ssl3.revizesites.com
Issued by R3
About this certificate
This digital certificate with serial number 04:39:2b:38:c8:bb:79:6b:43:32:b9:48:21:d0:4a:66:e3:d8 was issued on by Let's Encrypt.
With 47 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=ssl3.revizesites.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:39:2b:38:c8:bb:79:6b:43:32:b9:48:21:d0:4a:66:e3:d8Serial Number (int): 367902690285312472815876851997433827615704
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 77:8d:3c:63:43:b1:19:e2:7d:44:47:b6:32:e5:fa:b3:15:81:d7:2e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 96:b6:72:f8:c4:29:b4:5c:95:25:12:34:d2:01:f5:8d:5e:ef:ed:e3
Fingerprint (sha256): 01:e0:5c:98:37:c4:19:0b:94:73:0a:55:ef:9b:9d:f6:99:0b:03:4a:63:cf:12:09:96:4c:bc:cb:93:aa:2c:58
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate ssl3.revizesites.com
47
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ssl3.revizesites.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
buchanancounty.iowa.gov
buchanancountyparks.com
ci.marshfield.wi.us
cityofbarnesville.com
cityofhowell.org
cumberlandcounty.org
cumberlandcountyme.gov
cumberlandso.org
flyelkonevada.com
hamtramckhistory.com
lasvegasjusticecourt.us
maumee.k12.oh.us
merrillville.in.gov
milfordtownship.com
milfordtwpmi.gov
northfieldmi.com
northfieldmi.gov
northfieldmi.org
ogallala-ne.gov
ssl3.revizesites.com
tonawandacity.com
tonawandacityfd.com
twp-northfield.org
villageofeastrockaway.org
www.buchanancounty.iowa.gov
www.buchanancountyparks.com
www.ci.marshfield.wi.us
www.cityofbarnesville.com
www.cityofhowell.org
www.cumberlandcounty.org
www.cumberlandcountyme.gov
www.cumberlandso.org
www.flyelkonevada.com
www.hamtramckhistory.com
www.lasvegasjusticecourt.us
www.maumee.k12.oh.us
www.merrillville.in.gov
www.milfordtownship.com
www.milfordtwpmi.gov
www.northfieldmi.com
www.northfieldmi.gov
www.northfieldmi.org
www.ogallala-ne.gov
www.tonawandacity.com
www.tonawandacityfd.com
www.twp-northfield.org
www.villageofeastrockaway.org
buchanancountyparks.com
ci.marshfield.wi.us
cityofbarnesville.com
cityofhowell.org
cumberlandcounty.org
cumberlandcountyme.gov
cumberlandso.org
flyelkonevada.com
hamtramckhistory.com
lasvegasjusticecourt.us
maumee.k12.oh.us
merrillville.in.gov
milfordtownship.com
milfordtwpmi.gov
northfieldmi.com
northfieldmi.gov
northfieldmi.org
ogallala-ne.gov
ssl3.revizesites.com
tonawandacity.com
tonawandacityfd.com
twp-northfield.org
villageofeastrockaway.org
www.buchanancounty.iowa.gov
www.buchanancountyparks.com
www.ci.marshfield.wi.us
www.cityofbarnesville.com
www.cityofhowell.org
www.cumberlandcounty.org
www.cumberlandcountyme.gov
www.cumberlandso.org
www.flyelkonevada.com
www.hamtramckhistory.com
www.lasvegasjusticecourt.us
www.maumee.k12.oh.us
www.merrillville.in.gov
www.milfordtownship.com
www.milfordtwpmi.gov
www.northfieldmi.com
www.northfieldmi.gov
www.northfieldmi.org
www.ogallala-ne.gov
www.tonawandacity.com
www.tonawandacityfd.com
www.twp-northfield.org
www.villageofeastrockaway.org
Other certificates including the domain name revizesites.com
(limited to 100 certificates)
ssl1.revizesites.com
ssl8.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl4.revizesites.com
ssl3.revizesites.com
ssl4.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl1.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl2.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl-wg1.revizesites.com
ssl2.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl9.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl1.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl9.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl7.revizesites.com
ssl9.revizesites.com
ssl8.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl2.revizesites.com
ssl7.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl9.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl2.revizesites.com
ssl7.revizesites.com
ssl1.revizesites.com
ssl7.revizesites.com
ssl-wg1.revizesites.com
ssl4.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl7.revizesites.com
ssl4.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl3.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl9.revizesites.com
ssl8.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl4.revizesites.com
ssl3.revizesites.com
ssl4.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl1.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl2.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl-wg1.revizesites.com
ssl2.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl9.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl1.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl9.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl7.revizesites.com
ssl9.revizesites.com
ssl8.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl2.revizesites.com
ssl7.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl9.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl2.revizesites.com
ssl7.revizesites.com
ssl1.revizesites.com
ssl7.revizesites.com
ssl-wg1.revizesites.com
ssl4.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl7.revizesites.com
ssl4.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl3.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl9.revizesites.com
Certificate
The complete raw certificate details for ssl3.revizesites.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJFDCCB/ygAwIBAgISBDkrOMi7eWtDMrlIIdBKZuPYMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MDQxNTQyMzVaFw0yNDA3MDMxNTQyMzRaMB8xHTAbBgNVBAMT FHNzbDMucmV2aXplc2l0ZXMuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAgm9ljUVIkV3t4XbfJIddDAzi1ulOsG3HeTiQ4MK6/ubEoeKtAXuIc+iY S9rSOF05tmksRmtrIu/J0DVb51jyzkQimLYB5bfKWi30kFkSpqXG2EU+EVsS9CKh hwgx7AHZPEgXG7tp/3jx30wt6DSyjOB1XuJq924gR27tAiaPIOCVLOxKhimxjMYf FSeZ0cMIQ4wuGBRw7EZLsladV4d3bvhzqYu5oZ5qRgDPXvenWavuISdaRpRVtuLL oz6tt2U+4KfrOSzeE4Z+/NeViCJduqK6jJXksSAkslxxz8D7jHF+j//chckcyVCa 6Akm4hVFJLVn/SXVx80Dp+O0gS5JDQIDAQABo4IGNTCCBjEwDgYDVR0PAQH/BAQD AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBR3jTxjQ7EZ4n1ER7Yy5fqzFYHXLjAfBgNVHSMEGDAWgBQULrMX t1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0 dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVu Y3Iub3JnLzCCBDsGA1UdEQSCBDIwggQughdidWNoYW5hbmNvdW50eS5pb3dhLmdv doIXYnVjaGFuYW5jb3VudHlwYXJrcy5jb22CE2NpLm1hcnNoZmllbGQud2kudXOC FWNpdHlvZmJhcm5lc3ZpbGxlLmNvbYIQY2l0eW9maG93ZWxsLm9yZ4IUY3VtYmVy bGFuZGNvdW50eS5vcmeCFmN1bWJlcmxhbmRjb3VudHltZS5nb3aCEGN1bWJlcmxh bmRzby5vcmeCEWZseWVsa29uZXZhZGEuY29tghRoYW10cmFtY2toaXN0b3J5LmNv bYIXbGFzdmVnYXNqdXN0aWNlY291cnQudXOCEG1hdW1lZS5rMTIub2gudXOCE21l cnJpbGx2aWxsZS5pbi5nb3aCE21pbGZvcmR0b3duc2hpcC5jb22CEG1pbGZvcmR0 d3BtaS5nb3aCEG5vcnRoZmllbGRtaS5jb22CEG5vcnRoZmllbGRtaS5nb3aCEG5v cnRoZmllbGRtaS5vcmeCD29nYWxsYWxhLW5lLmdvdoIUc3NsMy5yZXZpemVzaXRl cy5jb22CEXRvbmF3YW5kYWNpdHkuY29tghN0b25hd2FuZGFjaXR5ZmQuY29tghJ0 d3Atbm9ydGhmaWVsZC5vcmeCGXZpbGxhZ2VvZmVhc3Ryb2NrYXdheS5vcmeCG3d3 dy5idWNoYW5hbmNvdW50eS5pb3dhLmdvdoIbd3d3LmJ1Y2hhbmFuY291bnR5cGFy a3MuY29tghd3d3cuY2kubWFyc2hmaWVsZC53aS51c4IZd3d3LmNpdHlvZmJhcm5l c3ZpbGxlLmNvbYIUd3d3LmNpdHlvZmhvd2VsbC5vcmeCGHd3dy5jdW1iZXJsYW5k Y291bnR5Lm9yZ4Iad3d3LmN1bWJlcmxhbmRjb3VudHltZS5nb3aCFHd3dy5jdW1i ZXJsYW5kc28ub3JnghV3d3cuZmx5ZWxrb25ldmFkYS5jb22CGHd3dy5oYW10cmFt Y2toaXN0b3J5LmNvbYIbd3d3Lmxhc3ZlZ2FzanVzdGljZWNvdXJ0LnVzghR3d3cu bWF1bWVlLmsxMi5vaC51c4IXd3d3Lm1lcnJpbGx2aWxsZS5pbi5nb3aCF3d3dy5t aWxmb3JkdG93bnNoaXAuY29tghR3d3cubWlsZm9yZHR3cG1pLmdvdoIUd3d3Lm5v cnRoZmllbGRtaS5jb22CFHd3dy5ub3J0aGZpZWxkbWkuZ292ghR3d3cubm9ydGhm aWVsZG1pLm9yZ4ITd3d3Lm9nYWxsYWxhLW5lLmdvdoIVd3d3LnRvbmF3YW5kYWNp dHkuY29tghd3d3cudG9uYXdhbmRhY2l0eWZkLmNvbYIWd3d3LnR3cC1ub3J0aGZp ZWxkLm9yZ4Idd3d3LnZpbGxhZ2VvZmVhc3Ryb2NrYXdheS5vcmcwEwYDVR0gBAww CjAIBgZngQwBAgEwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwBIsONr2qZHNA/l agL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY6p/aL/AAAEAwBIMEYCIQC6J6PktgOG AVEAvryE2d+6O1jVXivh+A5EjzpeForBRgIhAMe0wuVwaIelnz1BSbXF560PKaAy vThz7cqadWWcN6E/AHYA3+FW66oFr7WcD4ZxjajAMk6uVtlup/WlagHRwTu+UlwA AAGOqf2juwAABAMARzBFAiBK+jd3zfXzlsQnT1zhkYhhl4SRl76GvmROpOx4STbu fwIhAJIngwrPGGdsNbueN9YRhOLE1iBW1hcBLwa49zqPH2jmMA0GCSqGSIb3DQEB CwUAA4IBAQAP28CvynD7IzrjW/wCC0QKrjeBiBCWnaddR1GlJDILLoxDEl425rq0 28ueTwl+KqisLutGXNrEX/5aRyZod+slA8G1eLNfEPN9N+FqafuATahE5qPPgx7f mAtwzFW2lXFTVPWkHH6+ykBL5Y0F7pLXKHqEToYcxFikNa0VOAhy/ThEhavenGZM FfEE/9AgQqhYnP2uWnC+/gWenfPRhaJTzjRgkCV5vm+BcMXpePyV+U9g0XEJK0Sf N4adXWSqTG/Jiz30Le9wQq5IYCq+doX3fMqKMOyIPpCve/vHg7aflXGdofca6e/n JwSA4/Ho6PJsGjqk+lc9TGHzUn1WaK4L -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgm9ljUVIkV3t4XbfJIdd DAzi1ulOsG3HeTiQ4MK6/ubEoeKtAXuIc+iYS9rSOF05tmksRmtrIu/J0DVb51jy zkQimLYB5bfKWi30kFkSpqXG2EU+EVsS9CKhhwgx7AHZPEgXG7tp/3jx30wt6DSy jOB1XuJq924gR27tAiaPIOCVLOxKhimxjMYfFSeZ0cMIQ4wuGBRw7EZLsladV4d3 bvhzqYu5oZ5qRgDPXvenWavuISdaRpRVtuLLoz6tt2U+4KfrOSzeE4Z+/NeViCJd uqK6jJXksSAkslxxz8D7jHF+j//chckcyVCa6Akm4hVFJLVn/SXVx80Dp+O0gS5J DQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 367902690285312472815876851997433827615704 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-04 15:42:35 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-03 15:42:34 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl3.revizesites.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16465911399217157981745079932618498413687520471210055698912437750183957220061480129146361086898883666523562003461995049704981276814275095742869958980417369863992968389073876327149362046192393772071485512891152913342322593323426964419452122660155024516802335332267746835516902831241848251316803444908909152162976750276639913548350175173960387119371469716897712350326260311280068332105048724316301795714291383555919126818855525276211516091105816002306016227123639435825194996963377852285023228393641473861413747750329737505689159960372314161333247782554210882371721054845807466815412837258622171787049291617186943486221 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 778d3c6343b119e27d4447b632e5fab31581d72e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1074 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buchanancounty.iowa.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buchanancountyparks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci.marshfield.wi.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofbarnesville.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofhowell.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cumberlandcounty.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cumberlandcountyme.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cumberlandso.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyelkonevada.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamtramckhistory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lasvegasjusticecourt.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maumee.k12.oh.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merrillville.in.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milfordtownship.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milfordtwpmi.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northfieldmi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northfieldmi.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northfieldmi.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ogallala-ne.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl3.revizesites.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tonawandacity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tonawandacityfd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twp-northfield.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'villageofeastrockaway.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buchanancounty.iowa.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buchanancountyparks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.marshfield.wi.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofbarnesville.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofhowell.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cumberlandcounty.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cumberlandcountyme.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cumberlandso.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flyelkonevada.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hamtramckhistory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lasvegasjusticecourt.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maumee.k12.oh.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.merrillville.in.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.milfordtownship.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.milfordtwpmi.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northfieldmi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northfieldmi.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northfieldmi.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ogallala-ne.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tonawandacity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tonawandacityfd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twp-northfield.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.villageofeastrockaway.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ea9fda2ff0000040300483046022100ba27a3e4b60386015100bebc84d9dfba3b58d55e2be1f80e448f3a5e168ac146022100c7b4c2e5706887a59f3d4149b5c5e7ad0f29a032bd3873edca9a75659c37a13f007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ea9fda3bb000004030047304502204afa3777cdf5f396c4274f5ce191886197849197be86be644ea4ec784936ee7f0221009227830acf18676c35bb9e37d61184e2c4d62056d617012f06b8f73a8f1f68e6 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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