*.era.lacounty.gov
- County of Los Angeles -
Issued by Sectigo SHA-256 OV Secure Server CA 2
About this certificate
This digital certificate with serial number f9:d0:63:b6:34:d3:6c:1b:ec:ee:3c:cb:34:b8:f1:c6 was issued on by Sectigo Limited.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
County of Los Angeles
Organization:
County of Los Angeles
State / Province:
California
Country: US
Country: US
Sectigo Limited
Organization:
Sectigo Limited
Country:
GB
This certificate will expire on
Certificate Details
Serial Number (hex): f9:d0:63:b6:34:d3:6c:1b:ec:ee:3c:cb:34:b8:f1:c6Serial Number (int): 332059791091444450000627234371421139398
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: aa:b3:05:3d:77:74:e5:38:07:b3:fb:a3:47:29:be:a7:a1:b2:08:43
AuthorityKeyId: 03:f7:21:ae:c1:6f:19:ad:b4:73:52:04:18:ba:9f:3f:33:b5:6e:a6
Fingerprint (sha1): 23:26:bc:e7:14:f5:99:b7:3b:36:51:12:62:ff:33:e6:e3:33:a1:dc
Fingerprint (sha256): 04:fd:6d:c3:46:1c:1c:9a:6d:e9:9a:a8:fc:33:d8:f1:59:50:55:12:b3:72:69:d4:55:6a:42:ee:ec:77:0c:84
Issuing Certificate URL: http://crt.sectigo.com/SectigoSHA256OVSecureServerCA2.crt
Revocation information
OCSP Server: http://ocsp.sectigo.comCRL Distribution Point: http://crl.sectigo.com/SectigoSHA256OVSecureServerCA2.crl
Check the revocation status for certificate *.era.lacounty.gov
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.era.lacounty.gov
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.era.lacounty.gov
era.lacounty.gov
era.lacounty.gov
Other certificates including the domain name lacounty.gov
(limited to 100 certificates)
sql.lacounty.gov
ccmsbravap1.isd.lacounty.gov
iadpmpoc.lacounty.gov
ecomplaint.dca.lacounty.gov
inventory.lacounty.gov
epicla.lacounty.gov
chip.lacounty.gov
assessorportalstg.assessor.lacounty.gov
learningnet.lacounty.gov
iddweb.isd.lacounty.gov
mail.dhs.lacounty.gov
dow-expwayc1.isd.lacounty.gov
learningnet.lacounty.gov
mail.dpss.lacounty.gov
b2bqa.dmh.lacounty.gov
apps4.dcfs.lacounty.gov
homeless.lacounty.gov
mgrievancedev.probation.lacounty.gov
escars.dcfs.lacounty.gov
pex.isd.lacounty.gov
bits.dcfs.lacounty.gov
secureauthidp.probation.lacounty.gov
phsp.publichealth.lacounty.gov
rprs.ttc.lacounty.gov
dcfsiibp.lacounty.gov
laccb.lacounty.gov
youthsubscription.dcfs.lacounty.gov
isdjpa.isd.lacounty.gov
hr.lacounty.gov
assessor.lacounty.gov
studentinfotracking.dcfs.lacounty.gov
assessor.lacounty.gov
iadpmpocint.lacounty.gov
cappay.dcfs.lacounty.gov
misdsmsdmzp01.isd.lacounty.gov
dcfsaspnet.dcfs.lacounty.gov
eforms.lacounty.gov
smsm.isd.lacounty.gov
eprspcont1.isd.lacounty.gov
mcdwinmgmt.isd.lacounty.gov
hr.lacounty.gov
apps2a.dcfs.lacounty.gov
sas.lacounty.gov
ezforms.assessor.lacounty.gov
recovery.lacounty.gov
ceo911.lacounty.gov
rmisweb2.lacounty.gov
pi.assessor.lacounty.gov
adpacis.ph.lacounty.gov
sts.lacounty.gov
mypc.lacounty.gov
api.library.lacounty.gov
lacform700.lacounty.gov
ivantfd.probation.lacounty.gov
dcfsaspnet.dcfs.lacounty.gov
apps.hr.lacounty.gov
prosperla.lacounty.gov
api.library.lacounty.gov
pw.lacounty.gov
sts.lacounty.gov
fafwebservice.dcfs.lacounty.gov
*.era.lacounty.gov
ttc.lacounty.gov
mandreptfnl.isd.lacounty.gov
vx3.lacounty.gov
trafficdocs2.isd.lacounty.gov
housing.lacounty.gov
*.ph.lacounty.gov
fire.lacounty.gov
PasswordReset.lacounty.gov
t2c.dcfs.lacounty.gov
fire.lacounty.gov
oarrs.lacounty.gov
assessorcalamity.lacounty.gov
epictapp.lacounty.gov
omg.dhs.lacounty.gov
ccmsuat.isd.lacounty.gov
ccjv.lacounty.gov
eec.lacounty.gov
rprstst.ttc.lacounty.gov
propertytax.lacounty.gov
ecmcontst01.isd.lacounty.gov
dow-expwayx1.isd.lacounty.gov
archives.lacounty.gov
eappeals.lacounty.gov
dcfspbigw.isd.lacounty.gov
pw.lacounty.gov
ceop.lacounty.gov
fire.lacounty.gov
mitchell.lacounty.gov
eprwebexttst.lacounty.gov
parks.lacounty.gov
my.dpss.lacounty.gov
isdcadivr.isd.lacounty.gov
reservations.lacounty.gov
mail.o365.lacounty.gov
faf.dcfs.lacounty.gov
isdtest.lacounty.gov
lacovss.lacounty.gov
apps4a.dcfs.lacounty.gov
ccmsbravap1.isd.lacounty.gov
iadpmpoc.lacounty.gov
ecomplaint.dca.lacounty.gov
inventory.lacounty.gov
epicla.lacounty.gov
chip.lacounty.gov
assessorportalstg.assessor.lacounty.gov
learningnet.lacounty.gov
iddweb.isd.lacounty.gov
mail.dhs.lacounty.gov
dow-expwayc1.isd.lacounty.gov
learningnet.lacounty.gov
mail.dpss.lacounty.gov
b2bqa.dmh.lacounty.gov
apps4.dcfs.lacounty.gov
homeless.lacounty.gov
mgrievancedev.probation.lacounty.gov
escars.dcfs.lacounty.gov
pex.isd.lacounty.gov
bits.dcfs.lacounty.gov
secureauthidp.probation.lacounty.gov
phsp.publichealth.lacounty.gov
rprs.ttc.lacounty.gov
dcfsiibp.lacounty.gov
laccb.lacounty.gov
youthsubscription.dcfs.lacounty.gov
isdjpa.isd.lacounty.gov
hr.lacounty.gov
assessor.lacounty.gov
studentinfotracking.dcfs.lacounty.gov
assessor.lacounty.gov
iadpmpocint.lacounty.gov
cappay.dcfs.lacounty.gov
misdsmsdmzp01.isd.lacounty.gov
dcfsaspnet.dcfs.lacounty.gov
eforms.lacounty.gov
smsm.isd.lacounty.gov
eprspcont1.isd.lacounty.gov
mcdwinmgmt.isd.lacounty.gov
hr.lacounty.gov
apps2a.dcfs.lacounty.gov
sas.lacounty.gov
ezforms.assessor.lacounty.gov
recovery.lacounty.gov
ceo911.lacounty.gov
rmisweb2.lacounty.gov
pi.assessor.lacounty.gov
adpacis.ph.lacounty.gov
sts.lacounty.gov
mypc.lacounty.gov
api.library.lacounty.gov
lacform700.lacounty.gov
ivantfd.probation.lacounty.gov
dcfsaspnet.dcfs.lacounty.gov
apps.hr.lacounty.gov
prosperla.lacounty.gov
api.library.lacounty.gov
pw.lacounty.gov
sts.lacounty.gov
fafwebservice.dcfs.lacounty.gov
*.era.lacounty.gov
ttc.lacounty.gov
mandreptfnl.isd.lacounty.gov
vx3.lacounty.gov
trafficdocs2.isd.lacounty.gov
housing.lacounty.gov
*.ph.lacounty.gov
fire.lacounty.gov
PasswordReset.lacounty.gov
t2c.dcfs.lacounty.gov
fire.lacounty.gov
oarrs.lacounty.gov
assessorcalamity.lacounty.gov
epictapp.lacounty.gov
omg.dhs.lacounty.gov
ccmsuat.isd.lacounty.gov
ccjv.lacounty.gov
eec.lacounty.gov
rprstst.ttc.lacounty.gov
propertytax.lacounty.gov
ecmcontst01.isd.lacounty.gov
dow-expwayx1.isd.lacounty.gov
archives.lacounty.gov
eappeals.lacounty.gov
dcfspbigw.isd.lacounty.gov
pw.lacounty.gov
ceop.lacounty.gov
fire.lacounty.gov
mitchell.lacounty.gov
eprwebexttst.lacounty.gov
parks.lacounty.gov
my.dpss.lacounty.gov
isdcadivr.isd.lacounty.gov
reservations.lacounty.gov
mail.o365.lacounty.gov
faf.dcfs.lacounty.gov
isdtest.lacounty.gov
lacovss.lacounty.gov
apps4a.dcfs.lacounty.gov
Certificate
The complete raw certificate details for *.era.lacounty.gov in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGijCCBXKgAwIBAgIRAPnQY7Y002wb7O48yzS48cYwDQYJKoZIhvcNAQELBQAw VzELMAkGA1UEBhMCR0IxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDEuMCwGA1UE AxMlU2VjdGlnbyBTSEEtMjU2IE9WIFNlY3VyZSBTZXJ2ZXIgQ0EgMjAeFw0yMzA2 MjkwMDAwMDBaFw0yNDA2MjgyMzU5NTlaMF8xCzAJBgNVBAYTAlVTMRMwEQYDVQQI EwpDYWxpZm9ybmlhMR4wHAYDVQQKExVDb3VudHkgb2YgTG9zIEFuZ2VsZXMxGzAZ BgNVBAMMEiouZXJhLmxhY291bnR5LmdvdjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANa02qKBsaHxZigAe4QFaFnilA+wh1/kYlSKkUVhptikixMH2Wrd uqNO2+nwfTrTmwPXOx4atokq2Zpb0f8ha500cxcb8iDefb12p7BlPUInJdvrdqya uc+lZXFmLSkYwQGHfyePreHZs1RrTW2rZ07Hia1hFNI7tO41xYMNgP+/DzCaS0+5 JWW+1eSEqBp7KB+ukDcnGyBEpu71v+k40sLndsfqW3qni6PD7Q4DQ/b/T2lJy+ur Hg3C3BYp5fL0Md/PMnY23XnZqlFysOdI4jZt8obL4BUm+Idi/vuaZ+4Sz22g0dpE qQ9hqRw805NS2Ai3Zxn5YHunZ1GnGzy/PtkCAwEAAaOCA0cwggNDMB8GA1UdIwQY MBaAFAP3Ia7BbxmttHNSBBi6nz8ztW6mMB0GA1UdDgQWBBSqswU9d3TlOAez+6NH Kb6nobIIQzAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwSgYDVR0gBEMwQTA1BgwrBgEEAbIxAQIBAwQw JTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwCAYGZ4EMAQIC MEoGA1UdHwRDMEEwP6A9oDuGOWh0dHA6Ly9jcmwuc2VjdGlnby5jb20vU2VjdGln b1NIQTI1Nk9WU2VjdXJlU2VydmVyQ0EyLmNybDB6BggrBgEFBQcBAQRuMGwwRQYI KwYBBQUHMAKGOWh0dHA6Ly9jcnQuc2VjdGlnby5jb20vU2VjdGlnb1NIQTI1Nk9W U2VjdXJlU2VydmVyQ0EyLmNydDAjBggrBgEFBQcwAYYXaHR0cDovL29jc3Auc2Vj dGlnby5jb20wLwYDVR0RBCgwJoISKi5lcmEubGFjb3VudHkuZ292ghBlcmEubGFj b3VudHkuZ292MIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdgB2/4g/Crb7lVHC Ycz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYkIUf1YAAAEAwBHMEUCIE10ZnczeSwV 6YeJRb8Kcpsb6VpRbh8+zi6pGO/KhreaAiEAukdoMHifRg6fucCg9mJjDB0BIpRq h/jLZWFzZaUw5VAAdQDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAA AYkIUf28AAAEAwBGMEQCIBK99G1iIeQKL4DXDMgGx2ZKbhPcVchScno3QYwyadlW AiAzi60+as/370p1JK80VeTe2BO0nJ+zhyIg79pI0XRQdwB2AO7N0GTV2xrOxVy3 nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABiQhR/c0AAAQDAEcwRQIhAMP+BwmUPZkr 6YSIz5c0aIxP6xOBjM8lxXUoufdxBxhWAiAB5/drbnblFPafstEFiVCTwApx/zU0 uxkkHrWUiUe+xjANBgkqhkiG9w0BAQsFAAOCAQEAI2kOVUa5z9u+e/zDU/zYU1dU VRCOuboSaXmoPAPl3QzsEVyTG8KJleNn4BKe3JlJl5y2ZZsnlLiUkqWeys12gqsx frOjaBdLs/D5dro5isgQA85CNi1UiXYC+KjmDZkMyXkJb5KmOcp8QksgjtjSWX45 comOyp2CtiTVu2Uc0qdIaaX953U8NUZ7PL8h9bwp9pWemfLBZAvA0zwakdN574s3 D+mvxbCqBV6S5/p5TTKrGYoxTgpl22T0HmJC74lTfZbQzudGhwYQEEm+MEEtn5K4 pnM1cJJ6Qyr6FhmDkpukq5uOZnJve7EbomCICBqvIU5+XpF/BlkS6crArSCa+g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rTaooGxofFmKAB7hAVo WeKUD7CHX+RiVIqRRWGm2KSLEwfZat26o07b6fB9OtObA9c7Hhq2iSrZmlvR/yFr nTRzFxvyIN59vXansGU9Qicl2+t2rJq5z6VlcWYtKRjBAYd/J4+t4dmzVGtNbatn TseJrWEU0ju07jXFgw2A/78PMJpLT7klZb7V5ISoGnsoH66QNycbIESm7vW/6TjS wud2x+pbeqeLo8PtDgND9v9PaUnL66seDcLcFinl8vQx388ydjbdedmqUXKw50ji Nm3yhsvgFSb4h2L++5pn7hLPbaDR2kSpD2GpHDzTk1LYCLdnGflge6dnUacbPL8+ 2QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 332059791091444450000627234371421139398 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo SHA-256 OV Secure Server CA 2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-29 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-28 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'County of Los Angeles' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.era.lacounty.gov' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27104179714798281512538472429825635904206930422833556701107001902621666674348661160035535414076423867919349917334954035238700422191118282894508289324404129221103680706183693011174080350922490254150457949710532977296634333393439628650753972435926823952804349676763165248871233397506456186753219219117114057515923109349291392698743387421439613526570609953573403052106114946739935788774199348351079887048108995889572604835355374263895716699796322550544299828408887585180154460138624851786017581277583738485954907995774848450614338210952295643750058126054846723172617396468128114476472284209140888113035439417384603959001 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 03f721aec16f19adb473520418ba9f3f33b56ea6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) aab3053d7774e53807b3fba34729bea7a1b20843 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoSHA256OVSecureServerCA2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoSHA256OVSecureServerCA2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.era.lacounty.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'era.lacounty.gov' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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