ssl2.revizesites.com
Issued by R3
About this certificate
This digital certificate with serial number 03:22:27:b3:49:13:51:7f:d9:23:20:3e:b9:3c:7e:df:4a:2f was issued on by Let's Encrypt.
With 49 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=ssl2.revizesites.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:22:27:b3:49:13:51:7f:d9:23:20:3e:b9:3c:7e:df:4a:2fSerial Number (int): 272959229065712396149934260288790636481071
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 35:2d:88:f6:15:31:ed:59:3d:5d:c3:a3:69:8f:b2:77:b4:d7:c7:71
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 56:f3:76:c5:16:f8:af:25:2b:d1:60:0b:f1:8c:84:0d:3a:38:77:ce
Fingerprint (sha256): 0b:a7:5a:f0:88:d8:46:75:93:62:fc:74:32:2e:7c:c3:86:bc:d6:8b:74:d6:eb:6d:c9:50:71:e9:e2:b5:76:b5
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate ssl2.revizesites.com
49
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ssl2.revizesites.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
aicw.org
albion-in.org
boynevalleytwp.org
butmantwp.com
cityofkewanee.com
co.forest.pa.us
co.hubbard.mn.us
collingswood.com
dauphincounty.org
eastbaytwp.org
freedomtownshipmi.org
hapb.org
krugerville.org
leeco.us
lincolnky.com
lincolnky.net
lincolnky.org
macssa.org
pay.wyandotte.net
pleasantontx.gov
ssl2.revizesites.com
town.cumberland.in.us
twp-freedom.org
willistonsquare.com
wsaf.wyandotte.net
www.aicw.org
www.albion-in.org
www.boynevalleytwp.org
www.butmantwp.com
www.cityofkewanee.com
www.co.forest.pa.us
www.co.hubbard.mn.us
www.collingswood.com
www.dauphincounty.org
www.eastbaytwp.org
www.freedomtownshipmi.org
www.hapb.org
www.krugerville.org
www.leeco.us
www.lincolnky.com
www.lincolnky.net
www.lincolnky.org
www.macssa.org
www.pleasantontx.gov
www.town.cumberland.in.us
www.twp-freedom.org
www.willistonsquare.com
www.wyandotte.net
wyandotte.net
albion-in.org
boynevalleytwp.org
butmantwp.com
cityofkewanee.com
co.forest.pa.us
co.hubbard.mn.us
collingswood.com
dauphincounty.org
eastbaytwp.org
freedomtownshipmi.org
hapb.org
krugerville.org
leeco.us
lincolnky.com
lincolnky.net
lincolnky.org
macssa.org
pay.wyandotte.net
pleasantontx.gov
ssl2.revizesites.com
town.cumberland.in.us
twp-freedom.org
willistonsquare.com
wsaf.wyandotte.net
www.aicw.org
www.albion-in.org
www.boynevalleytwp.org
www.butmantwp.com
www.cityofkewanee.com
www.co.forest.pa.us
www.co.hubbard.mn.us
www.collingswood.com
www.dauphincounty.org
www.eastbaytwp.org
www.freedomtownshipmi.org
www.hapb.org
www.krugerville.org
www.leeco.us
www.lincolnky.com
www.lincolnky.net
www.lincolnky.org
www.macssa.org
www.pleasantontx.gov
www.town.cumberland.in.us
www.twp-freedom.org
www.willistonsquare.com
www.wyandotte.net
wyandotte.net
Other certificates including the domain name revizesites.com
(limited to 100 certificates)
ssl1.revizesites.com
ssl8.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl3.revizesites.com
ssl4.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl1.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl2.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl-wg1.revizesites.com
ssl2.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl9.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl1.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl9.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl7.revizesites.com
ssl9.revizesites.com
ssl8.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl2.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl1.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl9.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl2.revizesites.com
ssl7.revizesites.com
ssl1.revizesites.com
ssl7.revizesites.com
ssl-wg1.revizesites.com
ssl4.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl7.revizesites.com
ssl4.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl3.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl8.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl3.revizesites.com
ssl4.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl1.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl2.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl-wg1.revizesites.com
ssl2.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl9.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl1.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl9.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl7.revizesites.com
ssl9.revizesites.com
ssl8.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl2.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl1.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl9.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl2.revizesites.com
ssl7.revizesites.com
ssl1.revizesites.com
ssl7.revizesites.com
ssl-wg1.revizesites.com
ssl4.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl7.revizesites.com
ssl4.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl3.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
Certificate
The complete raw certificate details for ssl2.revizesites.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIcTCCB1mgAwIBAgISAyIns0kTUX/ZIyA+uTx+30ovMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAzMTMxMjE1MzdaFw0yNDA2MTExMjE1MzZaMB8xHTAbBgNVBAMT FHNzbDIucmV2aXplc2l0ZXMuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAhsjUUdn+9ohkcOm/bfSkpa8Wk0xuqoCir+3a85u+UtBBrEqoMGC2CFym bwOjPc74Ubbw4Ml5NDMAAOOzryd868coluapdHm6Qvxj0OyLR6/lYAXfvkjuOEtz ev5L2VF+zuQOVmtwA/i6kc35yTxUqt/n6PZzM3ORVWOExOtDUZUiyR+CAbUSQmeu rCwXglYjLbI4xpPkldFJMjLxUrKWNGJH/+AT54TBETfLlrG22+841gpFxxN5hU8m zOXwsMiq/84HfPy1gFJl1UDjFVLknH8qbsgnWtryLVS3nZGwbVTSmbC1bW3JRLkJ cezaavmI587/qnHSQsaKVlj6rMVYUwIDAQABo4IFkjCCBY4wDgYDVR0PAQH/BAQD AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBQ1LYj2FTHtWT1dw6Npj7J3tNfHcTAfBgNVHSMEGDAWgBQULrMX t1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0 dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVu Y3Iub3JnLzCCA5oGA1UdEQSCA5EwggONgghhaWN3Lm9yZ4INYWxiaW9uLWluLm9y Z4ISYm95bmV2YWxsZXl0d3Aub3Jngg1idXRtYW50d3AuY29tghFjaXR5b2ZrZXdh bmVlLmNvbYIPY28uZm9yZXN0LnBhLnVzghBjby5odWJiYXJkLm1uLnVzghBjb2xs aW5nc3dvb2QuY29tghFkYXVwaGluY291bnR5Lm9yZ4IOZWFzdGJheXR3cC5vcmeC FWZyZWVkb210b3duc2hpcG1pLm9yZ4IIaGFwYi5vcmeCD2tydWdlcnZpbGxlLm9y Z4IIbGVlY28udXOCDWxpbmNvbG5reS5jb22CDWxpbmNvbG5reS5uZXSCDWxpbmNv bG5reS5vcmeCCm1hY3NzYS5vcmeCEXBheS53eWFuZG90dGUubmV0ghBwbGVhc2Fu dG9udHguZ292ghRzc2wyLnJldml6ZXNpdGVzLmNvbYIVdG93bi5jdW1iZXJsYW5k LmluLnVzgg90d3AtZnJlZWRvbS5vcmeCE3dpbGxpc3RvbnNxdWFyZS5jb22CEndz YWYud3lhbmRvdHRlLm5ldIIMd3d3LmFpY3cub3JnghF3d3cuYWxiaW9uLWluLm9y Z4IWd3d3LmJveW5ldmFsbGV5dHdwLm9yZ4IRd3d3LmJ1dG1hbnR3cC5jb22CFXd3 dy5jaXR5b2ZrZXdhbmVlLmNvbYITd3d3LmNvLmZvcmVzdC5wYS51c4IUd3d3LmNv Lmh1YmJhcmQubW4udXOCFHd3dy5jb2xsaW5nc3dvb2QuY29tghV3d3cuZGF1cGhp bmNvdW50eS5vcmeCEnd3dy5lYXN0YmF5dHdwLm9yZ4IZd3d3LmZyZWVkb210b3du c2hpcG1pLm9yZ4IMd3d3LmhhcGIub3JnghN3d3cua3J1Z2VydmlsbGUub3Jnggx3 d3cubGVlY28udXOCEXd3dy5saW5jb2xua3kuY29tghF3d3cubGluY29sbmt5Lm5l dIIRd3d3LmxpbmNvbG5reS5vcmeCDnd3dy5tYWNzc2Eub3JnghR3d3cucGxlYXNh bnRvbnR4LmdvdoIZd3d3LnRvd24uY3VtYmVybGFuZC5pbi51c4ITd3d3LnR3cC1m cmVlZG9tLm9yZ4IXd3d3LndpbGxpc3RvbnNxdWFyZS5jb22CEXd3dy53eWFuZG90 dGUubmV0gg13eWFuZG90dGUubmV0MBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBAwYK KwYBBAHWeQIEAgSB9ASB8QDvAHUAouK/1h7eLy8HoNZObTen3GVDsMa1LqLat4r4 mm31F9gAAAGON/Q+2gAABAMARjBEAiBObfl2ndbQXpHruQdK5umoK+Ei2UgP1tEk H0p1aet+5QIgQXp7DxMhz9EcSkE6+IEVbfvx+cxF3jiUBkV1ecd69ToAdgBIsONr 2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY439D7AAAAEAwBHMEUCIQC7 IAe3w/aEqQoHaVMjS0KoouFwtnAgAMZtbrmSFrU+TQIgRRsmoXnUh41cUr4+dcm6 URQJya4OMiiWTA100Q8FQOwwDQYJKoZIhvcNAQELBQADggEBABHkcF62SYcSB5kK pv4u2wlwBHFEBQGcjHH99zR+JVJTrOqxoFqvCxO7IQGMEobR0DRoPNC3wVK3Cd/1 22R+9PseryxDIlwNllYS6fEB13V/757XgYTon+gDtXh7oqZjWN+xmiBdFah+U6pB WC2KFH9wEpmtMhlUDIJ15lrW6gwrwQQ735Cg9gpEA7TcRSghYuIbT8BoOReWNZWX cfDGrRMVlUSqNGGlS97bWLNjpZ2Bojn92LI1D8FXrVujbYfLZIEfPSu/Swsxl5Co 3h1wh9PtpcckVGpC2v4xfL6KVU4pe3vNFF3OK1cXcf6FHecAguHv6lniNITPqLy7 dufBpN0= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsjUUdn+9ohkcOm/bfSk pa8Wk0xuqoCir+3a85u+UtBBrEqoMGC2CFymbwOjPc74Ubbw4Ml5NDMAAOOzryd8 68coluapdHm6Qvxj0OyLR6/lYAXfvkjuOEtzev5L2VF+zuQOVmtwA/i6kc35yTxU qt/n6PZzM3ORVWOExOtDUZUiyR+CAbUSQmeurCwXglYjLbI4xpPkldFJMjLxUrKW NGJH/+AT54TBETfLlrG22+841gpFxxN5hU8mzOXwsMiq/84HfPy1gFJl1UDjFVLk nH8qbsgnWtryLVS3nZGwbVTSmbC1bW3JRLkJcezaavmI587/qnHSQsaKVlj6rMVY UwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 272959229065712396149934260288790636481071 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 12:15:37 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 12:15:36 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl2.revizesites.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17014965520746914638855971067136183013189627861477671315095395629328540973667396714496952815422328791488351846255693002175957917671053869620848358582389286680732063003950379218473424744837156461784747378036230383255519262790406269993656982517345123259990441690085826709016561448872755996274580965027878313653207025112162004963665347557587697913511496549943641918907639365578312804075862753792523743632145023662169970568022912880602178036969033213047905416260012280886299115982138138087370220224016413252893147377694171338045912406354066676874051382569974355113165693725133572837656289303316763305697397853475198818387 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 352d88f61531ed593d5dc3a3698fb277b4d7c771 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (913 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aicw.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albion-in.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boynevalleytwp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'butmantwp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofkewanee.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'co.forest.pa.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'co.hubbard.mn.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collingswood.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dauphincounty.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastbaytwp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedomtownshipmi.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hapb.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krugerville.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leeco.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincolnky.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincolnky.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincolnky.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macssa.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay.wyandotte.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pleasantontx.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl2.revizesites.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'town.cumberland.in.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twp-freedom.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willistonsquare.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsaf.wyandotte.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aicw.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albion-in.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boynevalleytwp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.butmantwp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofkewanee.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co.forest.pa.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co.hubbard.mn.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collingswood.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dauphincounty.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastbaytwp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freedomtownshipmi.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hapb.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krugerville.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leeco.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lincolnky.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lincolnky.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lincolnky.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macssa.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pleasantontx.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.town.cumberland.in.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twp-freedom.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.willistonsquare.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wyandotte.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wyandotte.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e37f43eda000004030046304402204e6df9769dd6d05e91ebb9074ae6e9a82be122d9480fd6d1241f4a7569eb7ee50220417a7b0f1321cfd11c4a413af881156dfbf1f9cc45de389406457579c77af53a00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e37f43ec00000040300473045022100bb2007b7c3f684a90a076953234b42a8a2e170b6702000c66d6eb99216b53e4d0220451b26a179d4878d5c52be3e75c9ba511409c9ae0e3228964c0d74d10f0540ec . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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