ssl8.revizesites.com

Issued by R3

About this certificate

This digital certificate with serial number 03:ec:4a:92:79:bb:ad:d7:c0:aa:15:da:42:b7:8e:cf:9e:48 was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ssl8.revizesites.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ec:4a:92:79:bb:ad:d7:c0:aa:15:da:42:b7:8e:cf:9e:48
Serial Number (int): 341742619804692677344258501154070535839304
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6f:35:f6:05:b9:b5:a8:25:f3:af:18:3a:99:72:80:df:b0:cc:2e:70
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 05:af:c5:b3:63:6b:9c:1b:ba:3a:ed:fb:0b:b2:1a:3b:f6:c6:68:4d
Fingerprint (sha256): 00:9f:e1:e2:17:02:0f:d0:e9:de:f4:0e:f8:5e:19:5d:d6:df:38:1c:26:fe:19:d9:5f:10:8b:be:d3:34:8e:83

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ssl8.revizesites.com

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl8.revizesites.com

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

akronohio.gov
akronreach.org
burkecounty-ga.gov
ccrpc.org
cityofmontesano.com
cityofredding.gov
cityofredding.info
cityofredding.org
colmarmanor.org
fallriverma.gov
franklintownship.net
joinakronfire.com
lock3live.com
montrose-mn.com
navasotaedc.com
neill-lib.org
niskayuna.org
okanogantransit.com
ortonvillevillage.com
publicsafety.akronohio.gov
pullman-wa.gov
pullmanparksandrec.com
pullmanswims.com
pullmantransit.com
rabaride.com
reddingaquaticcenter.com
reddingart.org
reddingelectricutility.com
reddingfire.org
reddingmlkcenter.com
reddingparks.com
reddingpolice.com
reddingpolice.org
reddingrecreation.org
reddingsolidwaste.net
reddingtrails.com
reddingutilities.com
reupower.com
reupower.net
sharontownship.org
shastacreeks.com
ssl8.revizesites.com
wolfforthlibrary.org
wolfforthpd.org
wolfforthtx.us
www.akronohio.gov
www.akronreach.org
www.akronrecreationandparks.com
www.burkecounty-ga.gov
www.ccrpc.org
www.cityofmontesano.com
www.cityofredding.gov
www.cityofredding.info
www.cityofredding.org
www.colmarmanor.org
www.fallriverma.gov
www.franklintownship.net
www.lock3live.com
www.montrose-mn.com
www.navasotaedc.com
www.neill-lib.org
www.niskayuna.org
www.okanogantransit.com
www.ortonvillevillage.com
www.pullman-wa.gov
www.pullmanparksandrec.com
www.pullmanswims.com
www.pullmantransit.com
www.rabaride.com
www.reddingaquaticcenter.com
www.reddingart.org
www.reddingelectricutility.com
www.reddingfire.org
www.reddingmlkcenter.com
www.reddingparks.com
www.reddingpolice.com
www.reddingpolice.org
www.reddingrecreation.org
www.reddingsolidwaste.net
www.reddingtrails.com
www.reddingutilities.com
www.reupower.com
www.reupower.net
www.sharontownship.org
www.shastacreeks.com
www.wolfforthlibrary.org
www.wolfforthpd.org
www.wolfforthtx.us

Other certificates including the domain name revizesites.com

(limited to 100 certificates)
ssl1.revizesites.com
ssl8.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl3.revizesites.com
ssl4.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl1.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl2.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl-wg1.revizesites.com
ssl2.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl9.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl1.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl9.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl7.revizesites.com
ssl9.revizesites.com
ssl8.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl2.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl1.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl9.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl2.revizesites.com
ssl7.revizesites.com
ssl1.revizesites.com
ssl7.revizesites.com
ssl-wg1.revizesites.com
ssl4.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl7.revizesites.com
ssl4.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl3.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com

Certificate

The complete raw certificate details for ssl8.revizesites.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341742619804692677344258501154070535839304
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-29 12:39:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-27 12:39:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl8.revizesites.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3505716869452895759131987193827392490774018988099811505656103076124895602928301043197591370755776171181055874705985382603587782734551873904723607117275444408512905557936280093023512688724587498276232785461597578126874065972268118178121134878131304162550128557399144512100092386759809941727277863046838525603899293052195766904798118150392287973040558842582313679706333139038690251078258520942218691980422611203636843417662931675009245027904633483965086722761460560362241921370402207723590928816562533118799767080600273769964221261658225337662760740359170365259340880660037675635612555643955846793192148588447209339855108446912108522617354207135260075792314379900753659145096859117455132293555930139997439993815145740916646252787781603187012747066281195925928614739170563984558860064714650021493260750126625544024345677253691024638708256837019565587036321017106846833656771451404053056771654983345989743078387595594755810674671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6f35f605b9b5a825f3af183a997280dfb0cc2e70
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1844 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akronohio.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akronreach.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burkecounty-ga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccrpc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofmontesano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofredding.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofredding.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofredding.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colmarmanor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fallriverma.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franklintownship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joinakronfire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lock3live.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montrose-mn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navasotaedc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neill-lib.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niskayuna.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okanogantransit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ortonvillevillage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publicsafety.akronohio.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pullman-wa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pullmanparksandrec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pullmanswims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pullmantransit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rabaride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddingaquaticcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddingart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddingelectricutility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddingfire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddingmlkcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddingparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddingpolice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddingpolice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddingrecreation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddingsolidwaste.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddingtrails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddingutilities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reupower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reupower.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharontownship.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shastacreeks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl8.revizesites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wolfforthlibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wolfforthpd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wolfforthtx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akronohio.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akronreach.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akronrecreationandparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.burkecounty-ga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccrpc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofmontesano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofredding.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofredding.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofredding.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colmarmanor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fallriverma.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.franklintownship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lock3live.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.montrose-mn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.navasotaedc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neill-lib.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.niskayuna.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.okanogantransit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ortonvillevillage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pullman-wa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pullmanparksandrec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pullmanswims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pullmantransit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rabaride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddingaquaticcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddingart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddingelectricutility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddingfire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddingmlkcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddingparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddingpolice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddingpolice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddingrecreation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddingsolidwaste.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddingtrails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddingutilities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reupower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reupower.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharontownship.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shastacreeks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wolfforthlibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wolfforthpd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wolfforthtx.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c1b4e78c4000004030048304602210099a2493f2739f88314c360cc244e77547c3a08fa5ff8a46d34077177aa18bbf3022100f3dfca03a5ff90f0a6313f5eb2e2fe094006983b086f18cd36e9937ab064bdf7007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c1b4e78b80000040300473045022100ca98ed40d54f7c9c24a2d0fe9fb320f5c10659c65df4bfb7dc7063b582e15b5102207d043b758da8982f868845b0a122b83d0375079ff22ae9b419b683816d7644cd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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