ssl2.revizesites.com

Issued by R3

About this certificate

This digital certificate with serial number 03:22:27:b3:49:13:51:7f:d9:23:20:3e:b9:3c:7e:df:4a:2f was issued on by Let's Encrypt.

With 49 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ssl2.revizesites.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:22:27:b3:49:13:51:7f:d9:23:20:3e:b9:3c:7e:df:4a:2f
Serial Number (int): 272959229065712396149934260288790636481071
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 35:2d:88:f6:15:31:ed:59:3d:5d:c3:a3:69:8f:b2:77:b4:d7:c7:71
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 56:f3:76:c5:16:f8:af:25:2b:d1:60:0b:f1:8c:84:0d:3a:38:77:ce
Fingerprint (sha256): 0b:a7:5a:f0:88:d8:46:75:93:62:fc:74:32:2e:7c:c3:86:bc:d6:8b:74:d6:eb:6d:c9:50:71:e9:e2:b5:76:b5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ssl2.revizesites.com

49

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl2.revizesites.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aicw.org
albion-in.org
boynevalleytwp.org
butmantwp.com
cityofkewanee.com
co.forest.pa.us
co.hubbard.mn.us
collingswood.com
dauphincounty.org
eastbaytwp.org
freedomtownshipmi.org
hapb.org
krugerville.org
leeco.us
lincolnky.com
lincolnky.net
lincolnky.org
macssa.org
pay.wyandotte.net
pleasantontx.gov
ssl2.revizesites.com
town.cumberland.in.us
twp-freedom.org
willistonsquare.com
wsaf.wyandotte.net
www.aicw.org
www.albion-in.org
www.boynevalleytwp.org
www.butmantwp.com
www.cityofkewanee.com
www.co.forest.pa.us
www.co.hubbard.mn.us
www.collingswood.com
www.dauphincounty.org
www.eastbaytwp.org
www.freedomtownshipmi.org
www.hapb.org
www.krugerville.org
www.leeco.us
www.lincolnky.com
www.lincolnky.net
www.lincolnky.org
www.macssa.org
www.pleasantontx.gov
www.town.cumberland.in.us
www.twp-freedom.org
www.willistonsquare.com
www.wyandotte.net
wyandotte.net

Other certificates including the domain name revizesites.com

(limited to 100 certificates)
ssl1.revizesites.com
ssl8.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl3.revizesites.com
ssl4.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl1.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl2.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl-wg1.revizesites.com
ssl2.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl9.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl1.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl9.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl7.revizesites.com
ssl9.revizesites.com
ssl8.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl2.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl1.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl9.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl2.revizesites.com
ssl7.revizesites.com
ssl1.revizesites.com
ssl7.revizesites.com
ssl-wg1.revizesites.com
ssl4.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl7.revizesites.com
ssl4.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl3.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com

Certificate

The complete raw certificate details for ssl2.revizesites.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsjUUdn+9ohkcOm/bfSk
pa8Wk0xuqoCir+3a85u+UtBBrEqoMGC2CFymbwOjPc74Ubbw4Ml5NDMAAOOzryd8
68coluapdHm6Qvxj0OyLR6/lYAXfvkjuOEtzev5L2VF+zuQOVmtwA/i6kc35yTxU
qt/n6PZzM3ORVWOExOtDUZUiyR+CAbUSQmeurCwXglYjLbI4xpPkldFJMjLxUrKW
NGJH/+AT54TBETfLlrG22+841gpFxxN5hU8mzOXwsMiq/84HfPy1gFJl1UDjFVLk
nH8qbsgnWtryLVS3nZGwbVTSmbC1bW3JRLkJcezaavmI587/qnHSQsaKVlj6rMVY
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272959229065712396149934260288790636481071
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 12:15:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 12:15:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl2.revizesites.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17014965520746914638855971067136183013189627861477671315095395629328540973667396714496952815422328791488351846255693002175957917671053869620848358582389286680732063003950379218473424744837156461784747378036230383255519262790406269993656982517345123259990441690085826709016561448872755996274580965027878313653207025112162004963665347557587697913511496549943641918907639365578312804075862753792523743632145023662169970568022912880602178036969033213047905416260012280886299115982138138087370220224016413252893147377694171338045912406354066676874051382569974355113165693725133572837656289303316763305697397853475198818387
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							352d88f61531ed593d5dc3a3698fb277b4d7c771
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (913 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aicw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albion-in.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boynevalleytwp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'butmantwp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofkewanee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'co.forest.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'co.hubbard.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collingswood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dauphincounty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastbaytwp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedomtownshipmi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hapb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krugerville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leeco.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincolnky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincolnky.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincolnky.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macssa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay.wyandotte.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pleasantontx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl2.revizesites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'town.cumberland.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twp-freedom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willistonsquare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsaf.wyandotte.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aicw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albion-in.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boynevalleytwp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.butmantwp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofkewanee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co.forest.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co.hubbard.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collingswood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dauphincounty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastbaytwp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freedomtownshipmi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hapb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krugerville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leeco.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lincolnky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lincolnky.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lincolnky.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macssa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pleasantontx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.town.cumberland.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twp-freedom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.willistonsquare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wyandotte.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wyandotte.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e37f43eda000004030046304402204e6df9769dd6d05e91ebb9074ae6e9a82be122d9480fd6d1241f4a7569eb7ee50220417a7b0f1321cfd11c4a413af881156dfbf1f9cc45de389406457579c77af53a00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e37f43ec00000040300473045022100bb2007b7c3f684a90a076953234b42a8a2e170b6702000c66d6eb99216b53e4d0220451b26a179d4878d5c52be3e75c9ba511409c9ae0e3228964c0d74d10f0540ec
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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