www.nbfacademy.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b8:ed:b3:ee:a6:a6:fd:73:d5:09:96:7c:9c:aa:b4:29:f8 was issued on by Let's Encrypt.

With 70 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.nbfacademy.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b8:ed:b3:ee:a6:a6:fd:73:d5:09:96:7c:9c:aa:b4:29:f8
Serial Number (int): 324264774605289161576486475124050828208632
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8f:bd:32:94:e1:67:7a:e5:77:08:a1:8b:68:09:73:39:cf:c9:4d:07
Fingerprint (sha256): ef:1b:17:bf:90:f8:50:cc:d8:94:e2:68:de:63:60:3f:42:e8:76:81:9e:b1:d1:ca:38:d4:ae:4c:20:6f:fe:32

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.nbfacademy.org

70

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nbfacademy.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.armstrong.pusd.org
admin.bchs.bradleyschools.org
admin.bcvs.bradleyschools.org
admin.bfes.bradleyschools.org
admin.bme.zcs.k12.in.us
admin.ces.bradleyschools.org
admin.cpcs.us
admin.decker.pusd.org
admin.east.kippneworleans.org
admin.fremont.pusd.org
admin.goal.bradleyschools.org
admin.harrsion.pusd.org
admin.hes.bradleyschools.org
admin.inspiredteachingschool.org
admin.lexington.pusd.org
admin.lfms.bradleyschools.org
admin.madison.pusd.org
admin.maes.bradleyschools.org
admin.mckusd.org
admin.morial.kippneworleans.org
admin.nles.bradleyschools.org
admin.oges.bradleyschools.org
admin.oms.bradleyschools.org
admin.pes.bradleyschools.org
admin.pusd.org
admin.pves.bradleyschools.org
admin.tes.bradleyschools.org
admin.vves.bradleyschools.org
admin.wces.bradleyschools.org
admin.wvhs.bradleyschools.org
allison.pusd.org
bchs.bradleyschools.org
bcvs.bradleyschools.org
bfes.bradleyschools.org
ces.bradleyschools.org
cortez.pusd.org
east.kippneworleans.org
emerson.pusd.org
goal.bradleyschools.org
goldensprings.pusd.org
hes.bradleyschools.org
hubbardisd.com
lfms.bradleyschools.org
lorbeer.pusd.org
lvstc.pusd.org
madisonchristianschool.com
maes.bradleyschools.org
morial.kippneworleans.org
ngc.lancasterisd.org
nles.bradleyschools.org
oges.bradleyschools.org
oms.bradleyschools.org
pes.bradleyschools.org
portlandvillageschool.org
pves.bradleyschools.org
tes.bradleyschools.org
vves.bradleyschools.org
wces.bradleyschools.org
willow.hsd153.org
wvhs.bradleyschools.org
www.bronxenvision.org
www.cpcs.us
www.dellagoacademy.org
www.fpcharter.org
www.hsd153.org
www.kippneworleans.org
www.mckusd.org
www.nbfacademy.org
www.ncsd.k12.ca.us
www.pueblonuevo.org

Other certificates including the domain name nbfacademy.org

(limited to 100 certificates)
www.bradleyschools.org
oce.lifeschools.net
nbfacademy.org
ace.pusd.org
www.hwrsd.org
bradleyschools.org
admin.eag.zcs.k12.in.us
www.hwrsd.org
admin.morelandpreschool.moreland.org
admin.aes.cherokee.k12.nc.us
admin.cfn.edu.mx
nbfacademy.org
admin.mhs.cherokee.k12.nc.us
www.hwrsd.org
admin.centralcityprimary.kippneworleans.org
admin.aes.cvsd.org
admin.frsd12.org
latimer.moreland.org
frederickadouglass.kippneworleans.org
admin.allison.pusd.org
admin.aes.cherokee.k12.nc.us
admin.cvhs.cvsd.org
admin.hs.gsd.wednet.edu
admin.bchs.bradleyschools.org
ms.gsd.wednet.edu
admin.rems.cherokee.k12.nc.us
admin.aes.cvsd.org
admin.eag.zcs.k12.in.us
nbfacademy.org
ace.pusd.org
admin.ahs.cherokee.k12.nc.us
riverview.durangoschools.org
admin.nbfacademy.org
admin.frsd12.org
nbfacademy.org
ace.pusd.org
nbfacademy.org
admin.anderson.moreland.org
eceap.gsd.wednet.edu
admin.aes.cherokee.k12.nc.us
stmmsa.org
admin.centralcityprimary.kippneworleans.org
www.komarek94.org
nbfacademy.org
admin.bes.cvsd.org
admin.ges.cvsd.org
admin.ace.pusd.org
admin.elc.cvsd.org
ace.pusd.org
admin.armstrong.pusd.org
ace.pusd.org
admin.aes.cherokee.k12.nc.us
admin.resedahs.net
nbfacademy.org
admin.ace.pusd.org
ace.pusd.org
nbfacademy.org
admin.anderson.moreland.org
nbfacademy.org
nbfacademy.org
pes.cherokee.k12.nc.us
admin.bradfield.hpisd.org
admin.sh.hwrsd.org
admin.mes.cvsd.org
admin.hs.hpisd.org
admin.centralcityprimary.kippneworleans.org
mcems.cherokee.k12.nc.us
admin.centralcityprimary.kippneworleans.org
admin.ahs.cherokee.k12.nc.us
admin.cvsd.org
admin.mcems.cherokee.k12.nc.us
www.tcsk12.com
ace.pusd.org
admin.ace.pusd.org
admin.centralcityprimary.kippneworleans.org
ace.pusd.org
nbfacademy.org
admin.mms.cherokee.k12.nc.us
www.nbfacademy.org
admin.ace.pusd.org
hwrsd.org
admin.armstrong.pusd.org
admin.floridamesa.durangoschools.org
charlottechoicecharter.org

Certificate

The complete raw certificate details for www.nbfacademy.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQbTHb+2z7
rfYVCl+ph5m8FJJOEgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5pV3R4RBg
n18RTHnTD9fS27JxyeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGrmQF3Z/h2
e6StagubO+pVwFzG8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK7wAhJO8e
l2z375LDd2VIwrdWQP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlWZ1AdjOKf
RiY0ckFuu/DYkuvkNKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5Tu7zbek/
MR/JMR9nceWyZ2Mund+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzwWzBvTD8F
7q6ckUbIgpeo7stn7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuaivjW/P+Tm
64XjXNjP9F1W8+5tlcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ4Iudx/o3
Q4E2w6Aud9PYyV05pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/h0omUmCI
DiQVG30eHhb3OIP3bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUnohkUi6ik
D4me6o58sq/IQVmyem1M/E0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324264774605289161576486475124050828208632
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-18 01:02:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-16 01:02:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nbfacademy.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1737 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.armstrong.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bchs.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bcvs.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bfes.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bme.zcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ces.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cpcs.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.decker.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.east.kippneworleans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fremont.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.goal.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.harrsion.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hes.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.inspiredteachingschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lexington.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lfms.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.madison.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.maes.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mckusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.morial.kippneworleans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nles.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.oges.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.oms.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pes.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pves.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tes.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.vves.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wces.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wvhs.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allison.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bchs.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcvs.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bfes.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ces.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cortez.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'east.kippneworleans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emerson.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goal.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldensprings.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hes.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hubbardisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lfms.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lorbeer.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lvstc.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madisonchristianschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maes.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morial.kippneworleans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngc.lancasterisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nles.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oges.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oms.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pes.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portlandvillageschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pves.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tes.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vves.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wces.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willow.hsd153.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wvhs.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bronxenvision.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpcs.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dellagoacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fpcharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsd153.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kippneworleans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mckusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nbfacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncsd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pueblonuevo.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001654ac5523d0000040300473045022100d0ba1674f101b695c79ad45a92b6090d28dd022870cc1fe13623afd77847d326022028869e9dcf0b8c4ce03558f5b8c47cb09e3ecdc0ce8f4d106b632dd919d0b85b007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001654ac552580000040300473045022100d7b51a15be180a0dbd86b7b7d8f19311a5d8fc5d4abbd912fe68e83a19b5d5e9022002f57ec96002b2b71998035c4783f76ffadc34c9230cc0817a6cde26cc2e8227
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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