cespk2.cliftonisd.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:d2:c6:a0:dd:6c:a0:c2:ee:0f:9e:31:13:5d:0a:a0:c3:7a was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cespk2.cliftonisd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d2:c6:a0:dd:6c:a0:c2:ee:0f:9e:31:13:5d:0a:a0:c3:7a
Serial Number (int): 420172463182119760045011239847154681955194
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): aa:f9:96:4a:66:0c:24:dd:ff:c4:68:c9:92:26:d8:30:e2:fa:df:31
Fingerprint (sha256): f9:73:5d:09:2a:c5:ac:73:ce:f1:b4:6b:6a:60:86:5d:d9:01:36:95:32:6c:42:7e:cf:7c:c8:94:46:bd:87:eb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cespk2.cliftonisd.org

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cespk2.cliftonisd.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.apr298.com
admin.charterschoolofeducationalexcellence.org
admin.courreges.fvsd.us
admin.cox.fvsd.us
admin.ctkschool.com
admin.executiveprep.org
admin.fulton.fvsd.us
admin.gisler.fvsd.us
admin.hnhsoakland.org
admin.kipapaelementary.org
admin.learningatlovejoy.com
admin.lockwoodavenue.org
admin.masuda.fvsd.us
admin.mhs.molineschools.org
admin.molineschools.org
admin.newland.fvsd.us
admin.oka.fvsd.us
admin.plavan.fvsd.us
admin.saintemydiuscatholicschool.org
admin.saturnelementary.org
admin.talbert.fvsd.us
admin.tamura.fvsd.us
admin.vicksburgcatholic.org
apr298.com
bess.sd91.bc.ca
ces.cliftonisd.org
cespk2.cliftonisd.org
charterschoolofeducationalexcellence.org
courreges.fvsd.us
cox.fvsd.us
ctkschool.com
decker.sd91.bc.ca
dvdhoy.sd91.bc.ca
elementary.otsegoknights.org
evd.sd91.bc.ca
executiveprep.org
fless.sd91.bc.ca
francois.sd91.bc.ca
fsjss.sd91.bc.ca
fulton.fvsd.us
gisler.fvsd.us
grassy.sd91.bc.ca
greenfieldschool.org
highschool.otsegoknights.org
hnhsoakland.org
juniorhigh.otsegoknights.org
kipapaelementary.org
ldss.sd91.bc.ca
learningatlovejoy.com
learningatlovejoy.net
learningatlovejoy.org
lockwoodavenue.org
mapes.sd91.bc.ca
masuda.fvsd.us
mouse.sd91.bc.ca
newland.fvsd.us
nvss.sd91.bc.ca
oka.fvsd.us
plavan.fvsd.us
saintemydiuscatholicschool.org
saturnelementary.org
skv.sd91.bc.ca
talbert.fvsd.us
wke.sd91.bc.ca
wlm.sd91.bc.ca
www.apr298.com
www.charterschoolofeducationalexcellence.org
www.courreges.fvsd.us
www.cox.fvsd.us
www.cristoreybatonrouge.org
www.ctkschool.com
www.executiveprep.org
www.fulton.fvsd.us
www.gisler.fvsd.us
www.goethecharterschool.org
www.greenfieldschool.org
www.hnhsoakland.org
www.kipapaelementary.org
www.knovalearning.org
www.learningatlovejoy.com
www.learningatlovejoy.net
www.learningatlovejoy.org
www.lockwoodavenue.org
www.masuda.fvsd.us
www.mmbethune.org
www.molineschools.org
www.newland.fvsd.us
www.oka.fvsd.us
www.otsegoknights.org
www.plavan.fvsd.us
www.saintemydiuscatholicschool.org
www.saturnelementary.org
www.sd91.bc.ca
www.sgusd.net
www.talbert.fvsd.us
www.tamura.fvsd.us
www.uinta1.k12.wy.us
www.vicksburgcatholic.org

Other certificates including the domain name cliftonisd.org

(limited to 100 certificates)
admin.apr298.com
admin.mms.mtps.org
cliftonisd.org
lp.parkerusd.org
cespk2.cliftonisd.org
cliftonisd.org
admin.va.davidson.k12.nc.us
www.ellwood.k12.pa.us
dz.aceroschools.org
admin.ah.wvsd208.org
www.rebsamen.mx
admin.breed.exteraschools.org
admin.bbe.parlierunified.org
admin.afantis.org
cliftonisd.org
admin.afantis.org
www.grandville.k12.mi.us
admin.ahes.mtps.org
ces.cliftonisd.org
admin.altavista.rbusd.org
ces35.cliftonisd.org
admin.es.elkhartisd.org
admin.es.elkhartisd.org
www.jcoms.org
admin.breed.exteraschools.org
admin.apr298.com
admin.breed.exteraschools.org
admin.apr298.com
admin.apr298.com
triviumcharter.org
admin.mlc.wvsd208.org
admin.breed.exteraschools.org
*.cliftonisd.org
admin.ahes.mtps.org
admin.breed.exteraschools.org
admin.tamura.fvsd.us
admin.apr298.com
www.monroe.k12.tn.us
admin.ahes.mtps.org
cliftonisd.org
admin.ces.cliftonisd.org
admin.harlanfalcons.org
admin.apr298.com
admin.ces.cliftonisd.org
admin.apr298.com
www.mlc.wvsd208.org
admin.holyfamilyhs.com
admin.cvilleschools.com
cliftonisd.org
admin.apr298.com
cliftonisd.org
admin.ahes.mtps.org
admin.ces.cliftonisd.org
admin.breed.exteraschools.org
adamsmiddle.org
cis.gobearsgo.net
admin.breed.exteraschools.org
bes.bayfield.k12.co.us
admin.ebcs.ebps.net
hirschhs.org
admin.breed.exteraschools.org
admin.cliftonisd.org
ah.wvsd208.org
admin.ahes.mtps.org
admin.apr298.com
admin.sme.davidson.k12.nc.us
fless.sd91.bc.ca
www.hs.wvsd208.org
admin.apr298.com
admin.ahes.mtps.org
admin.mhs.molineschools.org
admin.caes.iwcs.k12.va.us
highschool.otsegoknights.org
admin.es.elkhartisd.org
admin.mes150.org
cespk2.cliftonisd.org
admin.apr298.com

Certificate

The complete raw certificate details for cespk2.cliftonisd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 420172463182119760045011239847154681955194
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 01:02:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 01:02:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cespk2.cliftonisd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2192 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.apr298.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.charterschoolofeducationalexcellence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.courreges.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cox.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ctkschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.executiveprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fulton.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gisler.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hnhsoakland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kipapaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.learningatlovejoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lockwoodavenue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.masuda.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mhs.molineschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.molineschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.newland.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.oka.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.plavan.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.saintemydiuscatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.saturnelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.talbert.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tamura.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.vicksburgcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apr298.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bess.sd91.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ces.cliftonisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cespk2.cliftonisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charterschoolofeducationalexcellence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courreges.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cox.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctkschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decker.sd91.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvdhoy.sd91.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elementary.otsegoknights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evd.sd91.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'executiveprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fless.sd91.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'francois.sd91.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsjss.sd91.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fulton.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gisler.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grassy.sd91.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenfieldschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highschool.otsegoknights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hnhsoakland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juniorhigh.otsegoknights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kipapaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldss.sd91.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learningatlovejoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learningatlovejoy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learningatlovejoy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lockwoodavenue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapes.sd91.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masuda.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mouse.sd91.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newland.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nvss.sd91.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oka.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plavan.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintemydiuscatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saturnelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skv.sd91.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talbert.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wke.sd91.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wlm.sd91.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apr298.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charterschoolofeducationalexcellence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.courreges.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cox.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cristoreybatonrouge.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctkschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.executiveprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fulton.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gisler.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goethecharterschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenfieldschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hnhsoakland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kipapaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.knovalearning.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learningatlovejoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learningatlovejoy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learningatlovejoy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lockwoodavenue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masuda.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmbethune.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.molineschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newland.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oka.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otsegoknights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plavan.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintemydiuscatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saturnelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sd91.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sgusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.talbert.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tamura.fvsd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uinta1.k12.wy.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vicksburgcatholic.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dbdb424a40000040300483046022100f55f2171309190f2684b8705768b61f747554cc68a1f722af33173041807e8c1022100b3f7af9627be646adc7dc7aca7181226710423f05e9315cada2eb2e0d2622498007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dbdb424940000040300473045022100cb71b67b3677098e244e7410ae0c4355db8c36128a2a622f72279cb3851d3cf9022079cf1d2235d3509eca0c487b2e30f38c97ba1c6b6ccc501204318a992f32dd6b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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