san-c2.granicusgovaccess.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:4a:9b:24:95:3c:04:37:af:35:ff:82:14:d2:ae:07:e4:c4 was issued on by Let's Encrypt.

With 76 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san-c2.granicusgovaccess.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4a:9b:24:95:3c:04:37:af:35:ff:82:14:d2:ae:07:e4:c4
Serial Number (int): 373836259168058028050204377000141646193860
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1d:cf:f3:ed:a9:06:90:76:ba:e4:2a:e3:82:55:45:71:6f:10:25:e4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e6:42:1e:34:86:0b:e6:a4:b0:91:5a:bc:c6:ad:2c:58:9a:60:05:f0
Fingerprint (sha256): 0a:0b:2f:82:c5:76:eb:54:b4:ff:5b:69:67:76:af:04:a2:ba:82:d1:73:cf:16:05:72:e3:6d:6e:07:c5:a2:50

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate san-c2.granicusgovaccess.net

76

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-c2.granicusgovaccess.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amw.amarillo.gov
business.westerville.org
comdev.amarillo.gov
intranet.westerville.org
parks.westerville.org
san-c2.granicusgovaccess.net
www.amarillo.gov
www.amarillociviccenter.com
www.amarillolibrary.org
www.amarilloparks.org
www.bedfordgallery.org
www.bobbyjonesgolfclub.com
www.choosekingman.com
www.ci.hercules.ca.us
www.cityofkingman.gov
www.cityofpsl.com
www.cityofsancarlos.org
www.cityofvista.com
www.cityofwasilla.com
www.cityofwestland.com
www.communityarts.org
www.fly-ama.com
www.hanover-township.org
www.hastingsmn.gov
www.henderson-county.com
www.hernandocounty.us
www.hoffmanestates.org
www.hvilletn.org
www.industrybusinesscouncil.org
www.kershaw.sc.gov
www.kissimmee.org
www.lbcwd.org
www.leesburgva.gov
www.leydentownship.com
www.lovelafayette.org
www.maderacounty.com
www.moonlightstage.com
www.newark.org
www.panhandletickets.com
www.pearlandtx.gov
www.playgolfamarillo.com
www.ptrc.org
www.rltaylor.com
www.rochestermn.gov
www.rplmn.org
www.sanfordfl.gov
www.sarasotafl.gov
www.sarasotapd.org
www.smith-county.com
www.srqauditorium.com
www.thewavewaterpark.com
www.townofmorrisville.org
www.townofyountville.com
www.tpchd.org
www.unioncityga.org
www.usd383.org
www.venicegov.com
www.vhcc.edu
www.walnut-creek.org
www.waterone.org
www.weho.org
www.wenatcheewa.gov
www.westchesteroh.org
www.westernvawater.org
www.westerville.org
www.westonfl.org
www.westwendovercity.com
www.williamsburgva.gov
www.wilmingtonde.gov
www.wilmingtonnc.gov
www.wixomgov.org
www.yeswilliamsburg.com
www.yolocounty.org
www.yonkersny.gov
www.yumacountyaz.gov
www.yvwd.dst.ca.us

Other certificates including the domain name granicusgovaccess.net

(limited to 100 certificates)
san-b1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-z1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net

Certificate

The complete raw certificate details for san-c2.granicusgovaccess.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1axnH4YTIcmLTahNObot
MxB/jPv7dBY1apwHg8NowznEacw+pMmIZzgGnC+Zo6Qur8llOrT0v/C3T0aaEqbT
fTbjgb4tOPUphPzG0c2GDIkILaU8fDs3GA7n10V14MkkkYz0UN9fqaVGslA5Gnc4
7XNoPgt6iTMaFbaOM66qFqyiaoUHM60+wX45EBAAIMb1gIGuBCuLjbsEZyyaFmsZ
UdDFXHcGldKmlCa74mz+q3LcDjEQ010bUi2pGxCMow5xq0qcijFBKUUY2AgDvg3l
x+0kfwZcA+QtMonBZFKVOutqNChIsUD5YR/9bKXBj1PnoIUSOw4SdzlDv8kakv8x
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 373836259168058028050204377000141646193860
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-10 16:44:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-08 16:44:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-c2.granicusgovaccess.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26973773959214080097016608966444300063267672024243654757793632450444256906802628566561242131154157780756843733584928646154827959223776873339370519567924751218969317650893317879767750725393040706956449928814211305566736220253344669716374911215604872758485800101509597010948542677930239081366546208475473216174855240477614422964455600225100585162905824709349518720910128800581361405908178074091843527814767713693086644832571394414245793969162068509813157034532407677877233581397383671636248870055896873810893125076280289805813622803821335055277978296585782170828985441874998643740505953357896419878555476126388008726853
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1dcff3eda9069076bae42ae3825545716f1025e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1656 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amw.amarillo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.westerville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comdev.amarillo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.westerville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parks.westerville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-c2.granicusgovaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amarillo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amarillociviccenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amarillolibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amarilloparks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bedfordgallery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bobbyjonesgolfclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.choosekingman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.hercules.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofkingman.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofpsl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofsancarlos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofvista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofwasilla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofwestland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communityarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fly-ama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hanover-township.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hastingsmn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.henderson-county.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hernandocounty.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoffmanestates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hvilletn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.industrybusinesscouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kershaw.sc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kissimmee.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lbcwd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leesburgva.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leydentownship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lovelafayette.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maderacounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moonlightstage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newark.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.panhandletickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pearlandtx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playgolfamarillo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ptrc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rltaylor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochestermn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rplmn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanfordfl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sarasotafl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sarasotapd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smith-county.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.srqauditorium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thewavewaterpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townofmorrisville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townofyountville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tpchd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unioncityga.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usd383.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.venicegov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vhcc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walnut-creek.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waterone.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weho.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wenatcheewa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westchesteroh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westernvawater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westerville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westonfl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westwendovercity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.williamsburgva.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wilmingtonde.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wilmingtonnc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wixomgov.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yeswilliamsburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yolocounty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yonkersny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yumacountyaz.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yvwd.dst.ca.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016bdcfc2e43000004030047304502203012b002f87618a7ffe51b772b22e92b9da2609152416d096079fc493fdecd4e022100f6297c9085202ff93488fdbd8554e2c738b01792ea0ac409ea4beb72656a23ee007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016bdcfc2e250000040300473045022100bbd51822710a4299fd9cc9e5b1f105608e62b59ae24133458fa5e1bae7072e8d02205a08b09d2a8a0cbc44cf3cdab5a316256ba3a4278ab84006a24f3b88b3c5314e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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