ssl3.revizesites.com

Issued by R3

About this certificate

This digital certificate with serial number 04:39:2b:38:c8:bb:79:6b:43:32:b9:48:21:d0:4a:66:e3:d8 was issued on by Let's Encrypt.

With 47 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ssl3.revizesites.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:39:2b:38:c8:bb:79:6b:43:32:b9:48:21:d0:4a:66:e3:d8
Serial Number (int): 367902690285312472815876851997433827615704
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 77:8d:3c:63:43:b1:19:e2:7d:44:47:b6:32:e5:fa:b3:15:81:d7:2e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 96:b6:72:f8:c4:29:b4:5c:95:25:12:34:d2:01:f5:8d:5e:ef:ed:e3
Fingerprint (sha256): 01:e0:5c:98:37:c4:19:0b:94:73:0a:55:ef:9b:9d:f6:99:0b:03:4a:63:cf:12:09:96:4c:bc:cb:93:aa:2c:58

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ssl3.revizesites.com

47

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl3.revizesites.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

buchanancounty.iowa.gov
buchanancountyparks.com
ci.marshfield.wi.us
cityofbarnesville.com
cityofhowell.org
cumberlandcounty.org
cumberlandcountyme.gov
cumberlandso.org
flyelkonevada.com
hamtramckhistory.com
lasvegasjusticecourt.us
maumee.k12.oh.us
merrillville.in.gov
milfordtownship.com
milfordtwpmi.gov
northfieldmi.com
northfieldmi.gov
northfieldmi.org
ogallala-ne.gov
ssl3.revizesites.com
tonawandacity.com
tonawandacityfd.com
twp-northfield.org
villageofeastrockaway.org
www.buchanancounty.iowa.gov
www.buchanancountyparks.com
www.ci.marshfield.wi.us
www.cityofbarnesville.com
www.cityofhowell.org
www.cumberlandcounty.org
www.cumberlandcountyme.gov
www.cumberlandso.org
www.flyelkonevada.com
www.hamtramckhistory.com
www.lasvegasjusticecourt.us
www.maumee.k12.oh.us
www.merrillville.in.gov
www.milfordtownship.com
www.milfordtwpmi.gov
www.northfieldmi.com
www.northfieldmi.gov
www.northfieldmi.org
www.ogallala-ne.gov
www.tonawandacity.com
www.tonawandacityfd.com
www.twp-northfield.org
www.villageofeastrockaway.org

Other certificates including the domain name revizesites.com

(limited to 100 certificates)
ssl1.revizesites.com
ssl8.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl4.revizesites.com
ssl3.revizesites.com
ssl4.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl1.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl2.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl-wg1.revizesites.com
ssl2.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl9.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl1.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl9.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl7.revizesites.com
ssl9.revizesites.com
ssl8.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl2.revizesites.com
ssl7.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl9.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl2.revizesites.com
ssl7.revizesites.com
ssl1.revizesites.com
ssl7.revizesites.com
ssl-wg1.revizesites.com
ssl4.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl7.revizesites.com
ssl4.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl3.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl9.revizesites.com

Certificate

The complete raw certificate details for ssl3.revizesites.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgm9ljUVIkV3t4XbfJIdd
DAzi1ulOsG3HeTiQ4MK6/ubEoeKtAXuIc+iYS9rSOF05tmksRmtrIu/J0DVb51jy
zkQimLYB5bfKWi30kFkSpqXG2EU+EVsS9CKhhwgx7AHZPEgXG7tp/3jx30wt6DSy
jOB1XuJq924gR27tAiaPIOCVLOxKhimxjMYfFSeZ0cMIQ4wuGBRw7EZLsladV4d3
bvhzqYu5oZ5qRgDPXvenWavuISdaRpRVtuLLoz6tt2U+4KfrOSzeE4Z+/NeViCJd
uqK6jJXksSAkslxxz8D7jHF+j//chckcyVCa6Akm4hVFJLVn/SXVx80Dp+O0gS5J
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 367902690285312472815876851997433827615704
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-04 15:42:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-03 15:42:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl3.revizesites.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16465911399217157981745079932618498413687520471210055698912437750183957220061480129146361086898883666523562003461995049704981276814275095742869958980417369863992968389073876327149362046192393772071485512891152913342322593323426964419452122660155024516802335332267746835516902831241848251316803444908909152162976750276639913548350175173960387119371469716897712350326260311280068332105048724316301795714291383555919126818855525276211516091105816002306016227123639435825194996963377852285023228393641473861413747750329737505689159960372314161333247782554210882371721054845807466815412837258622171787049291617186943486221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							778d3c6343b119e27d4447b632e5fab31581d72e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1074 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buchanancounty.iowa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buchanancountyparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci.marshfield.wi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofbarnesville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofhowell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cumberlandcounty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cumberlandcountyme.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cumberlandso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyelkonevada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamtramckhistory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lasvegasjusticecourt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maumee.k12.oh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merrillville.in.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milfordtownship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milfordtwpmi.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northfieldmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northfieldmi.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northfieldmi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ogallala-ne.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl3.revizesites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tonawandacity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tonawandacityfd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twp-northfield.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'villageofeastrockaway.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buchanancounty.iowa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buchanancountyparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.marshfield.wi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofbarnesville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofhowell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cumberlandcounty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cumberlandcountyme.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cumberlandso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flyelkonevada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hamtramckhistory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lasvegasjusticecourt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maumee.k12.oh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.merrillville.in.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.milfordtownship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.milfordtwpmi.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northfieldmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northfieldmi.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northfieldmi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ogallala-ne.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tonawandacity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tonawandacityfd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twp-northfield.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.villageofeastrockaway.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ea9fda2ff0000040300483046022100ba27a3e4b60386015100bebc84d9dfba3b58d55e2be1f80e448f3a5e168ac146022100c7b4c2e5706887a59f3d4149b5c5e7ad0f29a032bd3873edca9a75659c37a13f007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ea9fda3bb000004030047304502204afa3777cdf5f396c4274f5ce191886197849197be86be644ea4ec784936ee7f0221009227830acf18676c35bb9e37d61184e2c4d62056d617012f06b8f73a8f1f68e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000fdbc0afca70fb233ae35bfc020b440aae37818810969da75d4751a524320b2e8c43125e36e6bab4dbcb9e4f097e2aa8ac2eeb465cdac45ffe5a47266877eb2503c1b578b35f10f37d37e16a69fb804da844e6a3cf831edf980b70cc55b695715354f5a41c7ebeca404be58d05ee92d7287a844e861cc458a435ad15380872fd384485abde9c664c15f104ffd02042a8589cfdae5a70befe059e9df3d185a253ce3460902579be6f8170c5e978fc95f94f60d171092b449f37869d5d64aa4c6fc98b3df42def7042ae48602abe7685f77cca8a30ec883e90af7bfbc783b69f95719da1f71ae9efe7270480e3f1e8e8f26c1a3aa4fa573d4c61f3527d5668ae0b