www.jacksoncoschools.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e8:9b:1a:15:eb:93:8c:c7:e5:c8:f7:04:ce:cf:18:44:a0 was issued on by Let's Encrypt.

With 54 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.jacksoncoschools.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e8:9b:1a:15:eb:93:8c:c7:e5:c8:f7:04:ce:cf:18:44:a0
Serial Number (int): 340488532704598331686778436861930333815968
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4a:8f:f7:e0:98:49:13:ff:ae:2d:48:b2:d0:29:0d:f6:51:9c:14:63
Fingerprint (sha256): f1:88:d5:67:67:dc:c5:c1:84:fe:1a:6e:1a:d7:c9:f0:d4:85:b0:bb:2f:99:bd:b8:c6:b0:0c:e2:31:53:1c:61

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.jacksoncoschools.com

54

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.jacksoncoschools.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.atc.mayfield.kyschools.us
admin.blhs.lex3.org
admin.cecvac.com
admin.ctc.dover.k12.nh.us
admin.edison.westfieldnjk12.org
admin.es.hoganprep.net
admin.franklin.westfieldnjk12.org
admin.hoganprep.net
admin.hs.hoganprep.net
admin.hsap.mtpcsd.org
admin.jacksoncoschools.com
admin.jchs.jacksoncoschools.com
admin.jcms.jacksoncoschools.com
admin.jefferson.westfieldnjk12.org
admin.jhs.ballingerisd.net
admin.lincoln.westfieldnjk12.org
admin.mayfield.kyschools.us
admin.mckinley.westfieldnjk12.org
admin.ms.hoganprep.net
admin.pac.sboe.org
admin.rapk3.richardallenschools.com
admin.roosevelt.westfieldnjk12.org
admin.saintpiusx.com
admin.tamaques.westfieldnjk12.org
admin.washington.westfieldnjk12.org
admin.whs.westfieldnjk12.org
admin.wilson.westfieldnjk12.org
cecvac.com
cse.cscisd.net
cshs.cscisd.net
ctc.dover.k12.nh.us
dbs.jacksoncoschools.com
dms.dover.k12.nh.us
dover.k12.nh.us
edison.westfieldnjk12.org
es.hoganprep.net
fmis.anacondaschools.org
ges.dover.k12.nh.us
ges.jacksoncoschools.com
hoganprep.net
hs.hoganprep.net
jacksoncoschools.com
jchs.jacksoncoschools.com
lwa-arts.org
ms.hoganprep.net
olneycharter.org
rapk3.richardallenschools.com
roosevelt.westfieldnjk12.org
www.dhs.dover.k12.nh.us
www.dover.k12.nh.us
www.jacksoncoschools.com
www.olneycharter.org
www.richardallenschools.com
www.tuffree.org

Other certificates including the domain name jacksoncoschools.com

(limited to 100 certificates)
athletics.godleyisd.net
admin.dover.k12.nh.us
ghck12.com
dkies.org
www.hoganprep.net
www.kipling.edu.mx
jacksoncoschools.com
admin.ardreykellhighschool.wearecms.com
ges.dover.k12.nh.us
admin.sunnyside.goldenruledallas.org
www.dover.k12.ok.us
admin.proctor.cv.k12.ca.us
jacksoncoschools.com
ylms.org
admin.union.kyschools.us
mtpcsd.org
admin.dbs.jacksoncoschools.com
support.jacksoncoschools.com
admin.illinois.goldenruledallas.org
chs.comalisd.org
dms.dover.k12.nh.us
hles.comalisd.org
camden.cuhsd.org
tpes.comalisd.org
www.wherelifehappens.org
admin.jchs.jacksoncoschools.com
cscisd.net
admin.dkies.org
jacksoncoschools.com
admin.todd.kyschools.us
admin.compton.bcsd.com
tbjelc.henderson.kyschools.us
jacksoncoschools.com
www.bufordsa.org
admin.wps.dover.k12.nh.us
mhs.mayfield.kyschools.us
admin.olneycharter.org
admin.eastview.gcschools.net
admin.saintpiusx.com
cecvac.com
jacksoncoschools.com
msd120.org
www.todd.kyschools.us
mes.mayfield.kyschools.us
bufordsa.org
admin.bayouacademy.net
www.whitesburgchristianacademy.org
admin.athletics.godleyisd.net
admin.bhs.ballingerisd.net
www.bayouacademy.net
admin.creekside.cv.k12.ca.us
admin.ges.dover.k12.nh.us
admin.jacksoncoschools.com
salem.mtpcsd.org
hoganprep.net
www.richardallenschools.com
admin.bles.lex3.org
admin.rapk3.richardallenschools.com
admin.bles.lex3.org
admin.bellamy.dover.k12.nh.us
admin.mes.mayfield.kyschools.us
www.union.kyschools.us
admin.cv.k12.ca.us
kiwedin.adsb.on.ca
hs.cscisd.net
pantojacharter.org
admin.ctc.dover.k12.nh.us
admin.jacksoncoschools.com
jacksoncoschools.com
admin.longfellow.bcsd.com
admin.athletics.godleyisd.net
cvhs.cv.k12.ca.us
www.jacksoncoschools.com
hs.hoganprep.net
jacksoncoschools.com
wlh.lauderdale.k12.ms.us
admin.bayouacademy.net
admin.cshs.cscisd.net
admin.mes.mayfield.kyschools.us
ges.dover.k12.nh.us
admin.rapk3.richardallenschools.com
proctor.cv.k12.ca.us
admin.dms.dover.k12.nh.us
admin.cochranecollegiateacademy.wearecms.com
www.jacksoncoschools.com
jacksoncoschools.com
admin.jacksoncoschools.com
sbms.comalisd.org
admin.charlotteeslanguageacademy.wearecms.com
www.marquettecatholic.org
admin.hoganprep.net
www.pantojacharter.org
seh.lauderdale.k12.ms.us
ctc.dover.k12.nh.us
admin.barnetteelementaryschool.wearecms.com
www.hss.dover.k12.nh.us
abchandler.henderson.kyschools.us
wilmer.goldenruledallas.org
ges.jacksoncoschools.com
admin.matthewselementaryschool.wearecms.com

Certificate

The complete raw certificate details for www.jacksoncoschools.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQbTHb+2z7
rfYVCl+ph5m8FJJOEgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5pV3R4RBg
n18RTHnTD9fS27JxyeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGrmQF3Z/h2
e6StagubO+pVwFzG8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK7wAhJO8e
l2z375LDd2VIwrdWQP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlWZ1AdjOKf
RiY0ckFuu/DYkuvkNKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5Tu7zbek/
MR/JMR9nceWyZ2Mund+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzwWzBvTD8F
7q6ckUbIgpeo7stn7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuaivjW/P+Tm
64XjXNjP9F1W8+5tlcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ4Iudx/o3
Q4E2w6Aud9PYyV05pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/h0omUmCI
DiQVG30eHhb3OIP3bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUnohkUi6ik
D4me6o58sq/IQVmyem1M/E0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340488532704598331686778436861930333815968
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-01 17:14:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-30 17:14:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.jacksoncoschools.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1374 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.atc.mayfield.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.blhs.lex3.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cecvac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ctc.dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.edison.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.es.hoganprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.franklin.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hoganprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hs.hoganprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hsap.mtpcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jacksoncoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jchs.jacksoncoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jcms.jacksoncoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jefferson.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jhs.ballingerisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lincoln.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mayfield.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mckinley.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ms.hoganprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pac.sboe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rapk3.richardallenschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.roosevelt.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.saintpiusx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tamaques.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.washington.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.whs.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wilson.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cecvac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cse.cscisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cshs.cscisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctc.dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbs.jacksoncoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dms.dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edison.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.hoganprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmis.anacondaschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ges.dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ges.jacksoncoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoganprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.hoganprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacksoncoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jchs.jacksoncoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lwa-arts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.hoganprep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olneycharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapk3.richardallenschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roosevelt.westfieldnjk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dhs.dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dover.k12.nh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jacksoncoschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olneycharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richardallenschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuffree.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169da1c18580000040300473045022073f04aef8da58de5b07bd180868131b2d74d4c4dc424f255db260aae823e8535022100d94e90811499a1707f45c938d22b12dcb4595b8d75b919bd1651e92a0b12922800760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169da1c1ad2000004030047304502200af0957db58f61a01668217d9c1edb2cee5e281e8bad336ac94a8bcfee2c81ab0221009676e895c9292b562d9aa262233d0ebf276385d58c766f859aa9a942f94fefa2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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