sanjose.pusd.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:65:2f:a3:8f:0b:70:8a:ed:cc:8d:90:48:a7:4e:59:e6:9b was issued on by Let's Encrypt.

With 56 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sanjose.pusd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:65:2f:a3:8f:0b:70:8a:ed:cc:8d:90:48:a7:4e:59:e6:9b
Serial Number (int): 295768699815776270358285532029632686712475
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6b:ee:d2:23:76:46:0c:a1:ec:64:93:20:6b:5e:49:e1:d7:d9:99:3c
Fingerprint (sha256): ff:c1:d1:dc:0b:f3:76:a3:11:c9:99:f9:8b:d2:e9:c9:7a:dd:1c:ac:5c:06:24:cc:7e:c9:1e:03:46:da:de:49

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sanjose.pusd.org

56

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sanjose.pusd.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ace.pusd.org
admin.alcott.pusd.org
admin.barfield.pusd.org
admin.bn.durand.k12.mi.us
admin.bookertwashington.kippneworleans.org
admin.bradleyschools.org
admin.centralcityacademy.kippneworleans.org
admin.churchill.hsd153.org
admin.diamondranch.pusd.org
admin.es.nscougars.com
admin.garey.pusd.org
admin.hs.durand.k12.mi.us
admin.hs.nscougars.com
admin.jeffersonschools.org
admin.jhs.jeffersonschools.org
admin.jms.jeffersonschools.org
admin.kingsley.pusd.org
admin.kit.mynhusd.org
admin.lopez.pusd.org
admin.montvue.pusd.org
admin.ms.nscougars.com
admin.nscougars.com
admin.parkwest.pusd.org
admin.popcs.org
admin.ranchhills.pusd.org
admin.sacredheartacademy.org
admin.sanjose.pusd.org
arroyo.pusd.org
bn.durand.k12.mi.us
bookertwashington.kippneworleans.org
centralcityacademy.kippneworleans.org
cfn.edu.mx
diamondpoint.pusd.org
es.nscougars.com
ganesha.pusd.org
hs.durand.k12.mi.us
hs.nscougars.com
jameshart.hsd153.org
jeffersonschools.org
jhs.jeffersonschools.org
jms.jeffersonschools.org
kellogg.pusd.org
kit.mynhusd.org
lincoln.pusd.org
marshall.pusd.org
ms.nscougars.com
nes.jeffersonschools.org
nscougars.com
parkwest.pusd.org
popcs.org
ranchhills.pusd.org
sanjose.pusd.org
ses.jeffersonschools.org
www.jeffersonschools.org
www.nscougars.com
www.sacredheartacademy.org

Other certificates including the domain name pusd.org

(limited to 100 certificates)
ace.pusd.org
www.bradleyschools.org
oce.lifeschools.net
admin.aes.fentressboe.com
admin.bbcms.bbrook.org
ace.pusd.org
childdev.pusd.org
decker.pusd.org
proudtobe.pusd.org
proudtobe.pusd.org
admin.adultlearning.sunrisesd.ca
admin.armstrong.pusd.org
admin.hs.wvsd208.org
admin.hes.huntingtonisd.com
admin.veca.gocats.org
decker.pusd.org
garey.pusd.org
harrison.pusd.org
diamondranch.pusd.org
admin.saspasadena.com
admin.ace.pusd.org
spanish.pusd.org
www.hwrsd.org
www.huntingtonisd.com
admin.allison.pusd.org
bradleyschools.org
www.hilltopprep.org
ngc.lancasterisd.org
admin.bloomfieldcsd.org
admin.eag.zcs.k12.in.us
ps.bsd29j.com
morelandpreschool.moreland.org
lexington.pusd.org
es.moodyisd.org
www.hwrsd.org
admin.morelandpreschool.moreland.org
ms.moodyisd.org
admin.his.huntingtonisd.com
ngc.lancasterisd.org
admin.cvhs.cvsd.org
plummerpanthers.org
admin.aes.cherokee.k12.nc.us
www.morseschool.net
admin.alma.cv.k12.ca.us
allison.pusd.org
burney.hattiesburgpsd.com
admin.cfn.edu.mx
admin.mhs.cherokee.k12.nc.us
www.hwrsd.org
admin.bloomfieldcsd.org
admin.fremont.pusd.org
admin.aes.cvsd.org
admin.allison.pusd.org
inglesdurkheim.edu.mx
frederickadouglass.kippneworleans.org
hsd153.org
admin.allison.pusd.org
admin.adultlearning.sunrisesd.ca
admin.aes.cherokee.k12.nc.us
admin.cvhs.cvsd.org
www.holynamesf.com
ace.pusd.org
admin.hs.gsd.wednet.edu
alcott.pusd.org
painesville-city.k12.oh.us
emerson.pusd.org
montvue.pusd.org
admin.bchs.bradleyschools.org
ms.gsd.wednet.edu
admin.rems.cherokee.k12.nc.us
admin.aes.cvsd.org
huntingtonisd.com
sanantonio.pusd.org
admin.woodley.hattiesburgpsd.com
madison.pusd.org
roosevelt.pusd.org
admin.eag.zcs.k12.in.us
lopez.pusd.org
ace.pusd.org
admin.ahs.cherokee.k12.nc.us
*.pusd.org
admin.cvhs.cv.k12.ca.us
admin.cve.cv.k12.ca.us
admin.adultlearning.sunrisesd.ca
admin.adultlearning.sunrisesd.ca
riverview.durangoschools.org
admin.bloomfieldcsd.org
bbel.bbrook.org
admin.garey.pusd.org
admin.nbfacademy.org
admin.allison.pusd.org
admin.adultlearning.sunrisesd.ca
admin.milam.hcisd.org
admin.seeo.pusd.org
admin.lng.otsegops.org
webmail.pusd.org
mishpms.hpisd.org
admin.athletics.hattiesburgpsd.com
admin.creekside.cv.k12.ca.us
*.pusd.org

Certificate

The complete raw certificate details for sanjose.pusd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295768699815776270358285532029632686712475
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-14 17:32:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-12 17:32:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sanjose.pusd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1336 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ace.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.alcott.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.barfield.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bn.durand.k12.mi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bookertwashington.kippneworleans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bradleyschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.centralcityacademy.kippneworleans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.churchill.hsd153.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.diamondranch.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.es.nscougars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.garey.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hs.durand.k12.mi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hs.nscougars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jeffersonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jhs.jeffersonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jms.jeffersonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kingsley.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kit.mynhusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lopez.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.montvue.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ms.nscougars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nscougars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.parkwest.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.popcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ranchhills.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sacredheartacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sanjose.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arroyo.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bn.durand.k12.mi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookertwashington.kippneworleans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralcityacademy.kippneworleans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfn.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondpoint.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.nscougars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ganesha.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.durand.k12.mi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.nscougars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jameshart.hsd153.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeffersonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhs.jeffersonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jms.jeffersonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kellogg.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kit.mynhusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincoln.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marshall.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.nscougars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nes.jeffersonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nscougars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkwest.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranchhills.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanjose.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ses.jeffersonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jeffersonschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nscougars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredheartacademy.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf640000016539b63135000004030046304402203bb26b9ddfcc194a866d734ea83a322cba234a20cdcbcf65f2239e6e0cb27d3a022001a31b1e20e695ab026c89bc1b321d6c8ef1b5239a25a8ca4ca3ca87ff37a396007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016539b63175000004030046304402204cb64ca79eac63dc2245956f584d3b0e956bde2b73d3480b5c66d75a598c614f0220056e03c721419fc760612dfd90951ea61f6a87829dad0d1c813d63d0ce7d6880
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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