san-c1.granicusgovaccess.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3e:0e:c9:91:dc:51:bc:d7:a8:3c:32:2e:40:84:1b:b5:60 was issued on by Let's Encrypt.

With 60 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san-c1.granicusgovaccess.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3e:0e:c9:91:dc:51:bc:d7:a8:3c:32:2e:40:84:1b:b5:60
Serial Number (int): 282454020346393363862067078742359037162848
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ea:4c:27:88:a0:ab:af:36:85:c2:9b:81:62:00:4a:d2:37:63:b4:06
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3c:b0:69:df:7e:04:d1:ac:e1:da:38:eb:86:10:d3:cb:a1:67:50:15
Fingerprint (sha256): 07:7e:5f:26:c7:47:cf:1f:26:cd:a9:22:0c:10:c3:6e:8a:f5:99:d8:5c:9a:01:dd:49:0d:04:f6:1e:c1:66:26

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate san-c1.granicusgovaccess.net

60

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-c1.granicusgovaccess.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

airport.albanyga.gov
downtown.albanyga.gov
econdev.laquintaca.gov
san-c1.granicusgovaccess.net
tax.columbiacountyga.gov
www.albanyga.gov
www.amadorgov.org
www.appleton.org
www.appomattoxcountyva.gov
www.buckeyeaz.gov
www.centervilleohio.gov
www.cgcounty.org
www.ci.janesville.wi.us
www.cityofcaldwell.org
www.cityofcreedmoor.org
www.cityofevanston.org
www.cityofglendora.org
www.claytoncountyga.gov
www.claytonmo.gov
www.co.dodge.wi.gov
www.co.fresno.ca.us
www.columbiacountyga.gov
www.columbiacountyso.org
www.cor.net
www.costamesaca.gov
www.culvercity.org
www.culvercitypd.org
www.cupertino.org
www.dallascountyiowa.gov
www.delraybeachfl.gov
www.eastvaleca.gov
www.eauclairewi.gov
www.edenprairie.org
www.elarc.org
www.epasd.com
www.fbchhs.org
www.fcva.us
www.fortbendcountytx.gov
www.franklinohio.org
www.franklintn.gov
www.gaithersburgmd.gov
www.garden-city.org
www.gardencity-ga.gov
www.gardnerkansas.gov
www.garnernc.gov
www.garrettparkmd.gov
www.gcappreventioncouncil.org
www.gcpolice.org
www.growbuckeye.com
www.growgaithersburg.com
www.growjanesville.com
www.laquintaca.gov
www.letsplaysarasota.com
www.masoncityassessor.net
www.nradc.com
www.portofeverett.com
www.richardsonpolice.net
www.townofblowingrocknc.gov
www.townofchapelhill.org
www.weknowgovernment.com

Other certificates including the domain name granicusgovaccess.net

(limited to 100 certificates)
san-b1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-z1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net

Certificate

The complete raw certificate details for san-c1.granicusgovaccess.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3b6S/BV7OPQrc7k2OM8d
xgsf8XgbGQGHrlnJEctmpz/VBllOPGPNsQDAGsbVdCKkyq1uoAwZTfUSzB+LOsUD
ZPqPcMHgTXPOoAwDnsnuNvu5d0uVi92R4LtA3YH9OCfE1Gc56P4+/Xk5/Yotitad
BggA2RSom+wQwSsukAlxvi7YFC0O3IKytcgDCfP7DOdTEPTIHq9YgIXUAsdTvnhT
fBPgOCQpQXJQvb7jFaEgSGuYwmSdMOQPYLJ5fnc/4oOot05wvZ9Al56gcE4qKiu+
/nCt5QfKEbBCTZSXKGH7r4YkGv86zetKiyMtTKnq3R2exRXgNpfe557+Pq+qzCz1
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282454020346393363862067078742359037162848
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 23:11:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-02 23:11:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-c1.granicusgovaccess.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27992641017818838910597633807916733149925638769088514436055606144378966850623545893649438642118402877888300565085117536988507743311590489717448732396127141241191029797039919675374177046024246973171163724287494375050904217696450809687868088758057230652574789835171622042951795368091208774934363733096297589884380878901045173234114208193931609174207069770081023642106130278149894463829111141428336578344421182679475393327991126282227887367217497880525060347273629513022941635911241409346617903242005204197532299817213898243390772440267563871811148799541020794631648043451783268816934906123555544544028053573951313212689
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ea4c2788a0abaf3685c29b8162004ad23763b406
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1337 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airport.albanyga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downtown.albanyga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'econdev.laquintaca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-c1.granicusgovaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tax.columbiacountyga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albanyga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amadorgov.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.appleton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.appomattoxcountyva.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buckeyeaz.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centervilleohio.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cgcounty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.janesville.wi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofcaldwell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofcreedmoor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofevanston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofglendora.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.claytoncountyga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.claytonmo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co.dodge.wi.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co.fresno.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiacountyga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbiacountyso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cor.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.costamesaca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.culvercity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.culvercitypd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cupertino.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dallascountyiowa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.delraybeachfl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastvaleca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eauclairewi.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edenprairie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elarc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epasd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fbchhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fcva.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fortbendcountytx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.franklinohio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.franklintn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gaithersburgmd.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garden-city.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gardencity-ga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gardnerkansas.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garnernc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garrettparkmd.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gcappreventioncouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gcpolice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.growbuckeye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.growgaithersburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.growjanesville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laquintaca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.letsplaysarasota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masoncityassessor.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nradc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portofeverett.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richardsonpolice.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townofblowingrocknc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townofchapelhill.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weknowgovernment.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170a808295d0000040300483046022100d47642ed54e125d2bef347a33946bd7c917fbea1666f7ce519d7b55db177e4c8022100dd33c81f4815c8e314d9c45842b456a941c6ce5e6f9f5b38b96fa1db0d707c8000750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170a808298000000403004630440220101f97ebec285fec5b6dd0f93852d9bff20f9dbd26ff529b7fe296a48be45e7902201cacd0ed0c0c6448066f592c15e9824199620a88258b23ec880732a451d0e3dc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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