san-d2.granicusgovaccess.net

Issued by R3

About this certificate

This digital certificate with serial number 03:22:9e:12:f7:1a:51:e2:d3:cd:e1:b7:f4:ef:97:74:15:e0 was issued on by Let's Encrypt.

With 66 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san-d2.granicusgovaccess.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:22:9e:12:f7:1a:51:e2:d3:cd:e1:b7:f4:ef:97:74:15:e0
Serial Number (int): 273116574767110564863023954732394472543712
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b1:d9:36:ed:c2:4c:1a:c8:65:51:38:be:14:cb:a4:b8:38:ca:60:73
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0b:66:25:67:6f:f1:bd:09:f3:f0:51:5a:7f:51:22:9f:48:59:92:42
Fingerprint (sha256): 08:bb:8f:40:a3:27:ce:83:14:0a:74:6e:88:8e:e4:46:15:81:61:25:e6:98:9f:36:8f:a6:26:54:26:9c:f5:13

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate san-d2.granicusgovaccess.net

66

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-d2.granicusgovaccess.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

library.cityoflewisville.com
san-d2.granicusgovaccess.net
www.casitaswater.org
www.centennialwater.org
www.city.fortbragg.com
www.cityofdanville.org
www.cityofdavis.org
www.cityofhernando.org
www.cityofkaty.com
www.cityoflewisville.com
www.co.monterey.ca.us
www.co.portage.wi.us
www.colleyville.com
www.colleyvillelibrary.com
www.colleyvilleparksandrec.com
www.collinsvilleil.org
www.currycounty.org
www.dallas-lovefield.com
www.developpalmbay.org
www.eulesstx.gov
www.kcmo.gov
www.kcsmartsewer.us
www.kirkwoodelectric.org
www.kirkwoodmo.org
www.kirkwoodparksandrec.org
www.lewisvillegrand.com
www.lewisvillethrive.com
www.lexedu.org
www.lexingtonnc.gov
www.llela.org
www.mendocinocounty.org
www.mendolibrary.org
www.mercercounty.org
www.meridian.mi.us
www.mountrainiermd.org
www.mypalmbeachclerk.com
www.northaugustasc.gov
www.norwalk.org
www.novato.org
www.oakcreekwi.gov
www.ocsan.gov
www.okc.gov
www.olathelibrary.org
www.orbgdpu.com
www.palmbayflorida.org
www.palmspringsca.gov
www.pcbfl.gov
www.pccsk12.com
www.pinecrest-fl.gov
www.pinecrestgardens.org
www.playlewisville.com
www.rd.hawaiicounty.gov
www.richmondtx.gov
www.ridedmt.org
www.ryeny.gov
www.sanjoseca.gov
www.schev.edu
www.siouxlanddistricthealth.org
www.sjeconomy.com
www.spacecoasttpo.com
www.sswd.org
www.sunrisefl.gov
www.taylorsvilleut.gov
www.visitlewisville.com
www.weehawken-nj.us
www.westportct.gov

Other certificates including the domain name granicusgovaccess.net

(limited to 100 certificates)
san-b1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-z1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net

Certificate

The complete raw certificate details for san-d2.granicusgovaccess.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzONLpSO8fvavMd1SLI6G
JLwLBGFJUiqZOP6DEhcnvTCoi5YfNr+xOa2BbB2w43cioDYR/f+VsKzLMKnNStCR
IjFZ5tHvpmCj0dwYqgrkPPewe2ZIJ0Pagl8+qrubqRAHjrqbZ1ZX4CxBRn+MLEaV
qmRDmJXaAQwYym+0Iz6xSgmz+YOUBhd5zTmBYbk4XDIN/PcKxZOx6nOKdDj4Y5TJ
FiHVAxCEXijt54PFX3n7AbYHE6VUNINRk+AmY+14VrpoVOBySlLWTnaNL10QuiR2
u6UmhPQGH7zXJyqfOCBPfoUYhc0KreaV3HS0ZzJC5HE3g8kUFVlzT3PQ0BTfidYz
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273116574767110564863023954732394472543712
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-24 19:46:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-22 19:46:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-d2.granicusgovaccess.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25864697795907218036733606600744207599485784759018452835522214921975987235979552141786937808007784719775969496747642268816822107349030358673326174067227479273300163557181331023839533902085154678537720819452448666232160763908576980943860998603649280736157804832033313204803892874188324178705986159576982440699342896394183591500911220808287014005881257671121849285572932058716523342658455115670830859064746405254887255882318647819250157638844632175038739278338960111844428630608890569090136495009052394530539138297101790736739150146100506505407049746013478922748156840662578354079736546587360537083500974598051788633017
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b1d936edc24c1ac8655138be14cba4b838ca6073
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1446 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'library.cityoflewisville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-d2.granicusgovaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casitaswater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centennialwater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.city.fortbragg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofdanville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofdavis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofhernando.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofkaty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityoflewisville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co.monterey.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co.portage.wi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colleyville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colleyvillelibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colleyvilleparksandrec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collinsvilleil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.currycounty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dallas-lovefield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.developpalmbay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eulesstx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kcmo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kcsmartsewer.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kirkwoodelectric.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kirkwoodmo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kirkwoodparksandrec.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lewisvillegrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lewisvillethrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lexedu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lexingtonnc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.llela.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendocinocounty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendolibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercercounty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meridian.mi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountrainiermd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mypalmbeachclerk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northaugustasc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norwalk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novato.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oakcreekwi.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ocsan.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.okc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olathelibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orbgdpu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.palmbayflorida.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.palmspringsca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcbfl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pccsk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pinecrest-fl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pinecrestgardens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playlewisville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rd.hawaiicounty.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richmondtx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ridedmt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ryeny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanjoseca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schev.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.siouxlanddistricthealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjeconomy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spacecoasttpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sswd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunrisefl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taylorsvilleut.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitlewisville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weehawken-nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westportct.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187155f8bb500000403004630440220246b5ed2f8ba394587d82406825ad66e300d15b04af4da16298cbb572596d06302204142d64ecccb48b9ef13c6156bc1d675ce4088f8a47f67acb948c438ca977e37007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000187155f8bde0000040300463044022054ccc88695227f5e231157e74f13f23632a9cdc82e5fc448e9153cb48b542dbe02203733784219ecd0196ebbbbd405b1cd0b5159192f3fa8f2966ffa851a69b07dfa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00636cbfbe519bfd8cced8c88c053614236cf31b2225126fb6743e2d071118f29374f91c747ff159cc46ac3c4b2eb7af12d9978e7f2fca2db6085eb2a7052696114dfff99788f00850e3f00407703c62a60d0f3edb594fda633ccfd0581874acd19e932e3a23d341076deb894ce92658d98d9f2ff486e7f8e2f134ee13e54c653e147ad3d53173b914623721c955098f45f09159868d3d36c6c472693240ab92d6c6fffacbf38017978d23ad88c583ea8957ffedbbe5cde586c57696dccb0c7d837460a859ad1dc91f82350058d3d594df11c4e623b647e049ea70127472aa89bbf2c752be05d2a98225676d96805744a77a1d02c87efde11282c204a42ae1e0c5