san-b1.granicusgovaccess.net

Issued by R3

About this certificate

This digital certificate with serial number 03:ad:c7:bd:23:6c:6e:30:eb:6b:70:e5:cc:59:7b:a8:f3:84 was issued on by Let's Encrypt.

With 66 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=san-b1.granicusgovaccess.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:ad:c7:bd:23:6c:6e:30:eb:6b:70:e5:cc:59:7b:a8:f3:84
Serial Number (int): 320471205706345635630771918443352712344452
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0a:a0:f9:4c:23:95:29:5a:58:46:3c:e5:55:90:19:6f:80:5c:e6:59
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 63:19:90:77:27:aa:e8:94:78:ab:9e:fa:38:dc:83:36:b8:18:76:07
Fingerprint (sha256): 01:51:8e:6d:f5:67:d9:95:82:9e:f6:bb:10:db:6d:04:96:3a:55:ff:74:63:ba:89:14:cf:8d:66:2d:5c:16:c3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate san-b1.granicusgovaccess.net

66

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-b1.granicusgovaccess.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

airport.marionfl.org
animalservices.marionfl.org
arts.torranceca.gov
business.torranceca.gov
fire.mesaaz.gov
library.marionfl.org
san-b1.granicusgovaccess.net
transit.torranceca.gov
www-b.weknowgovernment.com
www.arizonamuseumofnaturalhistory.org
www.bigbearfire.org
www.brentwoodtn.gov
www.bryancountyga.gov
www.ccgov.org
www.ci.punta-gorda.fl.us
www.ci.richland.wa.us
www.cityoflancasterca.org
www.cityofmarion.org
www.cityofmonrovia.org
www.cityofrockhill.com
www.cityofsalem.net
www.co.marquette.wi.us
www.danapoint.org
www.dedham-ma.gov
www.dot.nv.gov
www.dsrsd.com
www.eid.org
www.elkgrove.org
www.enid.org
www.falconfieldairport.com
www.garfield.glendale.edu
www.golfloveland.com
www.hfamc.org
www.intranet.newhavenct.gov
www.lauderhill-fl.gov
www.library.nuecescountytx.gov
www.library.torranceca.gov
www.louisvilleco.gov
www.lovelandpubliclibrary.org
www.lovelandwaterandpower.org
www.lovgov.org
www.lowermerion.org
www.lvmwd.com
www.madisoncountyal.gov
www.manhattanbeach.gov
www.mankatomn.gov
www.maplevalleywa.gov
www.marionfl.org
www.melbourneflorida.org
www.mesaaz.gov
www.mesaazpolice.gov
www.mesalibrary.org
www.mesaparks.com
www.mnairspectacular.com
www.myrichlandlibrary.org
www.oceansidepolice.com
www.passaiccountynj.org
www.paysonaz.gov
www.richlandparksandrec.com
www.rollinghillsestates.gov
www.roswellatwork.com
www.roswellgov.com
www.selectmesa.com
www.torranceca.gov
www.vetterstoneamphitheater.com
www.victorvilleca.gov

Other certificates including the domain name granicusgovaccess.net

(limited to 100 certificates)
san-b1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-z1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-d1.granicusgovaccess.net

Certificate

The complete raw certificate details for san-b1.granicusgovaccess.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4N+vhT06MezqFl1kIDQ+
+YbZYIdnXnpbaNax+LJ7rVMKQln5LqBP6JQ58oK5ZJU4dZTGAWEkzKsPqoQGU0LX
a0dj9Pc/OnVSbFOfbFm+nOtyv1pogAeFkE0ASJOArqoinnC0pQUqLgsO0WP0foL4
bE34ePrLwGNLdUVccz5nxdyebk0oQcY8pgC3IIN6T4YfTHUX30lFiN+HdSnScZ3X
ajASWA/T56743d9+0BQGOmzUfRQF4PrFhBkPgivCDRXJN20m4i0gkKDPvJOryNRE
O4ysk0n/9xiGbbNx67F+o2n1ne41surVDiOIPEkZ5pDje2bPZ9j9Y8OQPXYn9Vz0
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320471205706345635630771918443352712344452
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-07 18:31:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-07 18:30:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-b1.granicusgovaccess.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28387683806048781435024940862951793430022157768050958309614216090588422487499552551642864710472787150233581809481606951062852636644716633949322492639805140496144913300781027997994615219804285864160218288140189038431333534754925733334286796091350367451262384051020235438669463444450644061330915248681594175516031380079454565950823768384154454928961118363287668124188422668024983080134331160290737426907532857261653826628541619736300874620645036999068560582252976335240511696311661948426919316063275776161203491521993735349870700310487547791840162361866461419779686604740733155570978180004351076989029953243054950118637
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0aa0f94c2395295a58463ce55590196f805ce659
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1517 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airport.marionfl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'animalservices.marionfl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arts.torranceca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.torranceca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fire.mesaaz.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'library.marionfl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-b1.granicusgovaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transit.torranceca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-b.weknowgovernment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arizonamuseumofnaturalhistory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigbearfire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brentwoodtn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bryancountyga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccgov.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.punta-gorda.fl.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.richland.wa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityoflancasterca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofmarion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofmonrovia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofrockhill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofsalem.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co.marquette.wi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.danapoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dedham-ma.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dot.nv.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsrsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elkgrove.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.falconfieldairport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garfield.glendale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.golfloveland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hfamc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intranet.newhavenct.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lauderhill-fl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.library.nuecescountytx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.library.torranceca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.louisvilleco.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lovelandpubliclibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lovelandwaterandpower.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lovgov.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lowermerion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvmwd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madisoncountyal.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manhattanbeach.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mankatomn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maplevalleywa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marionfl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melbourneflorida.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesaaz.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesaazpolice.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesalibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesaparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mnairspectacular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myrichlandlibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oceansidepolice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.passaiccountynj.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paysonaz.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richlandparksandrec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rollinghillsestates.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roswellatwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roswellgov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.selectmesa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.torranceca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vetterstoneamphitheater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.victorvilleca.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d850d55a40000040300473045022100e9f06a91a14999e9d19e5cbe9ab207063024d5e04605ed28739fdceb67023f2d02203e6a10711ca3a35298addd5453fdb7495a41028a3a604ae63a1986169e995ef9007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d850d55a4000004030048304602210094e207288d6ef061c5c6661af6c267ddfc614fe21938c85a2f90cd56694ea87a0221009ca50c3c95a1e15fde50c741fd7be29cd6796432bb3fa2081b9ee8e52a05b567
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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