admin.aquinashs.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b8:01:60:36:56:87:4b:15:36:cd:bd:f9:3e:1d:b3:ae:80 was issued on by Let's Encrypt.

With 78 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.aquinashs.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b8:01:60:36:56:87:4b:15:36:cd:bd:f9:3e:1d:b3:ae:80
Serial Number (int): 323950642099333233295817803217249940778624
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6a:53:20:47:fe:ce:7f:c6:8d:1b:9a:eb:77:d3:54:19:40:57:e9:da
Fingerprint (sha256): fc:14:70:c3:32:22:d6:c5:e7:e9:85:e7:0b:40:6c:61:b7:48:18:0a:dd:47:28:9d:61:4a:9a:66:8e:54:e8:9c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate admin.aquinashs.net

78

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.aquinashs.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acsaregionxv.org
admin.acsaregionxv.org
admin.aquinashs.net
admin.athletics.aquinashs.net
admin.binghamminers.org
admin.gmstigers.com
admin.goldenvalleyhs.org
admin.merida.mis.edu.mx
admin.metro-arts.org
admin.millikanmiddleschool.org
admin.mis.edu.mx
admin.novaacademy.org
admin.oakridgereformed.org
admin.smidttech.org
admin.stcroixcatholic.org
admin.stgeorgeontario.com
admin.sunnysandses.com
admin.thefranklinranch.com
admin.waimeaelementary.org
admin.washburnschoolpr.com
alt.fisd.us
athletics.aquinashs.net
binghamminers.org
gmstigers.com
goldenvalleyhighschool.net
goldenvalleyhighschool.org
goldenvalleyhs.org
gt.rs-wolves.com
hs.fisd.us
merida.mis.edu.mx
metro-arts.com
metro-arts.org
millikanmiddleschool.org
ms.fisd.us
north.fisd.us
oakridgereformed.org
rt.aceroschools.org
smidttech.org
stcroixcatholic.org
sunnysandses.com
thefranklinranch.com
vs.aceroschools.org
waimeaelementary.org
washburnschoolpr.com
www.acsaregionxv.org
www.americanmartyrsschool.org
www.aquinashs.net
www.binghamminers.org
www.bishopamat.org
www.cfn.edu.mx
www.claytonvalley.org
www.fisd.us
www.gmstigers.com
www.gmstigers.org
www.goldenvalleyhighschool.net
www.goldenvalleyhighschool.org
www.goldenvalleyhs.org
www.highlandhall.org
www.metro-arts.com
www.metro-arts.org
www.millikanmiddleschool.org
www.mis.edu.mx
www.novaacademy.org
www.nweccharter.com
www.nweccharter.org
www.oakridgechristian.org
www.oakridgereformed.org
www.peabodycharter.org
www.sfayl.org
www.smidttech.org
www.sojournacademy.org
www.stcroixcatholic.org
www.stgeorgeontario.com
www.stggcs.org
www.sunnysandses.com
www.thefranklinranch.com
www.waimeaelementary.org
www.washburnschoolpr.com

Other certificates including the domain name aquinashs.net

(limited to 100 certificates)
mail.sbdiocese.org
scalefundercert.net
admin.amschool.edu.sv
admin.amschool.edu.sv
scalefundercert.net
scalefundercert.net
mail.sbdiocese.org
scalefundercert.net
admin.ces.coloma.org
scalefundercert.net
admin.amschool.edu.sv
scalefundercert.net
admin.amschool.edu.sv
athletics.aquinashs.net
mail.sbdiocese.org
mail.sbdiocese.org
admin.arete.prsd.us
www.aquinashs.net
admin.amschool.edu.sv
admin.artsinactioncharter.org
scalefundercert.net
scalefundercert.net
scalefundercert.net
mis.edu.mx
admin.stggcs.org
admin.pride.lindenusd.com
www.bhswca.com
www.clanyc.org
admin.amschool.edu.sv
athletics.aquinashs.net
scalefundercert.net
scalefundercert.net
scalefundercert.net
scalefundercert.net
scalefundercert.net
scalefundercert.net
lvmhs.lucernevalleyunified.org
scalefundercert.net
mail.sbdiocese.org
admin.amschool.edu.sv
scalefundercert.net
admin.amschool.edu.sv
mail.sbdiocese.org
mail.sbdiocese.org
acsaregionxv.org
admin.aquinashs.net
admin.bitely.garvey.k12.ca.us
scalefundercert.net
scalefundercert.net
scalefundercert.net
scalefundercert.net
scalefundercert.net
www.carbonvalleyacademy.org
scalefundercert.net
scalefundercert.net
peterson.mx
es.notredameacademy.org
vs.aceroschools.org
scalefundercert.net
mail.sbdiocese.org
aceroschools.org
admin.artsinactioncharter.org
scalefundercert.net
www.somonauk.net
mail.sbdiocese.org
mail.sbdiocese.org
mail.sbdiocese.org
sfunder6cert.net
www.st.louisschool.org
scalefundercert.net
admin.cove.prioritycharterschools.org
admin.amschool.edu.sv
scalefundercert.net
mail.sbdiocese.org
admin.sfxcatholicschool.org
scalefundercert.net
scalefundercert.net
mail.sbdiocese.org
scalefundercert.net
workstudyicacristorey.org
scalefundercert.net
en-merida.mis.edu.mx
scalefundercert.net
admin.cfn.edu.mx
pac.aquinashs.net
mail.sbdiocese.org
admin.eagles.lucernevalleyunified.org
mail.sbdiocese.org
admin.amschool.edu.sv
scalefundercert.net
admin.amschool.edu.sv
admin.family.mypagosaschools.com
admin.amschool.edu.sv
scalefundercert.net
admin.socialjusticemclc.org
claytonvalley.org
admin.aquinashs.net
scalefundercert.net
mail.sbdiocese.org
spencemanagementgroup.com

Certificate

The complete raw certificate details for admin.aquinashs.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINDTCCC/WgAwIBAgISA7gBYDZWh0sVNs29+T4ds66AMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MTMwOTQwNDlaFw0x
OTA4MTEwOTQwNDlaMB4xHDAaBgNVBAMTE2FkbWluLmFxdWluYXNocy5uZXQwggIi
MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCtrIXp7mbejFBtMdv7bPut9hUK
X6mHmbwUkk4SAS2wWeHzgwVeEiXu4Q62pKUwqxHbZ3Nw0C0rUbmlXdHhEGCfXxFM
edMP19LbsnHJ7J+Vd91RftXDhoavIx/wwT5kaGhpA/RdgHdcMauZAXdn+HZ7pK1q
C5s76lXAXMbxUMB2dqGxStseulJ5+JrOLKGF4+QvfNCD86ZpCQrvACEk7x6XbPfv
ksN3ZUjCt1ZA/YmNXz3Zh360hk6cCTaPIOW/cxhcpcaKUHKtCVZnUB2M4p9GJjRy
QW678NiS6+Q0qbZ/fNRq/DeyUK6NlYeQgdk2lo23F+yuki1QirlO7vNt6T8xH8kx
H2dx5bJnYy6d35JuB8t/3rA+FUFquuynUc1H4iSjK2vk8w1EHPBbMG9MPwXurpyR
RsiCl6juy2ftvQg1c9iA1PvMVf9Q0JxaP5pon4q7wwpXgQQS5qK+Nb8/5ObrheNc
2M/0XVbz7m2VwmAmEZTITKUJS0BGqE+iNTNCeuHWJRIxE0jaWIngi53H+jdDgTbD
oC5309jJXTmkWAx1Itg1EZBPJBFJpJtDceZ9mL+lCMXJSiGIDv+HSiZSYIgOJBUb
fR4eFvc4g/dsmKxdkrioSuflkOYp1SA0LcZL7LCtMAFiPQ34RSeiGRSLqKQPiZ7q
jnyyr8hBWbJ6bUz8TQIDAQABo4IJFzCCCRMwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW
BBQva8hNbCwuMvIAIP8tTWxa/G66uzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem
RWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3Nw
LmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0
LmludC14My5sZXRzZW5jcnlwdC5vcmcvMIIGzQYDVR0RBIIGxDCCBsCCEGFjc2Fy
ZWdpb254di5vcmeCFmFkbWluLmFjc2FyZWdpb254di5vcmeCE2FkbWluLmFxdWlu
YXNocy5uZXSCHWFkbWluLmF0aGxldGljcy5hcXVpbmFzaHMubmV0ghdhZG1pbi5i
aW5naGFtbWluZXJzLm9yZ4ITYWRtaW4uZ21zdGlnZXJzLmNvbYIYYWRtaW4uZ29s
ZGVudmFsbGV5aHMub3JnghdhZG1pbi5tZXJpZGEubWlzLmVkdS5teIIUYWRtaW4u
bWV0cm8tYXJ0cy5vcmeCHmFkbWluLm1pbGxpa2FubWlkZGxlc2Nob29sLm9yZ4IQ
YWRtaW4ubWlzLmVkdS5teIIVYWRtaW4ubm92YWFjYWRlbXkub3JnghphZG1pbi5v
YWtyaWRnZXJlZm9ybWVkLm9yZ4ITYWRtaW4uc21pZHR0ZWNoLm9yZ4IZYWRtaW4u
c3Rjcm9peGNhdGhvbGljLm9yZ4IZYWRtaW4uc3RnZW9yZ2VvbnRhcmlvLmNvbYIW
YWRtaW4uc3VubnlzYW5kc2VzLmNvbYIaYWRtaW4udGhlZnJhbmtsaW5yYW5jaC5j
b22CGmFkbWluLndhaW1lYWVsZW1lbnRhcnkub3JnghphZG1pbi53YXNoYnVybnNj
aG9vbHByLmNvbYILYWx0LmZpc2QudXOCF2F0aGxldGljcy5hcXVpbmFzaHMubmV0
ghFiaW5naGFtbWluZXJzLm9yZ4INZ21zdGlnZXJzLmNvbYIaZ29sZGVudmFsbGV5
aGlnaHNjaG9vbC5uZXSCGmdvbGRlbnZhbGxleWhpZ2hzY2hvb2wub3JnghJnb2xk
ZW52YWxsZXlocy5vcmeCEGd0LnJzLXdvbHZlcy5jb22CCmhzLmZpc2QudXOCEW1l
cmlkYS5taXMuZWR1Lm14gg5tZXRyby1hcnRzLmNvbYIObWV0cm8tYXJ0cy5vcmeC
GG1pbGxpa2FubWlkZGxlc2Nob29sLm9yZ4IKbXMuZmlzZC51c4INbm9ydGguZmlz
ZC51c4IUb2FrcmlkZ2VyZWZvcm1lZC5vcmeCE3J0LmFjZXJvc2Nob29scy5vcmeC
DXNtaWR0dGVjaC5vcmeCE3N0Y3JvaXhjYXRob2xpYy5vcmeCEHN1bm55c2FuZHNl
cy5jb22CFHRoZWZyYW5rbGlucmFuY2guY29tghN2cy5hY2Vyb3NjaG9vbHMub3Jn
ghR3YWltZWFlbGVtZW50YXJ5Lm9yZ4IUd2FzaGJ1cm5zY2hvb2xwci5jb22CFHd3
dy5hY3NhcmVnaW9ueHYub3Jngh13d3cuYW1lcmljYW5tYXJ0eXJzc2Nob29sLm9y
Z4IRd3d3LmFxdWluYXNocy5uZXSCFXd3dy5iaW5naGFtbWluZXJzLm9yZ4ISd3d3
LmJpc2hvcGFtYXQub3Jngg53d3cuY2ZuLmVkdS5teIIVd3d3LmNsYXl0b252YWxs
ZXkub3Jnggt3d3cuZmlzZC51c4IRd3d3Lmdtc3RpZ2Vycy5jb22CEXd3dy5nbXN0
aWdlcnMub3Jngh53d3cuZ29sZGVudmFsbGV5aGlnaHNjaG9vbC5uZXSCHnd3dy5n
b2xkZW52YWxsZXloaWdoc2Nob29sLm9yZ4IWd3d3LmdvbGRlbnZhbGxleWhzLm9y
Z4IUd3d3LmhpZ2hsYW5kaGFsbC5vcmeCEnd3dy5tZXRyby1hcnRzLmNvbYISd3d3
Lm1ldHJvLWFydHMub3Jnghx3d3cubWlsbGlrYW5taWRkbGVzY2hvb2wub3Jngg53
d3cubWlzLmVkdS5teIITd3d3Lm5vdmFhY2FkZW15Lm9yZ4ITd3d3Lm53ZWNjaGFy
dGVyLmNvbYITd3d3Lm53ZWNjaGFydGVyLm9yZ4IZd3d3Lm9ha3JpZGdlY2hyaXN0
aWFuLm9yZ4IYd3d3Lm9ha3JpZGdlcmVmb3JtZWQub3JnghZ3d3cucGVhYm9keWNo
YXJ0ZXIub3Jngg13d3cuc2ZheWwub3JnghF3d3cuc21pZHR0ZWNoLm9yZ4IWd3d3
LnNvam91cm5hY2FkZW15Lm9yZ4IXd3d3LnN0Y3JvaXhjYXRob2xpYy5vcmeCF3d3
dy5zdGdlb3JnZW9udGFyaW8uY29tgg53d3cuc3RnZ2NzLm9yZ4IUd3d3LnN1bm55
c2FuZHNlcy5jb22CGHd3dy50aGVmcmFua2xpbnJhbmNoLmNvbYIYd3d3LndhaW1l
YWVsZW1lbnRhcnkub3Jnghh3d3cud2FzaGJ1cm5zY2hvb2xwci5jb20wTAYDVR0g
BEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0
cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggECBgorBgEEAdZ5AgQCBIHzBIHwAO4A
dQApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWqwx9wfAAAEAwBG
MEQCIA0IRFG45+eZnEchgjns23qmTtyckGWciDxMKv5OxPCTAiBpNfWY9tkDmaAA
TjuYZ7nGyTOKt2EigjETd2Op/uhBnAB1AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAI
xjc1eeYQe8xWAAABarDH3iQAAAQDAEYwRAIgT+ZtUcyY6goHjGNFwcysngT8guTc
klLdXQclkm8OT4YCIDqEQFP8ug5KNEekvk4nRcr/A+bQoGH0BHq7GKwfU3/MMA0G
CSqGSIb3DQEBCwUAA4IBAQCMOzZx2rS1etGLeQPnO/IHeXC2Gwl1NMpusSrd8xyq
NBjAVQmA9olwAFCwshj8bFAkeK3NpxXuYv4IGalxT0mSiz/UVTl8qfzvB6gb8+BS
T246orsPhsv4jaysodhqatjSVTA4S87nMs3c/7dgRdALYIdogxucemZgAbWA5yqo
2fq/3i333NyVdPYvscs4AXr92kVLS8a0NBiwDVRBUPctSOsTp7hGhFfl0a33A4qV
WfWJz1c9jFHIojKuPgGbD5huiZVh+PbSZnw2PuV0tN5nqpEtZUoP6clBq947JG+w
V0sIhVsc94Ke4Kx6eMGuRmpu1jyOYPYdUaRAFH9ZSpJ9
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323950642099333233295817803217249940778624
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-13 09:40:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-11 09:40:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.aquinashs.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1732 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acsaregionxv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.acsaregionxv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.aquinashs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.athletics.aquinashs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.binghamminers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gmstigers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.goldenvalleyhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.merida.mis.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.metro-arts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.millikanmiddleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mis.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.novaacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.oakridgereformed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.smidttech.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stcroixcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stgeorgeontario.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sunnysandses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.thefranklinranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.waimeaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.washburnschoolpr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alt.fisd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athletics.aquinashs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'binghamminers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmstigers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldenvalleyhighschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldenvalleyhighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldenvalleyhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gt.rs-wolves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.fisd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merida.mis.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metro-arts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metro-arts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'millikanmiddleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.fisd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'north.fisd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oakridgereformed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rt.aceroschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smidttech.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcroixcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunnysandses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefranklinranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vs.aceroschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waimeaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washburnschoolpr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acsaregionxv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.americanmartyrsschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aquinashs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.binghamminers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bishopamat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cfn.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.claytonvalley.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fisd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmstigers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmstigers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldenvalleyhighschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldenvalleyhighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldenvalleyhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highlandhall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metro-arts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metro-arts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.millikanmiddleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mis.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novaacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nweccharter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nweccharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oakridgechristian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oakridgereformed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peabodycharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfayl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smidttech.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sojournacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcroixcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stgeorgeontario.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stggcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunnysandses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thefranklinranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waimeaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.washburnschoolpr.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ab0c7dc1f000004030046304402200d084451b8e7e7999c47218239ecdb7aa64edc9c90659c883c4c2afe4ec4f09302206935f598f6d90399a0004e3b9867b9c6c9338ab761228231137763a9fee8419c007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016ab0c7de24000004030046304402204fe66d51cc98ea0a078c6345c1ccac9e04fc82e4dc9252dd5d0725926f0e4f8602203a844053fcba0e4a3447a4be4e2745caff03e6d0a061f4047abb18ac1f537fcc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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