admin.bakerschools.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b4:a2:d6:a3:6a:2f:31:ff:4d:8d:e1:03:f8:93:76:64:0f was issued on by Let's Encrypt.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.bakerschools.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b4:a2:d6:a3:6a:2f:31:ff:4d:8d:e1:03:f8:93:76:64:0f
Serial Number (int): 322804133242340103047997189221103810536463
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 44:14:d8:b0:df:9c:a0:83:eb:17:66:ec:6a:09:43:8b:d2:62:96:9e
Fingerprint (sha256): ff:66:ea:24:95:79:75:5e:66:04:80:43:e7:0c:aa:8a:b7:22:97:0c:a3:48:eb:e6:20:9a:13:2f:f5:95:e3:f4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate admin.bakerschools.org

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.bakerschools.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.bakerschools.org
admin.boydisd.net
admin.ceibaschools.org
admin.cienegaelementary.org
admin.coker-wimberly.ecps.us
admin.eechs.ecps.us
admin.ehs.edgewoodschools.com
admin.ems.edgewoodschools.com
admin.freeholdtwp.k12.nj.us
admin.globallearningacademies.org
admin.gnya.org
admin.gwbulluck.ecps.us
admin.gwcarver.ecps.us
admin.hillcity.k12.sd.us
admin.jcsd.net
admin.lbrsf.org
admin.madrid.k12.ia.us
admin.mmatrailblazers.com
admin.msa.state.mn.us
admin.nehs.ecps.us
admin.phillips.ecps.us
admin.princeville.ecps.us
admin.sea.mynhusd.org
admin.sems.ecps.us
admin.smes.edgewoodschools.com
admin.stocks.ecps.us
admin.stonebridgeschool.com
admin.swehs.ecps.us
admin.tabc.org
admin.ths.ecps.us
admin.wapattillo.ecps.us
admin.wems.ecps.us
admin.westelementaryschool.wsisd.com
admin.ysd.k12.sd.us
bes.yadkin.k12.nc.us
bluffdale.summitacademyschools.org
ceibapublicschools.com
ceibapublicschools.org
ceibaschools.com
ceibaschools.org
ces.yadkin.k12.nc.us
cienegaelementary.org
coker-wimberly.ecps.us
ebs.yadkin.k12.nc.us
eechs.ecps.us
ehs.edgewoodschools.com
ems.edgewoodschools.com
fcs.yadkin.k12.nc.us
fes.yadkin.k12.nc.us
fhs.yadkin.k12.nc.us
fms.yadkin.k12.nc.us
globallearningacademies.org
gnya.org
gwbulluck.ecps.us
gwcarver.ecps.us
jes.yadkin.k12.nc.us
mma.ecps.us
mycommodores.org
nehs.ecps.us
phillips.ecps.us
princeville.ecps.us
sahs.summitacademyschools.org
sems.ecps.us
shs.yadkin.k12.nc.us
smes.edgewoodschools.com
sms.yadkin.k12.nc.us
stocks.ecps.us
stonebridgeschool.com
swehs.ecps.us
texasleadership.net
ths.ecps.us
wapattillo.ecps.us
wems.ecps.us
westelementaryschool.wsisd.com
www.bakerschools.org
www.boydisd.net
www.ceibapublicschools.com
www.ceibaschools.com
www.ceibaschools.org
www.freeholdtwp.k12.nj.us
www.globallearningacademies.org
www.gnya.org
www.grovetonisd.net
www.hillcity.k12.sd.us
www.jcsd.net
www.lbrsf.org
www.madrid.k12.ia.us
www.mmatrailblazers.com
www.msa.state.mn.us
www.stonebridgeschool.com
www.tabc.org
www.yorkprepsc.org
www.ysd.k12.sd.us
wys.yadkin.k12.nc.us
yec.yadkin.k12.nc.us
yes.yadkin.k12.nc.us
ysa.yadkin.k12.nc.us

Other certificates including the domain name bakerschools.org

(limited to 100 certificates)
www.brewermiddleschool.wsisd.com
www.yorkprepsc.org
admin.bakerschools.org
admin.bakerschools.org
admin.bakerschools.org
admin.msab.msa.state.mn.us
admin.bakerschools.org
admin.lds.freeholdtwp.k12.nj.us
admin.bakerschools.org
admin.ecps.us
admin.cienegaelementary.org
admin.bakerschools.org
admin.bakerschools.org
admin.bakerschools.org
texasleadership.net
www.sehstigers.com
admin.bakerschools.org
mail.bakerschools.org
admin.bakerschools.org
bakerschools.org
admin.bakerschools.org
www.is228.org
admin.cra.freeholdtwp.k12.nj.us
eas.mynhusd.org
admin.bakerschools.org
admin.bakerschools.org
admin.is228.org
admin.bakerschools.org
admin.kit.mynhusd.org
admin.yorkprepsc.org
admin.ps38.jcboe.org
admin.bakerschools.org
socialjusticemclc.org
admin.yorkprepsc.org
admin.hes.jcsd.net
www.cienegaelementary.org
admin.bakerschools.org

Certificate

The complete raw certificate details for admin.bakerschools.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322804133242340103047997189221103810536463
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-06 01:39:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-04 01:39:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.bakerschools.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bakerschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.boydisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ceibaschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cienegaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.coker-wimberly.ecps.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eechs.ecps.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ehs.edgewoodschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ems.edgewoodschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.freeholdtwp.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.globallearningacademies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gnya.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gwbulluck.ecps.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gwcarver.ecps.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hillcity.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jcsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lbrsf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mmatrailblazers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.msa.state.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nehs.ecps.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.phillips.ecps.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.princeville.ecps.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sea.mynhusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sems.ecps.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.smes.edgewoodschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stocks.ecps.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stonebridgeschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.swehs.ecps.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tabc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ths.ecps.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wapattillo.ecps.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wems.ecps.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.westelementaryschool.wsisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ysd.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bes.yadkin.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluffdale.summitacademyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceibapublicschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceibapublicschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceibaschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceibaschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ces.yadkin.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cienegaelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coker-wimberly.ecps.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebs.yadkin.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eechs.ecps.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehs.edgewoodschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ems.edgewoodschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcs.yadkin.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fes.yadkin.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fhs.yadkin.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fms.yadkin.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globallearningacademies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gnya.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwbulluck.ecps.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwcarver.ecps.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jes.yadkin.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mma.ecps.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycommodores.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nehs.ecps.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phillips.ecps.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'princeville.ecps.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sahs.summitacademyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sems.ecps.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shs.yadkin.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smes.edgewoodschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms.yadkin.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stocks.ecps.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stonebridgeschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swehs.ecps.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texasleadership.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ths.ecps.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wapattillo.ecps.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wems.ecps.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westelementaryschool.wsisd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bakerschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boydisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ceibapublicschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ceibaschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ceibaschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freeholdtwp.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globallearningacademies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gnya.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grovetonisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hillcity.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jcsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lbrsf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmatrailblazers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msa.state.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stonebridgeschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tabc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yorkprepsc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ysd.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wys.yadkin.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yec.yadkin.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yes.yadkin.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ysa.yadkin.k12.nc.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000166473ed4230000040300473045022100a774d777dc603babcd57b1605088d897a741a42778516427d18b030c6362e69b02202ea76ecee7acd4b00029231e9241c25d9d2d05e7bde9cd885dd7c6a9dde7700b0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000166473ed5d7000004030047304502202c6323087052c752732816277295fd65f67513db5362c8a10b177c755aebb22d0221009261d41ab0d8ac5be14caed429a4f4a5bc4ed2be22097e5ccb43ecb0e7503f46
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0061520ff32f9fdfea20d6724c586e35e139b9d30673fcc8550ff1a34dbe5e8359859bf78908cd09eee93e835dbbd8537177dfe303f84df16ef4dd8e7acc9ec60d3d7270abb1b7de40ace474fd9eac83fb6672727967292a0b5c2730701842b683c0819e433c17f450089edde646dacbdce71740246c1f70166dd00c3153fc5d359d3cff13060bc836fc699573a1b06196cd3276bb249e44a165d8c4dd1b871279e3c162c40afb1686dc4d97dd28c44cb6c0f6e65a8d8bb33e1c654651b3bda88d6495bd3f4e6fae5b8aaf78530833bfaf7b8d3a911277f06fe80a6a5c055140ed21fcf0982d51033514031e398d87f5461665fde7b47f0218557a5d796c0a34fc