ssl4.revizesites.com

Issued by R3

About this certificate

This digital certificate with serial number 04:1a:bd:21:f4:32:82:c1:95:a3:5d:fb:ba:11:79:31:6b:ce was issued on by Let's Encrypt.

With 79 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ssl4.revizesites.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1a:bd:21:f4:32:82:c1:95:a3:5d:fb:ba:11:79:31:6b:ce
Serial Number (int): 357547885656894885883160857091940608469966
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c5:8d:42:da:a3:fd:70:8d:75:7e:78:f6:8a:e3:4c:14:8e:76:64:ce
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6d:d6:ad:42:fd:61:38:e3:23:53:2f:08:fe:b3:c6:df:e1:d8:29:18
Fingerprint (sha256): 0c:e3:77:d0:5d:76:de:08:0e:d5:10:a1:2a:15:9f:b5:df:bc:6b:5b:2b:d4:02:d6:e4:f0:d5:c5:ff:5e:4b:d9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ssl4.revizesites.com

79

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl4.revizesites.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

911.ingham.org
ac.ingham.org
cc.ingham.org
cdn.live4.revize.com
ce.ingham.org
ci.sedro-woolley.wa.us
cl.ingham.org
cm.ingham.org
co.ingham.org
co.pickens.sc.us
covha.com
covid19.franklincountyny.gov
dc.ingham.org
dentcountymissouri.com
dentcountymo.com
dp.ingham.org
dr.ingham.org
drain.ingham.org
dtdl.org
dv.ingham.org
emergency.ingham.org
eq.ingham.org
fc.ingham.org
fp.ingham.org
franklincony.org
franklincountyny.gov
fs.ingham.org
hc.ingham.org
ic911.ingham.org
it.ingham.org
ja.ingham.org
leonvalleytexas.gov
msu.ingham.org
orionparks.com
pa.ingham.org
pafsu.ingham.org
parks.ingham.org
pd.ingham.org
penfield.org
penfieldlibrary.org
penfieldrec.org
penfieldtv.org
pk.ingham.org
pr.ingham.org
probate.ingham.org
rc.ingham.org
rd.ingham.org
roads.ingham.org
s-wcity.net
salemmissouri.com
salemmo.com
sedro-woolley.gov
sh.ingham.org
sheriff.ingham.org
southelgin.com
ssl4.revizesites.com
stpete.org
tr.ingham.org
wcchd.org
witness.ingham.org
www.ci.sedro-woolley.wa.us
www.co.pickens.sc.us
www.covha.com
www.dentcountymissouri.com
www.dentcountymo.com
www.dtdl.org
www.leonvalleytexas.gov
www.orionparks.com
www.penfield.org
www.penfieldlibrary.org
www.penfieldrec.org
www.penfieldtv.org
www.salemmissouri.com
www.salemmo.com
www.sedro-woolley.gov
www.southelgin.com
www.stpete.org
www.wcchd.org
yc.ingham.org

Other certificates including the domain name revizesites.com

(limited to 100 certificates)
ssl1.revizesites.com
ssl8.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl3.revizesites.com
ssl4.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl1.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl2.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl-wg1.revizesites.com
ssl2.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl9.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl1.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl9.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl7.revizesites.com
ssl9.revizesites.com
ssl8.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl2.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl1.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl9.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl2.revizesites.com
ssl7.revizesites.com
ssl1.revizesites.com
ssl7.revizesites.com
ssl-wg1.revizesites.com
ssl4.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl7.revizesites.com
ssl4.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl3.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com

Certificate

The complete raw certificate details for ssl4.revizesites.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfNJhs1UFq+dc/HY4aMp
WuPmawxGYgUYwhD+XMYqXLxIr9oAnqwxptOLFodmIW2D86JRtOcHeTH8WM2IDxVD
kNJmSsrXqhu8yLM6uKkym8TVHIIIQ0AYF9AjREoCsydKVsd3KjhYYD0q1bv5qYn3
SJuIiMhK4/5Elwmm7FGyAlTlqnc8Da2z5rgdNZVEcuE/2Zbye22dN6GqiE+oxg8p
eEdQVFKrTdBRY47RRTUAwl0FXC0pUVzBvGKcparOUw+uqaOJVItL8inRA4IA8MQf
HumSp8qbI+TVkIgTWuO6cW+y5YYrDCLKCGSv3VETDjWtRzJufxiUVBda9dgoYaH8
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 357547885656894885883160857091940608469966
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-12 16:25:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-12 16:24:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl4.revizesites.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18929476836075646704849250792507463207746174914976449267560854354186305427530627782568364183429640083474434294558576544982366515475287307532540905814509786687083025475428493009128400732518458456311849691505564422124024331940889994620093700036910574227793745549396195678442586393596930195373241113743751169819790476503511382734265922883045848050173199027465895669209892936000488717732557119125458954192717088128893445968959587162603599327751162319492459360906241642279384644382701955346886244246615667855994852143524580660916992444216437543301183453185155398506923768377270203709941310479830637688514926929192180382847
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c58d42daa3fd708d757e78f68ae34c148e7664ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1397 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '911.ingham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ac.ingham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cc.ingham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.live4.revize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ce.ingham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci.sedro-woolley.wa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cl.ingham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cm.ingham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'co.ingham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'co.pickens.sc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covid19.franklincountyny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dc.ingham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentcountymissouri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentcountymo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dp.ingham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr.ingham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drain.ingham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dtdl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dv.ingham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emergency.ingham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eq.ingham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fc.ingham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp.ingham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franklincony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franklincountyny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs.ingham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hc.ingham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ic911.ingham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.ingham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ja.ingham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leonvalleytexas.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msu.ingham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orionparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pa.ingham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pafsu.ingham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parks.ingham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pd.ingham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penfield.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penfieldlibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penfieldrec.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penfieldtv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pk.ingham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.ingham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'probate.ingham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rc.ingham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rd.ingham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roads.ingham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's-wcity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salemmissouri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salemmo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sedro-woolley.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sh.ingham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sheriff.ingham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southelgin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl4.revizesites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpete.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tr.ingham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcchd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'witness.ingham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.sedro-woolley.wa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co.pickens.sc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.covha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dentcountymissouri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dentcountymo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dtdl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leonvalleytexas.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orionparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.penfield.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.penfieldlibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.penfieldrec.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.penfieldtv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.salemmissouri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.salemmo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sedro-woolley.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southelgin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpete.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wcchd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yc.ingham.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017e4f524dff000004030047304502203d41aa0bda353eac51e3024e557cc04e772781f7d28fbfbf43dfb684644a7bbd0221008d1f58347bd9ddb1b759bdd75042aa7ce1b3647996b57c81346bc9be2f48defa0075002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017e4f524def0000040300463044022037892d01cc70c870c0a59fe179379a765d184fd8d1cc78c3a41bfa50c730d93c02205c514e2c0ce40d62eb1123e8f7ee36b70f2abc4483470e38f94ceb582794f41b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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