aak8.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1c:17:72:74:30:2e:0f:f8:bc:c7:1b:d3:b7:42:99:83:16 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aak8.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1c:17:72:74:30:2e:0f:f8:bc:c7:1b:d3:b7:42:99:83:16
Serial Number (int): 270895930591388664395519383960977072030486
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8d:c8:bc:87:3e:38:0f:4e:42:4e:41:bb:85:57:ec:5d:5e:c9:b1:53
Fingerprint (sha256): f8:b9:4a:35:86:30:ee:f1:27:b2:8e:42:9d:c6:70:e5:5a:b5:aa:29:d5:3a:20:e9:fd:55:22:43:bc:65:86:66

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aak8.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aak8.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aak8.org
admin.aak8.org
admin.arroyo.spusd.net
admin.bes.roaneschools.com
admin.blytheelementaryschool.wearecms.com
admin.clearcreekelementaryschool.wearecms.com
admin.cms.roaneschools.com
admin.cp.aak8.org
admin.dses.roaneschools.com
admin.elementary.plsd.k12.pa.us
admin.grade.warrentonschools.com
admin.grupocedva.com
admin.hhs.roaneschools.com
admin.high.warrentonschools.com
admin.highschool.plsd.k12.pa.us
admin.hillside93.org
admin.hms.roaneschools.com
admin.kes.roaneschools.com
admin.kp.aak8.org
admin.lm.aak8.org
admin.marengo.spusd.net
admin.mb.aak8.org
admin.mec.roaneschools.com
admin.memphiseast.com
admin.mes.roaneschools.com
admin.mhs.roaneschools.com
admin.mms.roaneschools.com
admin.monterey.spusd.net
admin.mtes.roaneschools.com
admin.oshs.roaneschools.com
admin.osms.roaneschools.com
admin.plsd.k12.pa.us
admin.prep.warrentonschools.com
admin.ramaroadelementaryschool.wearecms.com
admin.rchs.roaneschools.com
admin.rhs.roaneschools.com
admin.rms.roaneschools.com
admin.roaneschools.com
admin.rves.roaneschools.com
admin.shamrockgardenselementaryschool.wearecms.com
admin.southcharlottemiddleschool.wearecms.com
admin.spms.spusd.net
admin.spusd.net
admin.warrentonschools.com
ardreykellhighschool.wearecms.com
arroyo.spusd.net
bes.roaneschools.com
billingsvilleelementaryschool.wearecms.com
cms.roaneschools.com
cp.aak8.org
dses.roaneschools.com
elementary.plsd.k12.pa.us
endhavenelementaryschool.wearecms.com
firstwardcreativeartsacademy.wearecms.com
francisbradleymiddleschool.wearecms.com
garingerhighschool.wearecms.com
governorsvillagestemacademylower.wearecms.com
grade.warrentonschools.com
grandoakelementaryschool.wearecms.com
greenwayparkelementaryschool.wearecms.com
grupocedva.com
hhs.roaneschools.com
high.warrentonschools.com
highschool.plsd.k12.pa.us
hillside93.org
hms.roaneschools.com
kes.roaneschools.com
kp.aak8.org
lm.aak8.org
marengo.spusd.net
mb.aak8.org
mec.roaneschools.com
memphiseast.com
mes.roaneschools.com
mhs.roaneschools.com
mms.roaneschools.com
monterey.spusd.net
mtes.roaneschools.com
oshs.roaneschools.com
osms.roaneschools.com
plsd.k12.pa.us
prep.warrentonschools.com
rchs.roaneschools.com
rhs.roaneschools.com
rms.roaneschools.com
roaneschools.com
rves.roaneschools.com
sphs.spusd.net
spms.spusd.net
spusd.net
warrentonschools.com
www.aak8.org
www.arroyo.spusd.net
www.grupocedva.com
www.hillside93.org
www.memphiseast.com
www.plsd.k12.pa.us
www.roaneschools.com
www.spusd.net
www.warrentonschools.com

Other certificates including the domain name aak8.org

(limited to 100 certificates)
prep.warrentonschools.com
zonedirector.aak8.org
remote.aak8.org
elementary.plsd.k12.pa.us
sre.dcs.edu
cp.aak8.org
aak8.org
admin.grupocedva.com
remote.aak8.org
aak8.org
aak8.org
admin.ramaroadelementaryschool.wearecms.com
aak8.org
aak8.org
aak8.org
www.aak8.org
memphiseast.com
admin.memphiseast.com
aak8.org
aak8.org
aak8.org
www.grupocedva.com
watchguard.aak8.org
grupocedva.com
aak8.org
aak8.org
zonedirectormb.aak8.org
aak8.org
zonedirectorcp.aak8.org
wje.dcs.edu
adfs1.aak8.org
aak8.org
admin.bes.roaneschools.com
aak8.org
adfs1.aak8.org
admin.oshs.roaneschools.com
aak8.org
adfs1.aak8.org
aak8.org
aak8.org
admin.clearcreekelementaryschool.wearecms.com
admin.carmelmiddleschool.wearecms.com
sphs.spusd.net
aak8.org
aak8.org
www.arroyo.spusd.net
watchguard.aak8.org
www.memphiseast.com
aak8.org

Certificate

The complete raw certificate details for aak8.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270895930591388664395519383960977072030486
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-21 09:56:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-20 09:56:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aak8.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2560 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aak8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.aak8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.arroyo.spusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bes.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.blytheelementaryschool.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.clearcreekelementaryschool.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cms.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cp.aak8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dses.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.elementary.plsd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.grade.warrentonschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.grupocedva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hhs.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.high.warrentonschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.highschool.plsd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hillside93.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hms.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kes.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kp.aak8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lm.aak8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.marengo.spusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mb.aak8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mec.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.memphiseast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mes.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mhs.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mms.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.monterey.spusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mtes.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.oshs.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.osms.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.plsd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.prep.warrentonschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ramaroadelementaryschool.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rchs.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rhs.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rms.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rves.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.shamrockgardenselementaryschool.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.southcharlottemiddleschool.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.spms.spusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.spusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.warrentonschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ardreykellhighschool.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arroyo.spusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bes.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billingsvilleelementaryschool.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.aak8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dses.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elementary.plsd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endhavenelementaryschool.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstwardcreativeartsacademy.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'francisbradleymiddleschool.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garingerhighschool.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'governorsvillagestemacademylower.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grade.warrentonschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandoakelementaryschool.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenwayparkelementaryschool.wearecms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupocedva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhs.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'high.warrentonschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highschool.plsd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillside93.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hms.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kes.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kp.aak8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm.aak8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marengo.spusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mb.aak8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mec.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memphiseast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mes.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhs.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monterey.spusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtes.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oshs.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osms.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plsd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prep.warrentonschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rchs.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhs.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rms.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rves.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sphs.spusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spms.spusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warrentonschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aak8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arroyo.spusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grupocedva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hillside93.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.memphiseast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plsd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roaneschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warrentonschools.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d537716820000040300483046022100af37b2f91acb2e85e66805494d2b8b8f4821d52caa9ae2b8bfe0d0202b9efeef022100d1b2ead966b6141c158aa2b99836128d30de235b0ae441af4db3c11e15fb2ba3007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d5377167c0000040300473045022037fedb81e1e8df0a418fee4b222f3ae441d5ca7377625dcf2c775224d515eb020221008e22d93b153d34608e224fa8a34042cd926b59965f887087c99437e4fa5ceff8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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