*.hopewell.k12.va.us

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number b5:1b:27:ca:20:c3:23:7b:17:c9:3f:08:77:cc:70:d8 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.hopewell.k12.va.us,OU=Domain Control Validated+OU=InstantSSL Wildcard

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): b5:1b:27:ca:20:c3:23:7b:17:c9:3f:08:77:cc:70:d8
Serial Number (int): 240731266280453012040700415981220819160
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 29:b8:0c:97:16:ab:57:2f:84:d0:a3:36:27:7f:7f:a0:c4:04:ca:74
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 77:e7:97:a9:cc:14:d9:7a:d7:2b:47:78:d9:99:84:48:46:60:78:67
Fingerprint (sha256): f7:80:43:8d:c8:5d:f1:21:d3:46:84:86:1b:e6:9c:4c:ef:84:c2:de:d8:2d:25:b1:8d:75:d6:dc:01:3e:2f:64

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate *.hopewell.k12.va.us

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.hopewell.k12.va.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.hopewell.k12.va.us
hopewell.k12.va.us

Other certificates including the domain name hopewell.k12.va.us

(limited to 100 certificates)
acsaregion13.org
admin.ambassadorhigh.org
*.hopewell.k12.va.us
admin.sd925.org
admin.ambassadorhigh.org
admin-portal.lafmty.edu.mx
admin.ambassadorhigh.org
*.hopewell.k12.va.us
www.hopewell.k12.va.us
cfes.tomballisd.net
www.hardesty.k12.ok.us
admin.ambassadorhigh.org
admin.ambassadorhigh.org
admin.ambassadorhigh.org
acsaregion13.org
admin-portal.lafmty.edu.mx
athletics.ambassadorhigh.org
admin.ambassadorhigh.org
webmail.hopewell.k12.va.us
*.hopewell.k12.va.us
aes.sd70.bc.ca
www.missourimilitaryacademy.org
acsaregion13.org
acsaregion13.org
admin.ambassadorhigh.org
aurora.coloradoearlycolleges.org
acsaregion13.org
servicedesk.hopewell.k12.va.us
ces.tomballisd.net
admin.primary.cusd1.com
*.hopewell.k12.va.us
admin-portal.lafmty.edu.mx
acsaregion13.org
www.aspenridgeprepschool.org
acsaregion13.org
admin-portal.lafmty.edu.mx
tca.tomballisd.net
admin-portal.lafmty.edu.mx
acsaregion13.org
hopewell.k12.va.us
acsaregion13.org
admin.ambassadorhigh.org
hopewell.k12.va.us
admin-portal.lafmty.edu.mx
admin.ambassadorhigh.org
portal.lafmty.edu.mx
acsaregion13.org
www.usd458.com
highschool.otsegoknights.org
admin.sd925.org
hpsportal.hopewell.k12.va.us
admin-portal.lafmty.edu.mx
www.enterprisecharter.org
admin.ivinter.apluscharterschools.org
admin.ambassadorhigh.org
admin.es.victoriaschool.edu.mx
admin-portal.lafmty.edu.mx
admin.athletics.ambassadorhigh.org
admin.ambassadorhigh.org
*.hopewell.k12.va.us
admin.cgw.hopewell.k12.va.us
windsorms.coloradoearlycolleges.org
www.usd458.com

Certificate

The complete raw certificate details for *.hopewell.k12.va.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGDjCCBPagAwIBAgIRALUbJ8ogwyN7F8k/CHfMcNgwDQYJKoZIhvcNAQELBQAw
gY8xCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE3MDUGA1UE
AxMuU2VjdGlnbyBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBD
QTAeFw0xOTAzMTQwMDAwMDBaFw0yMDAzMTMyMzU5NTlaMGAxITAfBgNVBAsTGERv
bWFpbiBDb250cm9sIFZhbGlkYXRlZDEcMBoGA1UECxMTSW5zdGFudFNTTCBXaWxk
Y2FyZDEdMBsGA1UEAwwUKi5ob3Bld2VsbC5rMTIudmEudXMwggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQC0IYcjLD9IB6e8IevjIlFqtpqvScPmVR9H1JmP
bK9GqJ0HfWSetWuIJ4ybh1htWJbwe2mrPuVlm1TSYCH3I53O6L3zj/xBDqyEhTuh
gwTGuoGt5LcYdREpsdGvrWbFOFYp4EGxC8p/KHd9jqyKapt65Z4LI5iGLQBk8sFA
oAe0cJdA+fYRzkkXr8j4b261ExfJSWhF8ihdFvLUrluY784DehtK0vt/QjopaBp2
TcmUL50ZyRlFB8977N8XyRQUJ2TpgO/ba1CyUt3koZOXyXI18Gr2U27QDN9eiruC
nkB+LWpsquu/aMg7lfFiAKqp/1rTW6KwhKJMzvoimARpb3nfAgMBAAGjggKRMIIC
jTAfBgNVHSMEGDAWgBSNjF7EVK2K4Xfpm/mbBeG4AY1h4TAdBgNVHQ4EFgQUKbgM
lxarVy+E0KM2J39/oMQEynQwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEkGA1UdIARCMEAwNAYLKwYB
BAGyMQECAgcwJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMw
CAYGZ4EMAQIBMIGEBggrBgEFBQcBAQR4MHYwTwYIKwYBBQUHMAKGQ2h0dHA6Ly9j
cnQuc2VjdGlnby5jb20vU2VjdGlnb1JTQURvbWFpblZhbGlkYXRpb25TZWN1cmVT
ZXJ2ZXJDQS5jcnQwIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLnNlY3RpZ28uY29t
MDMGA1UdEQQsMCqCFCouaG9wZXdlbGwuazEyLnZhLnVzghJob3Bld2VsbC5rMTIu
dmEudXMwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwC72d+8H4pxtZOUI5eqkntH
OFeVCqtS6BqQlmQ2jh7RhQAAAWl8bDEWAAAEAwBIMEYCIQDCSk7QyrD6mskxgiXO
yPJyrewf3A61YU2ja5wKYui+JwIhAM3EDM9azxaicr58EswCNDRoPY/Q8WTDnhQQ
OU5zhCSrAHYAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFpfGwx
XgAABAMARzBFAiEA3CcgEkN6BhIKuYvLao9n0zlX0fe5mszhgOR5qFrFBA4CIBu6
55tvoS9t1sOd0QIcm+52WCUZUjBwAHlh66d9S9+vMA0GCSqGSIb3DQEBCwUAA4IB
AQAHx8eWABAulL1bseV1bLQ295kYZrDZTDJXTdEyw2rg/jPMcWj/lf71xSO8/hjg
aVXIa7E43JzWHhxKa2QMXtHDGYs/NKGuD06BoiK9Ki9c4mGN1wkTa6m8P2z/Zx1o
oMbb7dloU5OaQbI0CyqM7gTAlGK2wxM4eyWY/nkL6OonVOIJsQBlkU45zbvOQBbk
WA8/w+cJD9gjwTJyxFieKoBgOwmTWG9pbMYQ3+f26rngThy5zVUw9CjmBAmgPyak
sNV9YGGnrZDFRrWoyziqVhx7BZF7LXX9sBh/vgwjSplJ4WfASfli7WMGeLeL7REb
VxCEMMx2DGXIXU212PwgIDUN
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCGHIyw/SAenvCHr4yJR
araar0nD5lUfR9SZj2yvRqidB31knrVriCeMm4dYbViW8Htpqz7lZZtU0mAh9yOd
zui984/8QQ6shIU7oYMExrqBreS3GHURKbHRr61mxThWKeBBsQvKfyh3fY6simqb
euWeCyOYhi0AZPLBQKAHtHCXQPn2Ec5JF6/I+G9utRMXyUloRfIoXRby1K5bmO/O
A3obStL7f0I6KWgadk3JlC+dGckZRQfPe+zfF8kUFCdk6YDv22tQslLd5KGTl8ly
NfBq9lNu0AzfXoq7gp5Afi1qbKrrv2jIO5XxYgCqqf9a01uisISiTM76IpgEaW95
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 240731266280453012040700415981220819160
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InstantSSL Wildcard'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.hopewell.k12.va.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22739428107939285730633321253387556720830768890409255154210913991932816687426922434497356589575485182789732970911044605957112961325101070930351725372614410820463873980875277508399010783014624401593019248824201747652501635709586176505630057627461984929626168606244931503279817202726793578401270609910320159522721223539973878585694124433647112235842206572063123213173186934215026615323167689285107373217455761258028877767540955579522613573594951552194584787009626109480613472514984872768975793367826055843713636037944984231974784744376622192893385675058635033342315842341059432018724195111666651323001319987008446101983
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							29b80c9716ab572f84d0a336277f7fa0c404ca74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hopewell.k12.va.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hopewell.k12.va.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001697c6c31160000040300483046022100c24a4ed0cab0fa9ac9318225cec8f272adec1fdc0eb5614da36b9c0a62e8be27022100cdc40ccf5acf16a272be7c12cc023434683d8fd0f164c39e1410394e738424ab0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001697c6c315e0000040300473045022100dc272012437a06120ab98bcb6a8f67d33957d1f7b99acce180e479a85ac5040e02201bbae79b6fa12f6dd6c39dd1021c9bee76582519523070007961eba77d4bdfaf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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