admin.aquinashs.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2e:6c:e8:78:78:71:7d:3c:59:cf:7b:74:60:c4:cb:c5:16 was issued on by Let's Encrypt.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.aquinashs.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2e:6c:e8:78:78:71:7d:3c:59:cf:7b:74:60:c4:cb:c5:16
Serial Number (int): 277134610353491515400218495759511964075286
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 76:8b:29:34:75:5d:2a:59:e6:63:ba:52:d1:79:4f:0d:78:f4:e9:6c
Fingerprint (sha256): f3:dd:fb:57:35:1d:5a:16:86:8f:f9:40:fb:7b:ea:cf:66:a2:0a:6d:df:03:1f:d8:eb:f8:7f:f2:4d:9a:44:d5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate admin.aquinashs.net

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.aquinashs.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.aquinashs.net
admin.artsinactioncharter.org
admin.athletics.aquinashs.net
admin.balloustay.com
admin.bitely.garvey.k12.ca.us
admin.carbonvalleyacademy.org
admin.ccs.coloma.org
admin.ces.coloma.org
admin.chs.coloma.org
admin.cis.coloma.org
admin.cjh.coloma.org
admin.clanyc.org
admin.dewey.garvey.k12.ca.us
admin.emerson.garvey.k12.ca.us
admin.garvey.k12.ca.us
admin.garveyint.garvey.k12.ca.us
admin.hillcrest.garvey.k12.ca.us
admin.indianola.k12.ok.us
admin.kellycollegeprep.org
admin.mvista.garvey.k12.ca.us
admin.olgscott.net
admin.pac.aquinashs.net
admin.prospectridgeacademy.org
admin.rice.garvey.k12.ca.us
admin.sanchez.garvey.k12.ca.us
admin.st.louisschool.org
admin.stlouisschool.org
admin.templeint.garvey.k12.ca.us
admin.validatingaffirmingschools.org
admin.waldorfatlanta.org
admin.willard.garvey.k12.ca.us
artsinactioncharter.org
athletics.aquinashs.net
balloustay.com
bitely.garvey.k12.ca.us
carbonvalleyacademy.org
ccs.coloma.org
ces.coloma.org
chs.coloma.org
cis.coloma.org
cjh.coloma.org
clanyc.org
coloma.org
dewey.garvey.k12.ca.us
dougherty.k12.ga.us
emerson.garvey.k12.ca.us
garveyint.garvey.k12.ca.us
hillcrest.garvey.k12.ca.us
indianola.k12.ok.us
jcchs.org
kellycollegeprep.org
mvista.garvey.k12.ca.us
pac.aquinashs.net
peterson.mx
rice.garvey.k12.ca.us
sanchez.garvey.k12.ca.us
saspasadena.org
spencemanagementgroup.com
st.louisschool.org
templeint.garvey.k12.ca.us
validatingaffirmingschools.org
willard.garvey.k12.ca.us
www.aquinashs.net
www.artsinactioncharter.org
www.balloustay.com
www.carbonvalleyacademy.org
www.ccs.coloma.org
www.clanyc.org
www.coloma.org
www.garvey.k12.ca.us
www.gesd.us
www.indianola.k12.ok.us
www.jcchs.org
www.kellycollegeprep.org
www.olgscott.net
www.peterson.mx
www.prospectridgeacademy.org
www.pvphs.com
www.richland.k12.mo.us
www.saspasadena.org
www.st.louisschool.org
www.stlouisschool.org
www.validatingaffirmingschools.org
www.waldorfatlanta.org

Other certificates including the domain name aquinashs.net

(limited to 100 certificates)
mail.sbdiocese.org
scalefundercert.net
admin.amschool.edu.sv
admin.amschool.edu.sv
scalefundercert.net
scalefundercert.net
mail.sbdiocese.org
scalefundercert.net
admin.ces.coloma.org
scalefundercert.net
admin.amschool.edu.sv
scalefundercert.net
admin.amschool.edu.sv
athletics.aquinashs.net
mail.sbdiocese.org
mail.sbdiocese.org
admin.arete.prsd.us
www.aquinashs.net
admin.amschool.edu.sv
admin.artsinactioncharter.org
scalefundercert.net
scalefundercert.net
scalefundercert.net
mis.edu.mx
admin.stggcs.org
admin.pride.lindenusd.com
www.bhswca.com
www.clanyc.org
admin.amschool.edu.sv
athletics.aquinashs.net
scalefundercert.net
scalefundercert.net
scalefundercert.net
scalefundercert.net
scalefundercert.net
scalefundercert.net
lvmhs.lucernevalleyunified.org
scalefundercert.net
mail.sbdiocese.org
admin.amschool.edu.sv
scalefundercert.net
admin.amschool.edu.sv
mail.sbdiocese.org
mail.sbdiocese.org
acsaregionxv.org
admin.aquinashs.net
admin.bitely.garvey.k12.ca.us
scalefundercert.net
scalefundercert.net
scalefundercert.net
scalefundercert.net
scalefundercert.net
www.carbonvalleyacademy.org
scalefundercert.net
scalefundercert.net
peterson.mx
es.notredameacademy.org
vs.aceroschools.org
scalefundercert.net
mail.sbdiocese.org
aceroschools.org
admin.artsinactioncharter.org
scalefundercert.net
www.somonauk.net
mail.sbdiocese.org
mail.sbdiocese.org
mail.sbdiocese.org
sfunder6cert.net
www.st.louisschool.org
scalefundercert.net
admin.cove.prioritycharterschools.org
admin.amschool.edu.sv
scalefundercert.net
mail.sbdiocese.org
admin.sfxcatholicschool.org
scalefundercert.net
scalefundercert.net
mail.sbdiocese.org
scalefundercert.net
workstudyicacristorey.org
scalefundercert.net
en-merida.mis.edu.mx
scalefundercert.net
admin.cfn.edu.mx
pac.aquinashs.net
mail.sbdiocese.org
admin.eagles.lucernevalleyunified.org
mail.sbdiocese.org
admin.amschool.edu.sv
scalefundercert.net
admin.amschool.edu.sv
admin.family.mypagosaschools.com
admin.amschool.edu.sv
scalefundercert.net
admin.socialjusticemclc.org
claytonvalley.org
admin.aquinashs.net
scalefundercert.net
mail.sbdiocese.org
spencemanagementgroup.com

Certificate

The complete raw certificate details for admin.aquinashs.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277134610353491515400218495759511964075286
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-29 10:41:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-28 10:41:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.aquinashs.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1997 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.aquinashs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.artsinactioncharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.athletics.aquinashs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.balloustay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bitely.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.carbonvalleyacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ccs.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ces.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.chs.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cis.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cjh.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.clanyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dewey.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.emerson.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.garveyint.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hillcrest.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.indianola.k12.ok.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kellycollegeprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mvista.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.olgscott.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pac.aquinashs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.prospectridgeacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rice.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sanchez.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.st.louisschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stlouisschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.templeint.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.validatingaffirmingschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.waldorfatlanta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.willard.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artsinactioncharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athletics.aquinashs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balloustay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitely.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carbonvalleyacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccs.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ces.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chs.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cis.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cjh.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clanyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dewey.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dougherty.k12.ga.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emerson.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garveyint.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillcrest.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indianola.k12.ok.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcchs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kellycollegeprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvista.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pac.aquinashs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peterson.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rice.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanchez.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saspasadena.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spencemanagementgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st.louisschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'templeint.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'validatingaffirmingschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willard.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aquinashs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artsinactioncharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.balloustay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carbonvalleyacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccs.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clanyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coloma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garvey.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gesd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indianola.k12.ok.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jcchs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kellycollegeprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olgscott.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peterson.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prospectridgeacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pvphs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richland.k12.mo.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saspasadena.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st.louisschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stlouisschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.validatingaffirmingschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waldorfatlanta.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f5175ea0600000403004630440220779b5ff86febb17556b8fca4ebbe66e0bef3d0be9a4e11f5d69b6176450194b20220727d2f581319444833ca8a32b9b8eb853fd211be34dda54218a1a99cb81fc3cc007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f5175ea020000040300473045022100977ed5cad61d8338046c4dabc9be55ba893fd5031e482911ea2323a30f8e0e4602202f528f857eba73d836fbc5abfe4eeb41b76c681099f9410a419e7407a2cfd775
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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