san-f2.granicusgovaccess.net

Issued by R3

About this certificate

This digital certificate with serial number 03:2b:f4:ed:59:98:38:98:56:81:a1:43:6e:39:6c:92:d4:97 was issued on by Let's Encrypt.

With 63 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san-f2.granicusgovaccess.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2b:f4:ed:59:98:38:98:56:81:a1:43:6e:39:6c:92:d4:97
Serial Number (int): 276294563595402736848889488835464117015703
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bf:72:7c:90:f7:ed:0e:15:3f:50:8d:84:55:2d:90:66:4c:db:e2:f5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e7:d7:19:71:45:84:a8:9b:96:57:9e:84:e0:4c:20:89:84:bb:e0:82
Fingerprint (sha256): 09:5d:cc:02:84:49:b5:2b:59:04:7b:ac:9d:23:06:6f:c3:b9:24:cd:c7:df:f2:8d:2d:78:3f:0a:77:44:54:25

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate san-f2.granicusgovaccess.net

63

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-f2.granicusgovaccess.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

inet.cityofvacaville.com
intranet.fremontfire.gov
intranet.fremontpolice.gov
san-f2.granicusgovaccess.net
www.albemarle.org
www.campverde.az.gov
www.ci.commerce.ca.us
www.ci.vacaville.ca.us
www.cityofalachua.com
www.cityofcalabasas.com
www.cityofcommercepubliclibrary.org
www.cityofperris.org
www.cityofsanteeca.gov
www.cityofwalnut.org
www.cityofwinder.com
www.cocosheriff.org
www.cosb.us
www.edwarddufresnecommunitycenter.com
www.enablealbemarle.org
www.firedepartment.org
www.greenlightnc.com
www.kenmorewa.gov
www.liveoakcity.org
www.norco.ca.us
www.regionalflood.org
www.sandcity.org
www.santa-clarita.com
www.sausalito.gov
www.sausalitolibrary.org
www.scpparksandrec.com
www.sewallspoint.org
www.sharpsburgnc.com
www.silverthorne.org
www.sjcfire.org
www.stcharlesparish.gov
www.suttercounty.org
www.suttersheriff.org
www.suwanee.com
www.tasin.org
www.tcwd.ca.gov
www.tecumsehok.org
www.tempe.gov
www.tempecenterforthearts.com
www.tempepubliclibrary.org
www.thatcher.az.gov
www.townhall.westwood.ma.us
www.townofwestspringfield.org
www.trio-us.org
www.villagesussex.org
www.wallawallapubliclibrary.org
www.wallawallawa.gov
www.warrencountynjveterans.com
www.warrencountyvotes.com
www.washingtoncountyar.gov
www.wdm.iowa.gov
www.west192.org
www.westcovina.org
www.westwoodpd.org
www.wilson-co.com
www.wilsoncountync.gov
www.wilsonnc.org
www.wsps.org
www.yucca-valley.org

Other certificates including the domain name granicusgovaccess.net

(limited to 100 certificates)
san-b1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-z1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net

Certificate

The complete raw certificate details for san-f2.granicusgovaccess.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0s5851lxvnFQVUaGJesi
/sm2TEnmUK8sxP18pk2KNq49tYMb+ka2yAeMZu9b9I8nMdP0rKTCSuEi4zNjdxcb
+inL6qLbbWNUUtVYeMh4SmYbJ264bEaA6SB6w3X2l6zNPVbCatZibp66TQuUtM+q
pW1H6LgLY+FH0pu+WOnndrl5/zyKzBC0loIovo40wD9WE61vhEhM3fOkTUF3aaMm
zlZ2yCQs6hw3NAQgGPf51MSptv389DTkJ+vUveFhOtc8cFJYMmxlpSvv3JHzQ8Vi
cO+mMxGrFBQE8L8dCsMFaEytDiPkz4TGtfG01TmPiDJX3CUS0kww9jMg/j7zEF5S
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 276294563595402736848889488835464117015703
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-11 21:11:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-09 21:11:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-f2.granicusgovaccess.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26611867023877298703892730333666207182983823266216397508315556719367973759577481730376745698232728143239796943605708400097077370335347341261477344555380256937287613915079208425307858525978938609672989514043224131189850977427483145048496500958452057034667652007626794583944575287996414418298611157299801838564984567502808996710202104663412760608773658394793820553685932125032071013934322672497830571490283390619746415034297029957364974893104846669073615782148019201623248661992076918354938008449373316565987546132198804724202738219850182885608870402717665663054879607432392545015338064640885868555550370086800076985063
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bf727c90f7ed0e153f508d84552d90664cdbe2f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1442 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inet.cityofvacaville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.fremontfire.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.fremontpolice.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-f2.granicusgovaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albemarle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campverde.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.commerce.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.vacaville.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofalachua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofcalabasas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofcommercepubliclibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofperris.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofsanteeca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofwalnut.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofwinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cocosheriff.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cosb.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edwarddufresnecommunitycenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enablealbemarle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firedepartment.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenlightnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kenmorewa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liveoakcity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norco.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regionalflood.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandcity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santa-clarita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sausalito.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sausalitolibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scpparksandrec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sewallspoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharpsburgnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.silverthorne.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjcfire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcharlesparish.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suttercounty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suttersheriff.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suwanee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tasin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tcwd.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tecumsehok.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tempe.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tempecenterforthearts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tempepubliclibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thatcher.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townhall.westwood.ma.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townofwestspringfield.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trio-us.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.villagesussex.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wallawallapubliclibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wallawallawa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warrencountynjveterans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warrencountyvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.washingtoncountyar.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wdm.iowa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.west192.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westcovina.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westwoodpd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wilson-co.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wilsoncountync.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wilsonnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wsps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yucca-valley.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017f7b091023000004030046304402200ac960b13e902aed0837f32cfecce2426d1bcf262bd64fb3c798d0a19b28203d02203cd92ebcb24d727f5a4bc2872c74fba03a3c432664d8d1224250aeece195916000770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017f7b09104e0000040300483046022100fac35276877f3ba35a60622028690c1197acb7257b549981a2a15e1af31b2d80022100f0e3adeb1d1d439a930120d9c4b71c70873298181f6bddf021adb7e48ade5994
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006f61629c5cff4435296390b1a31b9fd21ad1a1769820003e42c06f44d33efd61839b85a264a1cc99d4ea86b609f35b67ee89b171b851c11ff27f6d69d15f099b7be751f08c06760d4985df4073930e86ac0d7d4f06500790b6455fa37f04ba0e3f518b3391f712e5d5924191cd34f174211354b404fa5fc07f3e80624c69c3345334a24b181c38f2875f3c6afdf550894e9c9ed5bce867a543cd6f1f01c754465d016919e22e0d51fd88d8eac8bf2938f51919a955b61760f972fa799730e5561e95338ada3014d85eba732c4f0788f2c76389612f9cb0bff35e7b6fd57d8975965c42e8573fd4b789c136ca5eb2ea283a9fa34c30d581b7ebfa8765a7e2a8bd