abchandler.henderson.k12.ky.us

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:81:84:12:77:bc:5c:2e:6c:09:4c:fb:15:04:dc:83:3d:72 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=abchandler.henderson.k12.ky.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:81:84:12:77:bc:5c:2e:6c:09:4c:fb:15:04:dc:83:3d:72
Serial Number (int): 305408837113399030377676528780822628744562
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 71:f9:4d:de:4a:81:3e:26:46:fb:73:0c:b1:3b:0f:7a:f8:f8:d7:f6
Fingerprint (sha256): f2:c7:dd:2a:e9:71:cb:39:f9:30:e9:a7:c6:11:9b:3c:da:5a:e3:e8:cb:99:00:2b:42:5d:53:1f:52:99:0a:b5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate abchandler.henderson.k12.ky.us

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for abchandler.henderson.k12.ky.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abchandler.henderson.k12.ky.us
abchandler.henderson.kyschools.us
admin.aieaelementary.com
admin.ccabr.org
admin.cds.needlesusd.org
admin.cves.needlesusd.org
admin.gordonbernell.org
admin.intensivelearningcenter.org
admin.newhopeacademybrooklyn.org
admin.pearlharborkai.org
admin.ramonaelementarybusd.org
admin.stephenfosterelementary.org
aieaelementary.com
ais.academyisd.net
arnaudvilleelem.slp.k12.la.us
bendgate.henderson.k12.ky.us
bendgate.henderson.kyschools.us
boynton.cuhsd.org
branham.cuhsd.org
cace.cuhsd.org
cairo.henderson.k12.ky.us
cairo.henderson.kyschools.us
canktonelem.slp.k12.la.us
ccas.ccusd.org
cds.needlesusd.org
centralacademy.henderson.k12.ky.us
centralacademy.henderson.kyschools.us
ces.ccs-nc.org
chs.ccs-nc.org
cms.ccs-nc.org
cves.needlesusd.org
delmar.cuhsd.org
dws.weehawkenschools.net
eastelem.slp.k12.la.us
eastheights.henderson.k12.ky.us
eastheights.henderson.kyschools.us
ei.themethighschool.org
euniceelem.slp.k12.la.us
glendaleelem.slp.k12.la.us
gordonbernell.com
gordonbernell.org
grandcoteauelem.slp.k12.la.us
grandprairieelem.slp.k12.la.us
groleeelem.slp.k12.la.us
hchs.henderson.k12.ky.us
hchs.henderson.kyschools.us
higgins.mccomb.k12.ms.us
highlandelem.slp.k12.la.us
independence.summitacademyschools.org
intensivelearningcenter.org
jefferson.henderson.k12.ky.us
jefferson.henderson.kyschools.us
kennedy.mccomb.k12.ms.us
krotzspringselem.slp.k12.la.us
lawtellelem.slp.k12.la.us
leigh.cuhsd.org
martell.troy.k12.mi.us
newhopeacademybrooklyn.org
newhopebrooklyn.org
niagara.henderson.k12.ky.us
niagara.henderson.kyschools.us
northmiddle.henderson.k12.ky.us
northmiddle.henderson.kyschools.us
pearlharborkai.org
prospect.cuhsd.org
ramonaelementarybusd.org
southheights.henderson.k12.ky.us
southheights.henderson.kyschools.us
southmiddle.henderson.k12.ky.us
southmiddle.henderson.kyschools.us
spottsville.henderson.k12.ky.us
spottsville.henderson.kyschools.us
stephenfosterelementary.org
summit.mccomb.k12.ms.us
svts.wvsd.org
tbjelc.henderson.k12.ky.us
tbjelc.henderson.kyschools.us
trinitystelementary.com
trs.weehawkenschools.net
westmont.cuhsd.org
whs.weehawkenschools.net
www.aieaelementary.com
www.boynton.cuhsd.org
www.branham.cuhsd.org
www.cace.cuhsd.org
www.ccabr.org
www.delmar.cuhsd.org
www.epiphanyprep.org
www.gordonbernell.com
www.gordonbernell.org
www.intensivelearningcenter.org
www.leigh.cuhsd.org
www.newhopeacademybrooklyn.org
www.newhopebrooklyn.org
www.pearlharborkai.org
www.prospect.cuhsd.org
www.ramonaelementarybusd.org
www.slhs.us
www.stephenfosterelementary.org
www.westmont.cuhsd.org

Other certificates including the domain name henderson.k12.ky.us

(limited to 100 certificates)
academy.swartzcreek.org
admin.kernhighnetwork.com
cchs.ccusd.org
academy.swartzcreek.org
abchandler.henderson.k12.ky.us
tcms.todd.kyschools.us
cphs.ccusd.org
admin.tcms.todd.kyschools.us
peck.cps.edu
academy.swartzcreek.org
academy.swartzcreek.org
admin.mes.mayfield.kyschools.us
admin.clarabartonhs.org
www.nicholsonstemacademy.org
abchandler.henderson.k12.ky.us
abchandler.henderson.k12.ky.us
clarabartonhs.org
admin.smithcountymiddle.smithcoedu.com
admin.smithcountyhigh.smithcoedu.com
www.pacificschool.com
camden.cuhsd.org
lawtellelem.slp.k12.la.us
admin.ei.themethighschool.org
academy.swartzcreek.org
lhs.lexingtonisd.net
sunrisewaldorfschool.org
trinitystelementary.com
abchandler.henderson.k12.ky.us
www.notredameacademy.org
academy.swartzcreek.org
www.chinaspringisd.net
admin.edlio.mx
bishopmacdonell.wellingtoncdsb.ca
academy.swartzcreek.org
ocd.ccusd.org
www.ccs-nc.org
abchandler.henderson.k12.ky.us
academy.swartzcreek.org
abchandler.henderson.k12.ky.us
www.summitacademyschools.org
www.macademy.org
admin.ntes.todd.kyschools.us
academy.swartzcreek.org
academy.swartzcreek.org
admin.clarabartonhs.org
abchandler.henderson.k12.ky.us
arnaudvilleelem.slp.k12.la.us
admin.sssq.org
cphs.ccusd.org
admin.unionheights.smithcoedu.com
admin.cuhsd.org
vms.monroe.k12.tn.us
www.lasfloreseducationalcenter.org
academy.swartzcreek.org
abchandler.henderson.k12.ky.us
admin.needlesusd.org
admin.tcms.todd.kyschools.us
admin.br.needlesusd.org
admin.todd.kyschools.us
abchandler.henderson.k12.ky.us
bluffdale.summitacademyschools.org
abchandler.henderson.k12.ky.us
grandcoteauelem.slp.k12.la.us
whitehouseisd.org
abchandler.henderson.k12.ky.us
independence.summitacademyschools.org
abchandler.henderson.k12.ky.us
abchandler.henderson.k12.ky.us
madisonchristianschool.com

Certificate

The complete raw certificate details for abchandler.henderson.k12.ky.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQbTHb+2z7
rfYVCl+ph5m8FJJOEgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5pV3R4RBg
n18RTHnTD9fS27JxyeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGrmQF3Z/h2
e6StagubO+pVwFzG8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK7wAhJO8e
l2z375LDd2VIwrdWQP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlWZ1AdjOKf
RiY0ckFuu/DYkuvkNKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5Tu7zbek/
MR/JMR9nceWyZ2Mund+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzwWzBvTD8F
7q6ckUbIgpeo7stn7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuaivjW/P+Tm
64XjXNjP9F1W8+5tlcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ4Iudx/o3
Q4E2w6Aud9PYyV05pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/h0omUmCI
DiQVG30eHhb3OIP3bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUnohkUi6ik
D4me6o58sq/IQVmyem1M/E0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305408837113399030377676528780822628744562
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-19 01:08:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-17 01:08:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'abchandler.henderson.k12.ky.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2650 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abchandler.henderson.k12.ky.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abchandler.henderson.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.aieaelementary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ccabr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cds.needlesusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cves.needlesusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gordonbernell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.intensivelearningcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.newhopeacademybrooklyn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pearlharborkai.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ramonaelementarybusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stephenfosterelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aieaelementary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ais.academyisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arnaudvilleelem.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bendgate.henderson.k12.ky.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bendgate.henderson.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boynton.cuhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branham.cuhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cace.cuhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cairo.henderson.k12.ky.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cairo.henderson.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canktonelem.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccas.ccusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cds.needlesusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralacademy.henderson.k12.ky.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralacademy.henderson.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ces.ccs-nc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chs.ccs-nc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.ccs-nc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cves.needlesusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delmar.cuhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dws.weehawkenschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastelem.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastheights.henderson.k12.ky.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastheights.henderson.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ei.themethighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euniceelem.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glendaleelem.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gordonbernell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gordonbernell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandcoteauelem.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandprairieelem.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groleeelem.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hchs.henderson.k12.ky.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hchs.henderson.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'higgins.mccomb.k12.ms.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highlandelem.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'independence.summitacademyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intensivelearningcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jefferson.henderson.k12.ky.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jefferson.henderson.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kennedy.mccomb.k12.ms.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krotzspringselem.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawtellelem.slp.k12.la.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leigh.cuhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martell.troy.k12.mi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newhopeacademybrooklyn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newhopebrooklyn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niagara.henderson.k12.ky.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niagara.henderson.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northmiddle.henderson.k12.ky.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northmiddle.henderson.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pearlharborkai.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prospect.cuhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramonaelementarybusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southheights.henderson.k12.ky.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southheights.henderson.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southmiddle.henderson.k12.ky.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southmiddle.henderson.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spottsville.henderson.k12.ky.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spottsville.henderson.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stephenfosterelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summit.mccomb.k12.ms.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svts.wvsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbjelc.henderson.k12.ky.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbjelc.henderson.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trinitystelementary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trs.weehawkenschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westmont.cuhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whs.weehawkenschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aieaelementary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boynton.cuhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.branham.cuhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cace.cuhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccabr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.delmar.cuhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epiphanyprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gordonbernell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gordonbernell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intensivelearningcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leigh.cuhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newhopeacademybrooklyn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newhopebrooklyn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pearlharborkai.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prospect.cuhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ramonaelementarybusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slhs.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stephenfosterelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westmont.cuhsd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00682775c7665e6d39b5777f131ce6eff20f890eeeac38d5e7ce7b671cfe1275585a2225fb3a78c019aa23d234638a7f0edcac5fcb4c0485e6178d4df506f92ba3720d7c912ff3983d13c8cb91b71c5409cd7990ecd6e56ef8115228e1596b842be2edbeedc3454d4d4e992ec5515de5cf3f53fc50718d8192ac9f567f7022d03267e2082bf5ec05212e450819cf3c687ed703e332a4be7b83e70957516c3e4389ea2a4ff971b31bbe5faffcc984901fa93b476ac14c4ddacd3a9d53fbdc191bb7a50fbdcd2d1704145728fff3e0347e5598746e5970b680e700ce551d675b551fd8a5935ce2d71979bd44d8671ab7fcd143dc277e06014639278fb2762744a87d