hs.cumberlandacademy.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c7:7f:30:aa:e7:d7:90:45:b8:e1:a1:43:13:54:7d:d4:e3 was issued on by Let's Encrypt.

With 83 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hs.cumberlandacademy.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c7:7f:30:aa:e7:d7:90:45:b8:e1:a1:43:13:54:7d:d4:e3
Serial Number (int): 329222113464639440009930592675965785986275
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 56:b0:13:ba:7f:9c:68:f6:ed:6f:fd:98:87:a7:4c:d9:c3:69:93:da
Fingerprint (sha256): fe:ba:23:32:b7:6a:dd:71:5e:ba:a8:42:21:7b:66:11:5d:f7:66:a0:ef:2f:a0:6b:75:dc:dc:d5:33:7b:0b:a3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate hs.cumberlandacademy.com

83

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hs.cumberlandacademy.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.adulteducation.pleasantonusd.net
admin.assumptionschool-sl.org
admin.breed.exteraschools.org
admin.carlossantanaarts.org
admin.chamlian.org
admin.cottageschool.org
admin.eastman.exteraschools.org
admin.exteraschools.org
admin.holyangelsarcadia.net
admin.hsmp.org
admin.ichspride.org
admin.lorena.exteraschools.org
admin.ranchopicojuniorhigh.org
admin.saintpaulcatholic.org
admin.second.exteraschools.org
admin.shaeagles.org
admin.trinitystelementary.com
admin.wardhigh.org
adulteducation.pleasantonusd.net
alisal.pleasantonusd.net
amador.pleasantonusd.net
assumptionschool-sl.org
barrington.nclusd.k12.ca.us
bonita.nclusd.k12.ca.us
breed.exteraschools.org
carlossantanaarts.org
chamlian.org
donlon.pleasantonusd.net
eastman.exteraschools.org
edlioschooldistrict.org
elem.cumberlandacademy.com
es.rockdaleisd.net
fairlands.pleasantonusd.net
harvest.pleasantonusd.net
hearst.pleasantonusd.net
holyangelsarcadia.net
hs.cumberlandacademy.com
hs.rockdaleisd.net
hsmp.org
hunt.nclusd.k12.ca.us
ichspride.org
is.rockdaleisd.net
jh.rockdaleisd.net
lorena.exteraschools.org
lydiksen.pleasantonusd.net
mohr.pleasantonusd.net
ms.cumberlandacademy.com
orestimba.nclusd.k12.ca.us
pleasantonmiddle.pleasantonusd.net
ranchopicojuniorhigh.com
ranchopicojuniorhigh.net
ranchopicojuniorhigh.org
rfisd.net
saintpaulcatholic.org
second.exteraschools.org
shaeagles.org
smmschool.net
valleyview.pleasantonusd.net
vintagehills.pleasantonusd.net
vonrenner.nclusd.k12.ca.us
walnutgrove.pleasantonusd.net
wardhigh.org
www.assumptionschool-sl.org
www.bgh4.k12.wy.us
www.carlossantanaarts.org
www.chamlian.org
www.cumberlandacademy.com
www.glcps.org
www.holyangelsarcadia.net
www.hsmp.org
www.ichspride.org
www.pleasantonusd.net
www.ranchopicojuniorhigh.com
www.ranchopicojuniorhigh.net
www.ranchopicojuniorhigh.org
www.rfisd.net
www.rockdaleisd.net
www.saintpaulcatholic.org
www.shaeagles.org
www.smmschool.net
www.trinitystelementary.com
www.wardhigh.org
yolo.nclusd.k12.ca.us

Other certificates including the domain name cumberlandacademy.com

(limited to 100 certificates)
admin.adultlearning.sunrisesd.ca
admin.lms.davidson.k12.nc.us
second.exteraschools.org
admin.adulteducation.pleasantonusd.net
admin.aristoiclassical.org
admin.lorena.exteraschools.org
admin.aristoiclassical.org
admin.adulteducation.pleasantonusd.net
sgmission.org
www.saintpaulcatholic.org
jss.cumberlandacademy.com
abchandler.henderson.kyschools.us
lifeschools.net
hs.cumberlandacademy.com
admin.fges.davidson.k12.nc.us
breed.exteraschools.org
abchandler.henderson.kyschools.us
admin.second.exteraschools.org
admin.adulteducation.pleasantonusd.net
adams.k12k.com
admin.exteraschools.org
northwesthigh.slp.k12.la.us
abchandler.henderson.kyschools.us
mas.mpusd.net
www.trinitystelementary.com
gageparkhs.org
abchandler.henderson.kyschools.us
exteraschools.org
abchandler.henderson.kyschools.us
www.lusd.k12.ca.us
admin.assumptionschool-sl.org
admin.adultlearning.sunrisesd.ca
admin.aristoiclassical.org
admin.hsmp.org
abchandler.henderson.kyschools.us
hy.hpisd.org
www.exteraschools.org
admin.trinitystelementary.com
sgmission.org
admin.assumptionschool-sl.org
second.exteraschools.org
hartorah.org
admin.breed.exteraschools.org
admin.res.rfisd.net
admin.oghs.davidson.k12.nc.us
es.glendaleacademy.org
admin.nes.davidson.k12.nc.us
hnes.hipponation.org
admin.assumptionschool-sl.org
lorena.exteraschools.org
trinitystelementary.com
admin.nes.davidson.k12.nc.us
admin.ves.monroe.k12.tn.us
hs.cumberlandacademy.com
admin.lhs.davidson.k12.nc.us
admin.wal.davidson.k12.nc.us
grandcoteauelem.slp.k12.la.us
admin.adulteducation.pleasantonusd.net
admin.assumptionschool-sl.org
admin.bces.davidson.k12.nc.us
admin.swe.davidson.k12.nc.us
breed.exteraschools.org
jss.cumberlandacademy.com
admin.hs.hpisd.org
admin.aristoiclassical.org
abchandler.henderson.kyschools.us
admin.wgnunn.gocats.org
es.glendaleacademy.org
eastman.exteraschools.org
admin.colonies.sunrisesd.ca
adams.k12k.com
hs.cumberlandacademy.com

Certificate

The complete raw certificate details for hs.cumberlandacademy.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329222113464639440009930592675965785986275
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-02 09:46:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-31 09:46:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hs.cumberlandacademy.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2044 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.adulteducation.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.assumptionschool-sl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.breed.exteraschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.carlossantanaarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.chamlian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cottageschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eastman.exteraschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.exteraschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.holyangelsarcadia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hsmp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ichspride.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lorena.exteraschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ranchopicojuniorhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.saintpaulcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.second.exteraschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.shaeagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.trinitystelementary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wardhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adulteducation.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alisal.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amador.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assumptionschool-sl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barrington.nclusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonita.nclusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breed.exteraschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carlossantanaarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chamlian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donlon.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastman.exteraschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edlioschooldistrict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elem.cumberlandacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.rockdaleisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fairlands.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harvest.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearst.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyangelsarcadia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.cumberlandacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.rockdaleisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsmp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hunt.nclusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ichspride.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is.rockdaleisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jh.rockdaleisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lorena.exteraschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lydiksen.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mohr.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.cumberlandacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orestimba.nclusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pleasantonmiddle.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranchopicojuniorhigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranchopicojuniorhigh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranchopicojuniorhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rfisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintpaulcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'second.exteraschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaeagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smmschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valleyview.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vintagehills.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vonrenner.nclusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walnutgrove.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wardhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assumptionschool-sl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bgh4.k12.wy.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carlossantanaarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chamlian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cumberlandacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glcps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyangelsarcadia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsmp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ichspride.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pleasantonusd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ranchopicojuniorhigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ranchopicojuniorhigh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ranchopicojuniorhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rfisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rockdaleisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintpaulcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shaeagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smmschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trinitystelementary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wardhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yolo.nclusd.k12.ca.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b17cc1a410000040300483046022100da78d4cb26ac56869a002051c34fa045e621d258fa95225800499f3bdb275623022100b4229401c29d1523be5e74389b02d272af1d5ccb12760db36139e06a913b1339007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b17cc1a2f000004030046304402203e2c42e8eb4438d832cf58ab1f97bc9f11e9ef871253571bdd18bd67f8546641022069b97225f52e00ec3cb2b41983f7921911aee5a09246e227b349269584e719af
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000e0619d0b3247100e58cb8e48262e7d0172d739eeefbc653876ed493b3fa3373953ae946da2997c8d161fc587bd9d665587271cbf9c7c06c61b18bac0d5943596a6236fe37f85247342b396019cdbd986ad44c73057243573a0b663d7a6c199d3b1696192995d9eb57a0d782dc5f2db4cf224ffe35ab744e6d294caf970d0f2890a7d68561de06b312f9c8d6ae59047ea9edb460a8a5620afb4cd90dd3bb2be74df457657c1428d314eb6eae32f409e8cd3e377d9f8cbf65ced1743ffb1ae2c8e47acf7f0e561761663433f8405019a69df896356c59b2a84d9c82703da7f53226fbed4fb20a5072f1a7b3161ccbfb7015ede4cb448dd3bcb370cde66d2b1cd9