacademy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hs.lorenaisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lorenaisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ms.lorenaisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ps.lorenaisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rosemont78.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stjosaphat.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.swake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.valparaisohes.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.valparaisones.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.valparaisotjes.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.westpines.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baileyton.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bands.dekalbcentral.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcs.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benchmarkbobcats.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bready.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cando.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardinalritterprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardinalritterprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdhs.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coahomak12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connaught.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elem.ogisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.lorenaisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friarspoint.coahomak12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuhsdadultschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenwood.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hafford.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamilycatholicacademy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.lorenaisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhcommunityschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawrence.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.colegioedlio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leoville.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luseland.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyon.coahomak12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macklin.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maymont.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mckitrick.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mclurg.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medstead.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mosheim.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.lorenaisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mstmaatroosevelt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbchs.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nghs.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps.lorenaisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps17queens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosemont78.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sghs.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'south.mthcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southernwakeacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosaphat.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stvital.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uchs.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ups.lskysd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valparaisocces.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valparaisoces.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valparaisohigh.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valparaisomes.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valparaisopes.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valparaisotjms.valpo.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westpines.greenek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avrlacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benchmarkbobcats.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benporatyosef.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardinalritterprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardinalritterprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamilycatholicacademy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lorenaisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mstmaatroosevelt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosemont78.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southampton.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southernwakeacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosaphat.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thhs.qc.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e966551210000040300483046022100ac5ad4675c99b20497c0f54b61192b853f35e04987e2da8b97c90e4e6275a95a022100da77803a2c5fcf13a5e76c26627f06951dc5417906455056fec9c005da704bb100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e966551270000040300473045022021a0deb4d3f0aed9b576f9df3c551644c220fa007dec8103b341c5ac8523af1b022100af7f57407bbe6dfeaf0e7710cdd1a0813e917a60e0c052442e7bae0ef3429101
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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