san-a1.granicusgovaccess.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b6:67:ce:76:36:5e:8f:10:b8:7e:3b:a5:72:df:91:c1:2b was issued on by Let's Encrypt.

With 70 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san-a1.granicusgovaccess.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b6:67:ce:76:36:5e:8f:10:b8:7e:3b:a5:72:df:91:c1:2b
Serial Number (int): 323406231069242163352550402735153714676011
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c8:17:2e:42:59:6c:f3:5c:db:10:f4:eb:a7:70:44:aa:b2:55:e5:65
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6e:7a:bf:8d:42:e2:6f:9e:60:34:a0:da:8e:e2:b9:46:f1:41:9f:d4
Fingerprint (sha256): 06:b6:1d:48:21:7c:4c:18:77:ea:74:f2:9a:d6:cb:1d:48:81:40:ca:f5:a8:1d:ab:50:9a:b9:72:cb:de:0d:2e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate san-a1.granicusgovaccess.net

70

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-a1.granicusgovaccess.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

library.greensboro-nc.gov
san-a1.granicusgovaccess.net
www.abilenetx.gov
www.abington.org
www.ahteens.org
www.albanyca.org
www.albemarlenc.gov
www.applevalley.org
www.arcadiaca.gov
www.arlingtonma.gov
www.avondaleaz.gov
www.avondalelibrary.org
www.barstowca.org
www.bedfordcountyva.gov
www.beecavetexas.gov
www.belmont.gov
www.bendoregon.gov
www.berthoud.org
www.breckenridgegolfclub.com
www.breckenridgerecreation.com
www.breckfreeride.com
www.bullheadcity.com
www.burbankbus.org
www.burbankca.gov
www.burbankfire.us
www.calcasieulibrary.org
www.carson.org
www.carverlib.org
www.casscountynd.gov
www.cathedralcity.gov
www.chathamhealthalliancenc.org
www.chathamnc.org
www.chippewafalls-wi.gov
www.chulavistaca.gov
www.ci.agoura-hills.ca.us
www.ci.calistoga.ca.us
www.ci.claremont.ca.us
www.cityofamericancanyon.org
www.cityofames.org
www.cityofbaycity.org
www.cityofbell.org
www.cityofconroe.org
www.claycountygov.com
www.clearwatergas.com
www.clearwaterpolice.org
www.co.accomack.va.us
www.co.augusta.va.us
www.co.carver.mn.us
www.co.chippewa.wi.us
www.coachella.org
www.colliercountyfl.gov
www.colliersheriff.org
www.conyersga.com
www.coralsprings.org
www.coronaca.gov
www.cppj.net
www.crystallake.org
www.cyride.com
www.glendale.edu
www.greensboro-nc.gov
www.myclearwater.com
www.myclearwaterevents.com
www.myclearwaterlibrary.com
www.myclearwaterparks.com
www.sandy.utah.gov
www.sandyamp.com
www.sandynow.com
www.thecityofcolumbusms.org
www.townofbreckenridge.com
www.village.bartlett.il.us

Other certificates including the domain name granicusgovaccess.net

(limited to 100 certificates)
san-b1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-z1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net

Certificate

The complete raw certificate details for san-a1.granicusgovaccess.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvCun7TAO26vD+0poTA+
2qI68dWNVNEiJP65vdBdCBnDJ9sQvY/QceRWoPjSkbyRwHJUlH13POeXQoMeinfs
6xhgfnZuMEKOEX2unXj3xvuNpS2oO2os9k+R93w/Blzt5ZJYUTwjVRcX+F4qipAT
aFRRvsYzV3zrbMmqAhCUjErsxFbnAqZ+EAbMFwkT+q6aW4MZ+Sg9XndJtUbrhcqq
JNc3HsdEq4trA4GjclbuiC8EZtReV4NN7d3ezoNaD5X/WpnV9yZGvzp4DcXDAiz+
UTpg3W3eydop90g3Jxs/pImOnijy2SzgKm9kdadMxV4lM34j0jmoLrh81ZELUAqL
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323406231069242163352550402735153714676011
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-01 15:44:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-30 15:44:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-a1.granicusgovaccess.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24103962722545450527073535452909389591876289478913890172017562203895675497201586464477580338150811413229736530351140321294572275470847132172936904827227850531279533410415809885962541960683542799256015272273082371432629843726326068841144242852573635448396385534670985372701264834163397515221980182637775259377804313861013249522379565947058923881084713330332264848287372749665835713403361659133662729200776555828393728348467336316252102472094954759782142612913771066419303870849358408653739024005965383821120254204199913617477684920159597629148093749135996553920466611560534444768058795134872698782447791843265831668699
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c8172e42596cf35cdb10f4eba77044aab255e565
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1570 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'library.greensboro-nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-a1.granicusgovaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abilenetx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abington.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahteens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albanyca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albemarlenc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.applevalley.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arcadiaca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arlingtonma.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avondaleaz.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avondalelibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barstowca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bedfordcountyva.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beecavetexas.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belmont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bendoregon.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berthoud.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.breckenridgegolfclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.breckenridgerecreation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.breckfreeride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bullheadcity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.burbankbus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.burbankca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.burbankfire.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.calcasieulibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carverlib.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casscountynd.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cathedralcity.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chathamhealthalliancenc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chathamnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chippewafalls-wi.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chulavistaca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.agoura-hills.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.calistoga.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.claremont.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofamericancanyon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofames.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofbaycity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofbell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofconroe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.claycountygov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clearwatergas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clearwaterpolice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co.accomack.va.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co.augusta.va.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co.carver.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co.chippewa.wi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coachella.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colliercountyfl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colliersheriff.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conyersga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coralsprings.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coronaca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cppj.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crystallake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cyride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glendale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greensboro-nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myclearwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myclearwaterevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myclearwaterlibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myclearwaterparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandy.utah.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandyamp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandynow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecityofcolumbusms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townofbreckenridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.village.bartlett.il.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c4e1167e00000040300473045022100806d25b4021b078adaaf86f8c53fa848952c6bf73c2eaf18c253eaf94672c06b02200228a20d1d5ac5168b7c6f560e2e7fb0d8c3cdc408449c2d2a38679dc8e2e5f100760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c4e11680000000403004730450220026aaa263feed247d5e3101d9233729f2a16f7566631174e696fc1d5e2f08b7a022100afa932dd192ddbd4605f55eaa4d35cd501f412800af05f685a6fe51d6caeb50f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00260d1a9a0ef7d7b9d398e7ad535a48865377fc26abea88594e705aa96a3be1ee4a07c869c83eba7a9d594fc14365d823aaa0aaf9f37f248f222e0e5b97352621be904d7ceac2af020c8b543c658e5c4bef6ff5516c996eeff659f4f6124be476a63e88f9fd30d62029e9f84aaf99c9f0f8697117d39e424f234b31ba846222cfe9fa0fa626a8e70612e9d2d7804c7f57e81638bafcc11aff2d229de327b69871cdb33de7c8410652c1932b2dd724daf0bbbd597a3be085bc7bdd67c361ce31d0278a25f9e12ecd0bf457612dae08476ed39d807ffb37f0807a73b6dea7d9a62be115cc9377cb1f907ef349573f49e5483ff941d8d062df3ecab0f85d714416c9