www.arroyo.spusd.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:60:56:80:2b:c9:c9:bc:59:0c:b2:22:40:b1:e7:5a:66:a5 was issued on by Let's Encrypt.

With 64 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.arroyo.spusd.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:60:56:80:2b:c9:c9:bc:59:0c:b2:22:40:b1:e7:5a:66:a5
Serial Number (int): 294118944129457135463303791924198382397093
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a3:ce:47:b0:4a:64:1d:17:cb:1a:85:fa:58:9b:0e:88:17:cf:12:57
Fingerprint (sha256): ef:c8:eb:7e:34:8b:33:42:b7:85:97:06:d0:ac:2f:f5:c6:a0:6a:8a:91:62:9f:77:46:ee:58:7f:39:fb:0b:d5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.arroyo.spusd.net

64

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.arroyo.spusd.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aak8.org
admin.aak8.org
admin.arroyo.spusd.net
admin.cp.aak8.org
admin.elementary.plsd.k12.pa.us
admin.grupocedva.com
admin.highschool.plsd.k12.pa.us
admin.hillside93.org
admin.kes.roaneschools.com
admin.kp.aak8.org
admin.lm.aak8.org
admin.marengo.spusd.net
admin.mb.aak8.org
admin.mec.roaneschools.com
admin.memphiseast.com
admin.mes.roaneschools.com
admin.mhs.roaneschools.com
admin.mms.roaneschools.com
admin.monterey.spusd.net
admin.mtes.roaneschools.com
admin.osms.roaneschools.com
admin.plsd.k12.pa.us
admin.rchs.roaneschools.com
admin.rhs.roaneschools.com
admin.rms.roaneschools.com
admin.rves.roaneschools.com
admin.spms.spusd.net
admin.spusd.net
arroyo.spusd.net
bes.roaneschools.com
cms.roaneschools.com
cp.aak8.org
dses.roaneschools.com
elementary.plsd.k12.pa.us
hhs.roaneschools.com
highschool.plsd.k12.pa.us
hillside93.org
hms.roaneschools.com
kes.roaneschools.com
kp.aak8.org
lm.aak8.org
marengo.spusd.net
mb.aak8.org
mec.roaneschools.com
mes.roaneschools.com
mhs.roaneschools.com
mms.roaneschools.com
monterey.spusd.net
mtes.roaneschools.com
oshs.roaneschools.com
osms.roaneschools.com
plsd.k12.pa.us
rchs.roaneschools.com
rhs.roaneschools.com
rms.roaneschools.com
rves.roaneschools.com
spms.spusd.net
spusd.net
www.aak8.org
www.arroyo.spusd.net
www.grupocedva.com
www.hillside93.org
www.plsd.k12.pa.us
www.spusd.net

Other certificates including the domain name spusd.net

(limited to 100 certificates)
prep.warrentonschools.com
admin.facs.fentoncharter.net
www.tricityselpa.org
acecharterhigh.com
elementary.plsd.k12.pa.us
sphstigers.org
acecharterhigh.com
spusd.net
sre.dcs.edu
admin.preescolar.semperaltius.edu.mx
acecharterhigh.com
aak8.org
www.tricityselpa.org
admin.grupocedva.com
aak8.org
admin.ramaroadelementaryschool.wearecms.com
acecharterhigh.com
acecharterhigh.com
spusd.net
admin.3rcs.org
aak8.org
spusd.net
aak8.org
spusd.net
admin.tricityselpa.org
memphiseast.com
www.westfieldfriends.org
www.utmcs.org
flacsms.flacsnyc.com
admin.memphiseast.com
admin.schillingfarmses.colliervilleschools.org
spusd.net
aak8.org
poecenter246.com
stvfschool.org
aak8.org
www.grupocedva.com
*.spusd.net
admin.westfieldfriends.org
gpa.gonzalesisd.net
3rcs.org
spusd.net
acecharterhigh.com
3rcs.org
www.hscnewhaven.org
www.boyslatinms.org
grupocedva.com
bradleyschools.org
oce.lifeschools.net
aak8.org
acecharterhigh.com
spusd.net
jla.jubileeacademies.org
*.spusd.net
*.spusd.net
3rcs.org
kailuaintermediate.org
admin.beatty.bpsd.k12.ca.us
spms.spusd.net
wje.dcs.edu
acecharterhigh.com
admin.bes.roaneschools.com
aak8.org
acecharterhigh.com
*.spusd.net
admin.oshs.roaneschools.com
*.spusd.net
www.vanguardacademy.education
*.spusd.net
aak8.org
3rcs.org
spusd.net
3rcs.org
admin.poecenter246.com
acecharterhigh.com
aak8.org
www.salisburycatholicschool.org
*.spusd.net
gpa.gonzalesisd.net
jd.jubileeacademies.org
admin.clearcreekelementaryschool.wearecms.com
www.cmshnl.org
3rcs.org
admin.carmelmiddleschool.wearecms.com
sphs.spusd.net
admin.bennie.allenparkschools.com
aak8.org
www.northmiddle.org
aak8.org
3rcs.org
www.arroyo.spusd.net
www.memphiseast.com
spusd.net
*.spusd.net
aak8.org
cfh.chesterfieldschools.org
spusd.net
mms.mtps.org

Certificate

The complete raw certificate details for www.arroyo.spusd.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294118944129457135463303791924198382397093
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-15 10:21:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-13 10:21:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.arroyo.spusd.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1400 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aak8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.aak8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.arroyo.spusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cp.aak8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.elementary.plsd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.grupocedva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.highschool.plsd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hillside93.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kes.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kp.aak8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lm.aak8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.marengo.spusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mb.aak8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mec.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.memphiseast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mes.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mhs.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mms.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.monterey.spusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mtes.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.osms.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.plsd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rchs.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rhs.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rms.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rves.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.spms.spusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.spusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arroyo.spusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bes.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.aak8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dses.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elementary.plsd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhs.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highschool.plsd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillside93.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hms.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kes.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kp.aak8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm.aak8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marengo.spusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mb.aak8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mec.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mes.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhs.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monterey.spusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtes.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oshs.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osms.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plsd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rchs.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhs.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rms.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rves.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spms.spusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aak8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arroyo.spusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grupocedva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hillside93.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plsd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spusd.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016981157e8a0000040300473045022069fdd87c3bea6e7b5a24c9ada8b2f8370a92c39f5069781efa3dd2f96d1d9f27022100db2eb15843e3148c20f8a962c9e35c78f826b4a44c4d61d34b96a7c532a4b60600770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016981157ee10000040300483046022100ebc6cfd4184cd8fd2ca14ac398188648ec8c9c1c90606b13f932caf4a368bcec022100dea575fc6a86b976f59e3ad9db4570a415593df0a4515cbee3796ca23ba12669
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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