san-f2.granicusgovaccess.net

Issued by R3

About this certificate

This digital certificate with serial number 04:f1:f5:d6:c6:30:c8:1c:67:f8:59:90:c4:82:6e:99:0f:eb was issued on by Let's Encrypt.

With 65 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san-f2.granicusgovaccess.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f1:f5:d6:c6:30:c8:1c:67:f8:59:90:c4:82:6e:99:0f:eb
Serial Number (int): 430783970185264171789730461166761565294571
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8c:4b:0c:85:6d:62:cb:ff:86:9c:60:2e:db:0c:09:14:0b:72:a6:5c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 23:10:ec:de:d6:3b:a6:54:7f:7a:4c:30:7d:88:27:4a:22:a6:ad:0b
Fingerprint (sha256): 03:f1:82:1d:e0:fd:14:89:13:5c:d0:1f:b7:3e:6a:d1:ed:61:40:6f:84:ee:51:fa:46:c4:58:ec:7c:75:43:4e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate san-f2.granicusgovaccess.net

65

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-f2.granicusgovaccess.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

inet.cityofvacaville.com
intranet.fremontfire.gov
intranet.fremontpolice.gov
san-f2.granicusgovaccess.net
www.albemarle.org
www.brentwoodca.gov
www.campverde.az.gov
www.ci.commerce.ca.us
www.ci.vacaville.ca.us
www.cityofalachua.com
www.cityofcalabasas.com
www.cityofcommercepubliclibrary.org
www.cityofperris.org
www.cityofsanteeca.gov
www.cityofwalnut.org
www.cityofwinder.com
www.cocosheriff.org
www.cosb.us
www.edwarddufresnecommunitycenter.com
www.enablealbemarle.org
www.firedepartment.org
www.greenlightnc.com
www.kenmorewa.gov
www.library.sunnyvale.ca.gov
www.liveoakcity.org
www.norco.ca.us
www.regionalflood.org
www.sandcity.org
www.santa-clarita.com
www.sausalito.gov
www.sausalitolibrary.org
www.scpparksandrec.com
www.sewallspoint.org
www.sharpsburgnc.com
www.silverthorne.org
www.sjcfire.org
www.stcharlesparish.gov
www.sunnyvale.ca.gov
www.suttercounty.org
www.suttersheriff.org
www.suwanee.com
www.tasin.org
www.tcwd.ca.gov
www.tecumsehok.org
www.tempe.gov
www.tempecenterforthearts.com
www.tempepubliclibrary.org
www.thatcher.az.gov
www.townhall.westwood.ma.us
www.townofwestspringfield.org
www.trio-us.org
www.villagesussex.org
www.wallawallapubliclibrary.org
www.wallawallawa.gov
www.warrencountynjveterans.com
www.warrencountyvotes.com
www.washingtoncountyar.gov
www.wdm.iowa.gov
www.west192.org
www.westcovina.org
www.westwoodpd.org
www.wilsoncountync.gov
www.wilsonnc.org
www.wsps.org
www.yucca-valley.org

Other certificates including the domain name granicusgovaccess.net

(limited to 100 certificates)
san-b1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-z1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net

Certificate

The complete raw certificate details for san-f2.granicusgovaccess.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7kyZGbmbpwsiLrX2vxoj
Q8+Fl15N/eKU+vTbKjEZ4mLIkuv063GjP91vHxhr4sAlRq3qz/L0cY1ss97sImaG
71LmvCLRDd5WKmrokR56o+4ZB3Ffw0/j2qmBm2CB6Z8T+iXuCpGbUSyUhcA3trWf
w5rB4UhCoHCgoYJMfh4MVrs9Jxe7dK1jH31xxW8fNmgg27TsCdfzM0Fpt7ARE4o4
oQyRXYVEm3Ta46TPpOvdkqkWkRS2XnO6+yV4LsdJMBTKvvsyTuj6pgpTTlOeKPze
DHoQXxCSWhKOThysCnG/mB3LsNNn0Yy+hLg98sw2fBYFjKaoY64d6yRjP+EY+xTs
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 430783970185264171789730461166761565294571
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-05 15:58:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-03 15:58:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-f2.granicusgovaccess.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30082488487554965731907119111812044933841715776013049745408017636452953240213576263142541800196154055839991426896019274895527372041117375844400476136242597060105679490129846359780093770757023360371339979284737829905893125444683993066056079091569345769239261573212060970354339003877340863634685479717715214088104102179012127902921971313729438046653535221167517856059393558557570795023571982736053689023723963222084042407577773538785165694042681209963254763160835651110934078383531102914123717223212415117531015212659416387735110246808321838562465054604454674844288282187009342740377609492995074290462053572344460668143
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8c4b0c856d62cbff869c602edb0c09140b72a65c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1496 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inet.cityofvacaville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.fremontfire.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.fremontpolice.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-f2.granicusgovaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albemarle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brentwoodca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campverde.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.commerce.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.vacaville.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofalachua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofcalabasas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofcommercepubliclibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofperris.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofsanteeca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofwalnut.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofwinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cocosheriff.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cosb.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edwarddufresnecommunitycenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enablealbemarle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firedepartment.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenlightnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kenmorewa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.library.sunnyvale.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liveoakcity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norco.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regionalflood.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandcity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santa-clarita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sausalito.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sausalitolibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scpparksandrec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sewallspoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharpsburgnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.silverthorne.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjcfire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcharlesparish.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunnyvale.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suttercounty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suttersheriff.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suwanee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tasin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tcwd.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tecumsehok.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tempe.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tempecenterforthearts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tempepubliclibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thatcher.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townhall.westwood.ma.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townofwestspringfield.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trio-us.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.villagesussex.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wallawallapubliclibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wallawallawa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warrencountynjveterans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warrencountyvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.washingtoncountyar.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wdm.iowa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.west192.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westcovina.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westwoodpd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wilsoncountync.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wilsonnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wsps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yucca-valley.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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