ssl8.revizesites.com

Issued by R3

About this certificate

This digital certificate with serial number 04:01:4f:f6:d8:ba:99:23:4e:14:e7:54:69:f0:d9:55:c0:b3 was issued on by Let's Encrypt.

With 80 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ssl8.revizesites.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:01:4f:f6:d8:ba:99:23:4e:14:e7:54:69:f0:d9:55:c0:b3
Serial Number (int): 348895716806440439475565512159873492959411
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 00:e0:48:6b:ee:ae:76:b6:32:a1:45:8d:9b:cc:ee:b0:81:1b:91:48
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 47:21:9a:f9:28:d9:1c:11:7f:ba:94:cd:de:dd:31:de:fd:3c:63:74
Fingerprint (sha256): 0d:a0:28:0c:59:0a:03:1c:2b:4c:cd:e5:c1:06:bb:05:99:65:e1:3a:be:5c:e3:fd:c4:2a:7d:aa:b0:10:ec:fb

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ssl8.revizesites.com

80

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl8.revizesites.com

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

akronohio.gov
akronreach.org
burkecounty-ga.gov
ccrpc.org
cityofmontesano.com
cityofredding.gov
cityofredding.info
cityofredding.org
colmarmanor.org
fallriverma.gov
franklintownship.net
joinakronfire.com
lock3live.com
montrose-mn.com
navasotaedc.com
niskayuna.org
okanogantransit.com
ortonvillevillage.com
publicsafety.akronohio.gov
pullman-wa.gov
rabaride.com
reddingaquaticcenter.com
reddingart.org
reddingelectricutility.com
reddingfire.org
reddingmlkcenter.com
reddingparks.com
reddingpolice.com
reddingpolice.org
reddingrecreation.org
reddingsolidwaste.net
reddingtrails.com
reddingutilities.com
reupower.com
reupower.net
sharontownship.org
shastacreeks.com
ssl8.revizesites.com
wolfforthlibrary.org
wolfforthpd.org
wolfforthtx.us
www.akronohio.gov
www.akronreach.org
www.akronrecreationandparks.com
www.burkecounty-ga.gov
www.ccrpc.org
www.cityofmontesano.com
www.cityofredding.gov
www.cityofredding.info
www.cityofredding.org
www.colmarmanor.org
www.fallriverma.gov
www.franklintownship.net
www.lock3live.com
www.montrose-mn.com
www.navasotaedc.com
www.niskayuna.org
www.okanogantransit.com
www.ortonvillevillage.com
www.pullman-wa.gov
www.rabaride.com
www.reddingaquaticcenter.com
www.reddingart.org
www.reddingelectricutility.com
www.reddingfire.org
www.reddingmlkcenter.com
www.reddingparks.com
www.reddingpolice.com
www.reddingpolice.org
www.reddingrecreation.org
www.reddingsolidwaste.net
www.reddingtrails.com
www.reddingutilities.com
www.reupower.com
www.reupower.net
www.sharontownship.org
www.shastacreeks.com
www.wolfforthlibrary.org
www.wolfforthpd.org
www.wolfforthtx.us

Other certificates including the domain name revizesites.com

(limited to 100 certificates)
ssl1.revizesites.com
ssl8.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl3.revizesites.com
ssl4.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl1.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl2.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl-wg1.revizesites.com
ssl2.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl9.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl1.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl9.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl7.revizesites.com
ssl9.revizesites.com
ssl8.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl2.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl1.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl9.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl2.revizesites.com
ssl7.revizesites.com
ssl1.revizesites.com
ssl7.revizesites.com
ssl-wg1.revizesites.com
ssl4.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl7.revizesites.com
ssl4.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl3.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com

Certificate

The complete raw certificate details for ssl8.revizesites.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 348895716806440439475565512159873492959411
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-27 18:18:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-25 18:18:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl8.revizesites.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2931373836017556179875137219979659235715021917433341862194053499875006544969830026071705353849991015604747571831637572440151229134444017916061103692739698804593548665064374006175755773566490106153198448959104892004452840714766703862509669444331160324843948410491815541101892189749760137397437690698080265090558236994784775351306541345130174814303669808020715804212468726685517073532247352811347261088406636207222060668362993450979028081959169054665457519920175334907420380546173622870927178295976939117453390444499036226464837169783881242438282522777537401564204358022037196726618243368419435357131963107712915376577676914601053991665506344606450120460474379040694338492411214720639954179598198671111326775383240384542208495301354446761438140015034906385964834140009284305950532000686677405990355477837236431974038359027771298423353992637792192751674367952592610898255510468416768752839222761009232965692328828314788239882597
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							00e0486beeae76b632a1458d9bcceeb0811b9148
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1674 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akronohio.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akronreach.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burkecounty-ga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccrpc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofmontesano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofredding.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofredding.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofredding.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colmarmanor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fallriverma.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franklintownship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joinakronfire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lock3live.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montrose-mn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navasotaedc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niskayuna.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okanogantransit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ortonvillevillage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publicsafety.akronohio.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pullman-wa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rabaride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddingaquaticcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddingart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddingelectricutility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddingfire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddingmlkcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddingparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddingpolice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddingpolice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddingrecreation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddingsolidwaste.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddingtrails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddingutilities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reupower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reupower.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharontownship.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shastacreeks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl8.revizesites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wolfforthlibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wolfforthpd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wolfforthtx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akronohio.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akronreach.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akronrecreationandparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.burkecounty-ga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccrpc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofmontesano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofredding.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofredding.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofredding.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colmarmanor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fallriverma.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.franklintownship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lock3live.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.montrose-mn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.navasotaedc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.niskayuna.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.okanogantransit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ortonvillevillage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pullman-wa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rabaride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddingaquaticcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddingart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddingelectricutility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddingfire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddingmlkcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddingparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddingpolice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddingpolice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddingrecreation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddingsolidwaste.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddingtrails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddingutilities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reupower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reupower.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharontownship.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shastacreeks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wolfforthlibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wolfforthpd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wolfforthtx.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c1237d0010000040300473045022038651123b6d79ce3f94971bf1b6412216f093cd02fc18b5801b3562ad0e4c121022100c6db4cc7a7d4eb7297c195a6a950d7a3abf3d5aff3488e4fc4776b63fb033a69007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c1237d00c0000040300473045022100c31741689b54215db7a64cc4216368167c2ccec344cdb1e26868e8e694b715bd02203a99fa089f14bcc3fef3889792486f5af33bc33c1b24ed0b9a22547b55ef9fbf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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