san-c1.granicusgovaccess.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:92:84:ce:da:67:ab:25:e5:ba:16:10:a7:8e:fb:45:e8:74 was issued on by Let's Encrypt.

With 59 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san-c1.granicusgovaccess.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:92:84:ce:da:67:ab:25:e5:ba:16:10:a7:8e:fb:45:e8:74
Serial Number (int): 311194615504112984762061934877263914199156
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d3:94:0f:38:56:3f:9c:19:82:84:9a:8c:6a:30:ee:cd:07:42:72:b2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c5:f2:26:fa:b3:2f:73:73:5c:58:7a:2d:17:7a:10:06:58:7a:dd:d2
Fingerprint (sha256): 03:ef:da:7a:c7:2f:3d:c1:48:ba:a1:ff:4c:6b:35:86:c7:13:60:30:8e:5a:07:eb:91:cc:b4:43:b0:c6:29:d7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate san-c1.granicusgovaccess.net

59

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-c1.granicusgovaccess.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

airport.albanyga.gov
downtown.albanyga.gov
econdev.laquintaca.gov
san-c1.granicusgovaccess.net
tax.columbiacountyga.gov
www.albanyga.gov
www.amadorgov.org
www.appleton.org
www.appomattoxcountyva.gov
www.buckeyeaz.gov
www.centervilleohio.gov
www.cgcounty.org
www.ci.janesville.wi.us
www.cityofcaldwell.org
www.cityofcreedmoor.org
www.cityofevanston.org
www.cityofglendora.org
www.claytoncountyga.gov
www.claytonmo.gov
www.co.dodge.wi.gov
www.co.fresno.ca.us
www.columbiacountyga.gov
www.columbiacountyso.org
www.cor.net
www.costamesaca.gov
www.culvercity.org
www.culvercitypd.org
www.cupertino.org
www.dallascountyiowa.gov
www.delraybeachfl.gov
www.eastvaleca.gov
www.eauclairewi.gov
www.edenprairie.org
www.elarc.org
www.epasd.com
www.fbchhs.org
www.fcva.us
www.fortbendcountytx.gov
www.franklinohio.org
www.franklintn.gov
www.gaithersburgmd.gov
www.garden-city.org
www.gardencity-ga.gov
www.gardnerkansas.gov
www.garnernc.gov
www.garrettparkmd.gov
www.gcappreventioncouncil.org
www.gcpolice.org
www.growbuckeye.com
www.growgaithersburg.com
www.growjanesville.com
www.laquintaca.gov
www.letsplaysarasota.com
www.masoncityassessor.net
www.nradc.com
www.portofeverett.com
www.richardsonpolice.net
www.townofblowingrocknc.gov
www.townofchapelhill.org

Other certificates including the domain name granicusgovaccess.net

(limited to 100 certificates)
san-b1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-z1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net

Certificate

The complete raw certificate details for san-c1.granicusgovaccess.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxs0SDcNmrkYnTmXIzc1
VuXUwHPXqkjc8PnLG/4uzsd/JDNxgWizL6E3YsxEvRzaP+mWePEdqbt0VfzXE1Ig
5omyUYqaq/ZOv9c9v+FHXKmwzoWfHG+lI9DKMSSBpfvGZMwmNQF+q+sF75MksX8m
OLHUn3BHYtR3T0OxzNgr/HQp/ACT8Peeok2HBXPHV26mGN8ZVn3dyE2R/9J+fFeS
VfbC6GWzXTZpOjAJk+b7atFnE4SjGnL4jtVPvullec/yXPAuIlhMQHNc0sTPkk64
cIY71Inwglwa95V26NZsOkabLWU/G6sck+Yjr7M6rPr/aRx3xSrwnNs337xbczWM
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311194615504112984762061934877263914199156
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-19 23:11:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-18 23:11:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-c1.granicusgovaccess.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26144744032245873553798395552355435444881618604361270878695587336446737465410872582341970507642552524898491293001664497825560223833326181663366991296822251302477921382325901279252619165476075148135418233955016011678720555221542102741489229444194979348219947167565394931990599381621217113330200581866864440358312886131677547400065794037588354758177871538735049474271186663258949025358928463676471637525378412969372937560490052394242527240122674117982742598478605472385854917615268255681084312813879762998816278050647379666919519971154528016023323178175119652523479356487002871325894023634664513922760710596553082244111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d3940f38563f9c1982849a8c6a30eecd074272b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1311 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airport.albanyga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downtown.albanyga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'econdev.laquintaca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-c1.granicusgovaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tax.columbiacountyga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albanyga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amadorgov.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.appleton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.appomattoxcountyva.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buckeyeaz.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centervilleohio.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cgcounty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.janesville.wi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofcaldwell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofcreedmoor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofevanston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofglendora.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.claytoncountyga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.claytonmo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co.dodge.wi.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co.fresno.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiacountyga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiacountyso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cor.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.costamesaca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.culvercity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.culvercitypd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cupertino.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dallascountyiowa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.delraybeachfl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastvaleca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eauclairewi.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edenprairie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elarc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epasd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fbchhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fcva.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fortbendcountytx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.franklinohio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.franklintn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gaithersburgmd.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garden-city.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gardencity-ga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gardnerkansas.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garnernc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garrettparkmd.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gcappreventioncouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gcpolice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.growbuckeye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.growgaithersburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.growjanesville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laquintaca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.letsplaysarasota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masoncityassessor.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nradc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portofeverett.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richardsonpolice.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townofblowingrocknc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townofchapelhill.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f20a543500000040300483046022100cddc6741b015fe8eed6bf034ced555b8a836ecc91a429a7b95308b6c993ad62d022100f6677f20625de6f2d5d5d1ab8e411e274d393b73e5c8fab07a810534aac9752000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f20a5434e0000040300473045022100d1b2b9c3ffe3bed9da19f1fbc347d4730e0f85af0de4a18eb52127f03c7e368e0220320d8ff3aa0f7098f2de9ca3c3349b098392602ff05797f15b7ec1c6e0f6fc42
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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