admin.cusd1.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c6:05:15:57:57:b3:f4:8e:a3:83:04:bb:ba:61:92:78:1f was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.cusd1.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c6:05:15:57:57:b3:f4:8e:a3:83:04:bb:ba:61:92:78:1f
Serial Number (int): 328719523395357688641051220674314285250591
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fa:0c:aa:22:27:a3:54:69:74:8c:0a:6d:fe:90:2f:3e:a7:eb:be:3f
Fingerprint (sha256): ed:ae:ad:d5:71:16:e0:53:9a:6a:35:55:a5:7f:ca:20:41:2e:86:0b:a0:72:f1:dc:72:f7:20:74:90:89:80:c7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate admin.cusd1.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.cusd1.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acsaregion13.org
admin.acsaregion13.org
admin.arcoirisschool.org
admin.colegioedlio.org
admin.coloradoearlycolleges.org
admin.cristoreyfortworth.org
admin.cusd1.com
admin.fdrhs.org
admin.fessenden-bowdon.org
admin.gghs.us
admin.gilbertmagnetschool.org
admin.high.cusd1.com
admin.huffmanef.com
admin.intermediate.cusd1.com
admin.mazenod.edu.mx
admin.middle.cusd1.com
admin.nvoc.org
admin.primary.cusd1.com
admin.saltlakeeshawaii.org
admin.san-saba.net
admin.sd925.org
admin.tfhe.org
admin.venturacharterschool.org
admin.zionmarengo.net
arcoirisschool.info
arcoirisschool.org
aurora.coloradoearlycolleges.org
central.mcssk12.org
colegioedlio.org
coloradoearlycolleges.org
cristoreyfortworth.org
endeavor.mcssk12.org
fessenden-bowdon.org
gghs.us
gilbertmagnetschool.org
harvest.mcssk12.org
hazelgreenelementary.mcssk12.org
heritagevalley.fillmoreusd.org
high.cusd1.com
huffmanef.com
intermediate.cusd1.com
intermediate.sd925.org
legacy.mcssk12.org
lynnfanning.mcssk12.org
madisoncountyelementary.mcssk12.org
madisoncrossroads.mcssk12.org
mazenod.edu.mx
meridianville.mcssk12.org
middle.cusd1.com
middle.sd925.org
monroviaelementary.mcssk12.org
monroviamiddle.mcssk12.org
mooresmill.mcssk12.org
mtcarmel.mcssk12.org
newhopeelementary.mcssk12.org
newmarket.mcssk12.org
nvoc.org
owenscrossroads.mcssk12.org
pace.mcssk12.org
primary.cusd1.com
primary.sd925.org
riovista.fillmoreusd.org
rivertonelementary.mcssk12.org
rivertonintermediate.mcssk12.org
saltlakeeshawaii.org
san-saba.net
sd925.org
sparkmanmiddle.mcssk12.org
tfhe.org
venturacharterschool.com
venturacharterschool.org
venturacharterschool.us
walnutgrove.mcssk12.org
www.acsaregion13.org
www.arcoirisschool.info
www.arcoirisschool.org
www.aurora.coloradoearlycolleges.org
www.bigpicture.org
www.bronxacademyofpromise.com
www.colegioedlio.org
www.coloradoearlycolleges.org
www.cristoreyfortworth.org
www.cusd1.com
www.fdrhs.org
www.fessenden-bowdon.org
www.fessenden.k12.nd.us
www.fillmoreusd.org
www.gghs.us
www.gilbertmagnetschool.org
www.huffmanef.com
www.lahainalunahs.org
www.mazenod.edu.mx
www.mcssk12.org
www.nvoc.org
www.saltlake.k12.hi.us
www.saltlakeeshawaii.org
www.venturacharterschool.com
www.venturacharterschool.us
www.zionmarengo.net
zionmarengo.net

Other certificates including the domain name cusd1.com

(limited to 100 certificates)
cusd1.com
walshcps.org
admin-cuajimalpa.peterson.edu.mx
admin.bcsd.com
cusd1.com
admin-cuajimalpa.peterson.edu.mx
high.cusd1.com
www.san-saba.net
admin.sd925.org
admin.mtsd-vt.org
admin.mtsd-vt.org
admin-cuajimalpa.peterson.edu.mx
adams.scrsd.org
acsaregion13.org
admin.aerostem.org
admin-cuajimalpa.peterson.edu.mx
www.bsd100.org
www.nuview.k12.ca.us
admin.sandiaprep.org
bis.bayfield.k12.co.us
stmss.org
admin.aes.uinta1.com
adams.scrsd.org
acsaregion13.org
aurora.coloradoearlycolleges.org
cusd1.com
admin.aerostem.org
cusd1.com
wsis.scrsd.org
*.cusd1.com
admin-cuajimalpa.peterson.edu.mx
mes.mtsd-vt.org
admin.aerostem.org
adams.scrsd.org
admin.primary.cusd1.com
www.mammothusd.org
cusd1.com
acacia.hemetusd.org
cusd1.com
admin-cuajimalpa.peterson.edu.mx
acsaregion13.org
admin.aerostem.org
admin.harding.bcsd.com
*.cusd1.com
www.sandiaprep.org
cusd1.com
nes.nuview.k12.ca.us
admin.sandiaprep.org
acsaregion13.org
sequoia.bcsd.com
admin.mhs.mtsd-vt.org
admin.aes.uinta1.com
admin-cuajimalpa.peterson.edu.mx
cusd1.com
peterson.edu.mx
admin-cuajimalpa.peterson.edu.mx
www.stmss.org
mtvernon.bcsd.com
admin.sd925.org
cusd1.com
admin.cusd1.com
www.zionmarengo.net
cusd1.com
cusd1.com
admin.cusd1.com
admin.fletcher.bcsd.com
admin.jefferson.bcsd.com
admin-cuajimalpa.peterson.edu.mx

Certificate

The complete raw certificate details for admin.cusd1.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328719523395357688641051220674314285250591
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-27 11:02:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 11:02:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.cusd1.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2323 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acsaregion13.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.acsaregion13.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.arcoirisschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.colegioedlio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.coloradoearlycolleges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cristoreyfortworth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cusd1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fdrhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fessenden-bowdon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gghs.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gilbertmagnetschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.high.cusd1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.huffmanef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.intermediate.cusd1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mazenod.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.middle.cusd1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nvoc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.primary.cusd1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.saltlakeeshawaii.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.san-saba.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sd925.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tfhe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.venturacharterschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.zionmarengo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcoirisschool.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcoirisschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurora.coloradoearlycolleges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'central.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colegioedlio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradoearlycolleges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cristoreyfortworth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endeavor.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fessenden-bowdon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gghs.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gilbertmagnetschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harvest.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hazelgreenelementary.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heritagevalley.fillmoreusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'high.cusd1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huffmanef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intermediate.cusd1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intermediate.sd925.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lynnfanning.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madisoncountyelementary.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madisoncrossroads.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mazenod.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meridianville.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'middle.cusd1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'middle.sd925.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monroviaelementary.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monroviamiddle.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mooresmill.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtcarmel.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newhopeelementary.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newmarket.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nvoc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owenscrossroads.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pace.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primary.cusd1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primary.sd925.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riovista.fillmoreusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rivertonelementary.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rivertonintermediate.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saltlakeeshawaii.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-saba.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sd925.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparkmanmiddle.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tfhe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venturacharterschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venturacharterschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venturacharterschool.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walnutgrove.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acsaregion13.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arcoirisschool.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arcoirisschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aurora.coloradoearlycolleges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigpicture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bronxacademyofpromise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegioedlio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coloradoearlycolleges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cristoreyfortworth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cusd1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fdrhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fessenden-bowdon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fessenden.k12.nd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fillmoreusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gghs.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gilbertmagnetschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huffmanef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lahainalunahs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mazenod.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcssk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nvoc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saltlake.k12.hi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saltlakeeshawaii.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.venturacharterschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.venturacharterschool.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zionmarengo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zionmarengo.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001692ed5ca6900000403004830460221009266b7e5a754a44f9bad6f702da9928638c218fba3659f70bc3ab8db2bd98fa40221009f216af62912f47eab9263c90dba825168808a7c8ee8f2813f62e26411795f1100770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001692ed5c8730000040300483046022100b4d1f2be955d5132d87e4d7fef93ee3d7cc504ee8e47a5a8af53dccc9d561526022100b1a6276869b39660d3d4e9ff60fb62b03b30832a3c4b1473de64d4abcae184fd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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