*.era.lacounty.gov

- County of Los Angeles -

Issued by Sectigo SHA-256 OV Secure Server CA 2

About this certificate

This digital certificate with serial number f9:d0:63:b6:34:d3:6c:1b:ec:ee:3c:cb:34:b8:f1:c6 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

County of Los Angeles

Organization: County of Los Angeles
State / Province: California
Country: US

Sectigo Limited

Organization: Sectigo Limited
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): f9:d0:63:b6:34:d3:6c:1b:ec:ee:3c:cb:34:b8:f1:c6
Serial Number (int): 332059791091444450000627234371421139398
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: aa:b3:05:3d:77:74:e5:38:07:b3:fb:a3:47:29:be:a7:a1:b2:08:43
AuthorityKeyId: 03:f7:21:ae:c1:6f:19:ad:b4:73:52:04:18:ba:9f:3f:33:b5:6e:a6

Fingerprint (sha1): 23:26:bc:e7:14:f5:99:b7:3b:36:51:12:62:ff:33:e6:e3:33:a1:dc
Fingerprint (sha256): 04:fd:6d:c3:46:1c:1c:9a:6d:e9:9a:a8:fc:33:d8:f1:59:50:55:12:b3:72:69:d4:55:6a:42:ee:ec:77:0c:84

Issuing Certificate URL: http://crt.sectigo.com/SectigoSHA256OVSecureServerCA2.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoSHA256OVSecureServerCA2.crl

Check the revocation status for certificate *.era.lacounty.gov

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.era.lacounty.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.era.lacounty.gov
era.lacounty.gov

Other certificates including the domain name lacounty.gov

(limited to 100 certificates)
sql.lacounty.gov
ccmsbravap1.isd.lacounty.gov
iadpmpoc.lacounty.gov
ecomplaint.dca.lacounty.gov
inventory.lacounty.gov
epicla.lacounty.gov
chip.lacounty.gov
assessorportalstg.assessor.lacounty.gov
learningnet.lacounty.gov
iddweb.isd.lacounty.gov
mail.dhs.lacounty.gov
dow-expwayc1.isd.lacounty.gov
learningnet.lacounty.gov
mail.dpss.lacounty.gov
b2bqa.dmh.lacounty.gov
apps4.dcfs.lacounty.gov
homeless.lacounty.gov
mgrievancedev.probation.lacounty.gov
escars.dcfs.lacounty.gov
pex.isd.lacounty.gov
bits.dcfs.lacounty.gov
secureauthidp.probation.lacounty.gov
phsp.publichealth.lacounty.gov
rprs.ttc.lacounty.gov
dcfsiibp.lacounty.gov
laccb.lacounty.gov
youthsubscription.dcfs.lacounty.gov
isdjpa.isd.lacounty.gov
hr.lacounty.gov
assessor.lacounty.gov
studentinfotracking.dcfs.lacounty.gov
assessor.lacounty.gov
iadpmpocint.lacounty.gov
cappay.dcfs.lacounty.gov
misdsmsdmzp01.isd.lacounty.gov
dcfsaspnet.dcfs.lacounty.gov
eforms.lacounty.gov
smsm.isd.lacounty.gov
eprspcont1.isd.lacounty.gov
mcdwinmgmt.isd.lacounty.gov
hr.lacounty.gov
apps2a.dcfs.lacounty.gov
sas.lacounty.gov
ezforms.assessor.lacounty.gov
recovery.lacounty.gov
ceo911.lacounty.gov
rmisweb2.lacounty.gov
pi.assessor.lacounty.gov
adpacis.ph.lacounty.gov
sts.lacounty.gov
mypc.lacounty.gov
api.library.lacounty.gov
lacform700.lacounty.gov
ivantfd.probation.lacounty.gov
dcfsaspnet.dcfs.lacounty.gov
apps.hr.lacounty.gov
prosperla.lacounty.gov
api.library.lacounty.gov
pw.lacounty.gov
sts.lacounty.gov
fafwebservice.dcfs.lacounty.gov
*.era.lacounty.gov
ttc.lacounty.gov
mandreptfnl.isd.lacounty.gov
vx3.lacounty.gov
trafficdocs2.isd.lacounty.gov
housing.lacounty.gov
*.ph.lacounty.gov
fire.lacounty.gov
PasswordReset.lacounty.gov
t2c.dcfs.lacounty.gov
fire.lacounty.gov
oarrs.lacounty.gov
assessorcalamity.lacounty.gov
epictapp.lacounty.gov
omg.dhs.lacounty.gov
ccmsuat.isd.lacounty.gov
ccjv.lacounty.gov
eec.lacounty.gov
rprstst.ttc.lacounty.gov
propertytax.lacounty.gov
ecmcontst01.isd.lacounty.gov
dow-expwayx1.isd.lacounty.gov
archives.lacounty.gov
eappeals.lacounty.gov
dcfspbigw.isd.lacounty.gov
pw.lacounty.gov
ceop.lacounty.gov
fire.lacounty.gov
mitchell.lacounty.gov
eprwebexttst.lacounty.gov
parks.lacounty.gov
my.dpss.lacounty.gov
isdcadivr.isd.lacounty.gov
reservations.lacounty.gov
mail.o365.lacounty.gov
faf.dcfs.lacounty.gov
isdtest.lacounty.gov
lacovss.lacounty.gov
apps4a.dcfs.lacounty.gov

Certificate

The complete raw certificate details for *.era.lacounty.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGijCCBXKgAwIBAgIRAPnQY7Y002wb7O48yzS48cYwDQYJKoZIhvcNAQELBQAw
VzELMAkGA1UEBhMCR0IxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDEuMCwGA1UE
AxMlU2VjdGlnbyBTSEEtMjU2IE9WIFNlY3VyZSBTZXJ2ZXIgQ0EgMjAeFw0yMzA2
MjkwMDAwMDBaFw0yNDA2MjgyMzU5NTlaMF8xCzAJBgNVBAYTAlVTMRMwEQYDVQQI
EwpDYWxpZm9ybmlhMR4wHAYDVQQKExVDb3VudHkgb2YgTG9zIEFuZ2VsZXMxGzAZ
BgNVBAMMEiouZXJhLmxhY291bnR5LmdvdjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANa02qKBsaHxZigAe4QFaFnilA+wh1/kYlSKkUVhptikixMH2Wrd
uqNO2+nwfTrTmwPXOx4atokq2Zpb0f8ha500cxcb8iDefb12p7BlPUInJdvrdqya
uc+lZXFmLSkYwQGHfyePreHZs1RrTW2rZ07Hia1hFNI7tO41xYMNgP+/DzCaS0+5
JWW+1eSEqBp7KB+ukDcnGyBEpu71v+k40sLndsfqW3qni6PD7Q4DQ/b/T2lJy+ur
Hg3C3BYp5fL0Md/PMnY23XnZqlFysOdI4jZt8obL4BUm+Idi/vuaZ+4Sz22g0dpE
qQ9hqRw805NS2Ai3Zxn5YHunZ1GnGzy/PtkCAwEAAaOCA0cwggNDMB8GA1UdIwQY
MBaAFAP3Ia7BbxmttHNSBBi6nz8ztW6mMB0GA1UdDgQWBBSqswU9d3TlOAez+6NH
Kb6nobIIQzAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwSgYDVR0gBEMwQTA1BgwrBgEEAbIxAQIBAwQw
JTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwCAYGZ4EMAQIC
MEoGA1UdHwRDMEEwP6A9oDuGOWh0dHA6Ly9jcmwuc2VjdGlnby5jb20vU2VjdGln
b1NIQTI1Nk9WU2VjdXJlU2VydmVyQ0EyLmNybDB6BggrBgEFBQcBAQRuMGwwRQYI
KwYBBQUHMAKGOWh0dHA6Ly9jcnQuc2VjdGlnby5jb20vU2VjdGlnb1NIQTI1Nk9W
U2VjdXJlU2VydmVyQ0EyLmNydDAjBggrBgEFBQcwAYYXaHR0cDovL29jc3Auc2Vj
dGlnby5jb20wLwYDVR0RBCgwJoISKi5lcmEubGFjb3VudHkuZ292ghBlcmEubGFj
b3VudHkuZ292MIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdgB2/4g/Crb7lVHC
Ycz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYkIUf1YAAAEAwBHMEUCIE10ZnczeSwV
6YeJRb8Kcpsb6VpRbh8+zi6pGO/KhreaAiEAukdoMHifRg6fucCg9mJjDB0BIpRq
h/jLZWFzZaUw5VAAdQDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAA
AYkIUf28AAAEAwBGMEQCIBK99G1iIeQKL4DXDMgGx2ZKbhPcVchScno3QYwyadlW
AiAzi60+as/370p1JK80VeTe2BO0nJ+zhyIg79pI0XRQdwB2AO7N0GTV2xrOxVy3
nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABiQhR/c0AAAQDAEcwRQIhAMP+BwmUPZkr
6YSIz5c0aIxP6xOBjM8lxXUoufdxBxhWAiAB5/drbnblFPafstEFiVCTwApx/zU0
uxkkHrWUiUe+xjANBgkqhkiG9w0BAQsFAAOCAQEAI2kOVUa5z9u+e/zDU/zYU1dU
VRCOuboSaXmoPAPl3QzsEVyTG8KJleNn4BKe3JlJl5y2ZZsnlLiUkqWeys12gqsx
frOjaBdLs/D5dro5isgQA85CNi1UiXYC+KjmDZkMyXkJb5KmOcp8QksgjtjSWX45
comOyp2CtiTVu2Uc0qdIaaX953U8NUZ7PL8h9bwp9pWemfLBZAvA0zwakdN574s3
D+mvxbCqBV6S5/p5TTKrGYoxTgpl22T0HmJC74lTfZbQzudGhwYQEEm+MEEtn5K4
pnM1cJJ6Qyr6FhmDkpukq5uOZnJve7EbomCICBqvIU5+XpF/BlkS6crArSCa+g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rTaooGxofFmKAB7hAVo
WeKUD7CHX+RiVIqRRWGm2KSLEwfZat26o07b6fB9OtObA9c7Hhq2iSrZmlvR/yFr
nTRzFxvyIN59vXansGU9Qicl2+t2rJq5z6VlcWYtKRjBAYd/J4+t4dmzVGtNbatn
TseJrWEU0ju07jXFgw2A/78PMJpLT7klZb7V5ISoGnsoH66QNycbIESm7vW/6TjS
wud2x+pbeqeLo8PtDgND9v9PaUnL66seDcLcFinl8vQx388ydjbdedmqUXKw50ji
Nm3yhsvgFSb4h2L++5pn7hLPbaDR2kSpD2GpHDzTk1LYCLdnGflge6dnUacbPL8+
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332059791091444450000627234371421139398
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo SHA-256 OV Secure Server CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'County of Los Angeles'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.era.lacounty.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27104179714798281512538472429825635904206930422833556701107001902621666674348661160035535414076423867919349917334954035238700422191118282894508289324404129221103680706183693011174080350922490254150457949710532977296634333393439628650753972435926823952804349676763165248871233397506456186753219219117114057515923109349291392698743387421439613526570609953573403052106114946739935788774199348351079887048108995889572604835355374263895716699796322550544299828408887585180154460138624851786017581277583738485954907995774848450614338210952295643750058126054846723172617396468128114476472284209140888113035439417384603959001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 03f721aec16f19adb473520418ba9f3f33b56ea6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aab3053d7774e53807b3fba34729bea7a1b20843
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoSHA256OVSecureServerCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoSHA256OVSecureServerCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.era.lacounty.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'era.lacounty.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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