ssl-wg1.revizesites.com

Issued by R3

About this certificate

This digital certificate with serial number 04:0e:18:a6:a0:9e:10:4b:f0:b8:d7:50:95:e0:e8:ab:1d:c6 was issued on by Let's Encrypt.

With 74 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ssl-wg1.revizesites.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0e:18:a6:a0:9e:10:4b:f0:b8:d7:50:95:e0:e8:ab:1d:c6
Serial Number (int): 353245863514820109665211187599427540557254
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4e:71:16:76:db:39:7c:41:dc:85:99:50:9e:0f:4b:a6:e4:dd:b5:94
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0a:5d:ee:f9:72:1c:8a:32:9d:e7:75:bd:39:f5:b0:49:1e:a8:f5:d4
Fingerprint (sha256): 04:8c:e5:28:76:0b:f0:13:17:77:d1:d2:4f:dc:df:9a:40:d7:dd:ba:50:28:d4:a7:a3:6c:9b:2b:d6:85:d6:62

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ssl-wg1.revizesites.com

74

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl-wg1.revizesites.com

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aampo.org
cantontx.gov
cityofbayoulabatre.com
cityofroncevertewv.gov
clarefoc.com
faycohd.org
gatewaycog.org
granttownship.org
hancocknh.org
hcha.net
hickman.cityof.org
hogarc.org
hooksett.org
jeffcitytn.com
kerseygov.com
kmca.net
knoxcountymaine.gov
lowrycrossingtexas.org
lucascountyohiovotes.gov
maca-mn.org
mchrma.org
napoleontownship.us
nbhact.org
owlshead.maine.gov
palmyraborough.org
pinelandsmemorialpark.com
pmtwp.org
roanewv.com
shamong.net
sheffieldtownship.org
ssl-wg1.revizesites.com
sylvanlake.org
theparplan.com
townofmadawaska.com
villageofcanisteo.com
villageofharrisonne.com
washington-twp-warren.org
www.aampo.org
www.cantontx.gov
www.cityofbayoulabatre.com
www.cityofroncevertewv.gov
www.clarefoc.com
www.faycohd.org
www.gatewaycog.org
www.granttownship.org
www.hancocknh.org
www.hcha.net
www.hickman.cityof.org
www.hogarc.org
www.hooksett.org
www.jeffcitytn.com
www.kerseygov.com
www.kmca.net
www.knoxcountymaine.gov
www.lowrycrossingtexas.org
www.lucascountyohiovotes.gov
www.maca-mn.org
www.mchrma.org
www.napoleontownship.us
www.nbhact.org
www.owlshead.maine.gov
www.palmyraborough.org
www.pinelandsmemorialpark.com
www.pmtwp.org
www.roanewv.com
www.shamong.net
www.sheffieldtownship.org
www.sylvanlake.org
www.theparplan.com
www.townofathens.com
www.townofmadawaska.com
www.villageofcanisteo.com
www.villageofharrisonne.com
www.washington-twp-warren.org

Other certificates including the domain name revizesites.com

(limited to 100 certificates)
ssl1.revizesites.com
ssl8.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl3.revizesites.com
ssl4.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl1.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl2.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl-wg1.revizesites.com
ssl2.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl9.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl1.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl9.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl7.revizesites.com
ssl9.revizesites.com
ssl8.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl2.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl1.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl9.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl2.revizesites.com
ssl7.revizesites.com
ssl1.revizesites.com
ssl7.revizesites.com
ssl-wg1.revizesites.com
ssl4.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl7.revizesites.com
ssl4.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl3.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com

Certificate

The complete raw certificate details for ssl-wg1.revizesites.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 353245863514820109665211187599427540557254
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-13 18:51:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-13 18:51:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl-wg1.revizesites.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3779982081602192159434527502063328989672241816703421682357351166672164430416479844926338710056199661182075708593140385838600458804968892408057825408532290023149786053418639958118876792188643185427057623364296462870402918781399905411319162007609762271676397060898704072160983423387148505933150088025771681807830179095652690101233243152419824852841647258872212485646781023291252419181462915166588255794385198214741385922829507790297801664995897350554965052627496213769060640889619955486369943886397128796943720239789857388651876928222229424480526588545933787112784612744828782441442385328779053812804825351176766766601993467111706589348382597293913044500873985876753820657632692605190401989972454077953263069151333509295544090898581223270285241367695026541231737629090728862944941538696007330238508743346135184970405870738810555000154984355284349490473869346914928935576560999235517210453633723358871150629685808261873032909167
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4e711676db397c41dc8599509e0f4ba6e4ddb594
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1457 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aampo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cantontx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofbayoulabatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofroncevertewv.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clarefoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faycohd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gatewaycog.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'granttownship.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hancocknh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcha.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hickman.cityof.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hogarc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hooksett.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeffcitytn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kerseygov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kmca.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knoxcountymaine.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lowrycrossingtexas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucascountyohiovotes.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maca-mn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mchrma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'napoleontownship.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbhact.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owlshead.maine.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palmyraborough.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinelandsmemorialpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmtwp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roanewv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shamong.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sheffieldtownship.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-wg1.revizesites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sylvanlake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theparplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'townofmadawaska.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'villageofcanisteo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'villageofharrisonne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washington-twp-warren.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aampo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cantontx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofbayoulabatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofroncevertewv.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clarefoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faycohd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gatewaycog.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.granttownship.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hancocknh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcha.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hickman.cityof.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hogarc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hooksett.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jeffcitytn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kerseygov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kmca.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.knoxcountymaine.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lowrycrossingtexas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lucascountyohiovotes.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maca-mn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mchrma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.napoleontownship.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nbhact.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.owlshead.maine.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.palmyraborough.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pinelandsmemorialpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pmtwp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roanewv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shamong.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sheffieldtownship.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sylvanlake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theparplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townofathens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townofmadawaska.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.villageofcanisteo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.villageofharrisonne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.washington-twp-warren.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018da406696c0000040300473045022100a5d86056d6499e9775b95779f01a1475018d461523c8bbfaa84c8061ec75dc9e02207a8e74d2b30d28ded1206b719428d939d38b8ee796d7b71463aa0b5992be5157007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018da40669ce0000040300483046022100fad2259f6f79438aeec83e8abbd089b555d192bd89b27d73f42e483277c587df022100f339bdcae57e81cc31f4a300e80b5c5edd2ff0d1ce2f014b2fc45a52c3b47132
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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