ssl-wg1.revizesites.com

Issued by R3

About this certificate

This digital certificate with serial number 03:ee:e4:47:ab:fd:ed:22:9c:82:cc:9b:7e:1a:39:8d:c4:dc was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ssl-wg1.revizesites.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ee:e4:47:ab:fd:ed:22:9c:82:cc:9b:7e:1a:39:8d:c4:dc
Serial Number (int): 342627497246990168166390585909871538717916
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ab:af:e9:79:df:a4:f4:70:d1:bd:a7:d5:5a:48:79:30:e4:1d:f0:06
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f4:e8:1e:e1:21:c7:19:89:a1:23:de:4e:b7:43:ae:b0:34:31:fc:25
Fingerprint (sha256): 0f:24:d9:7b:8c:40:bb:e5:80:35:91:b0:0a:55:a4:78:06:c0:b6:98:8f:29:79:97:ae:ef:46:f2:5b:68:71:73

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ssl-wg1.revizesites.com

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl-wg1.revizesites.com

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aidep.alea.gov
alicehousingauthority.us
aurorapubliclibrarymn.com
bronson-mi.com
cambridgetownship.net
cambridgetownshipmi.gov
cityoflometa.com
cityofolton.com
cityoftucumcari.com
cliffsideparknj.gov
communityservicesinc.org
cpseniorcenter.org
crittendencountyky.org
denvercitytexas.org
denvercitytx.us
eastcleveland.org
erinhousing.com
fayetteville.texas.gov
fayettevillecitytx.com
galesburgcity.org
gemcounty.org
humboldtcountyiowa.com
jchamo.org
kimberlyal.gov
kimberlyal.org
kinlochmo.org
lejpa.org
mbhaonline.org
mtpleasantha.com
pahokeehousing.org
pearisburg.org
pennfieldmi.gov
salemha.com
sciotocountyhealth.com
sersg.org
slopecountynd.gov
ssl-wg1.revizesites.com
sweenypolice.org
tennillehousing.org
townofpatrick.com
villageofpeck.com
villageofrichland.org
westcentralbiosolids.com
www.aidep.alea.gov
www.alicehousingauthority.us
www.aurorapubliclibrarymn.com
www.bronson-mi.com
www.cambridgetownship.net
www.cambridgetownshipmi.gov
www.cityoflometa.com
www.cityofolton.com
www.cityoftucumcari.com
www.cliffsideparknj.gov
www.communityservicesinc.org
www.cpseniorcenter.org
www.crittendencountyky.org
www.denvercitytexas.org
www.denvercitytx.us
www.eastcleveland.org
www.erinhousing.com
www.fayetteville.texas.gov
www.fayettevillecitytx.com
www.galesburgcity.org
www.gemcounty.org
www.humboldtcountyiowa.com
www.jchamo.org
www.kimberlyal.gov
www.kimberlyal.org
www.kinlochmo.org
www.lejpa.org
www.mbhaonline.org
www.mtpleasantha.com
www.nationalparknj.com
www.pahokeehousing.org
www.pearisburg.org
www.pennfieldmi.gov
www.salemha.com
www.sciotocountyhealth.com
www.slopecountynd.gov
www.sweenypolice.org
www.tennillehousing.org
www.townofpatrick.com
www.villageofpeck.com
www.villageofrichland.org
www.westcentralbiosolids.com
www.yalemi.us
yalemi.us

Other certificates including the domain name revizesites.com

(limited to 100 certificates)
ssl1.revizesites.com
ssl8.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl3.revizesites.com
ssl4.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl1.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl2.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl-wg1.revizesites.com
ssl2.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl9.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl1.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl9.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl7.revizesites.com
ssl9.revizesites.com
ssl8.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl2.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl1.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl9.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl2.revizesites.com
ssl7.revizesites.com
ssl1.revizesites.com
ssl7.revizesites.com
ssl-wg1.revizesites.com
ssl4.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl7.revizesites.com
ssl4.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl3.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com

Certificate

The complete raw certificate details for ssl-wg1.revizesites.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342627497246990168166390585909871538717916
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-28 13:06:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 13:06:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl-wg1.revizesites.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3247902653673329553929203706695371405025726561057377004012330702358297935629609554543988833928850711028085851345887008031897979491701287935943389234390542041248136875674883413828169653816760364844206074261229705901682310117059532140361529658816131757904733721108798988385100216947362627845243008264141827982197117337523573454162964895806129580885340656408131557877963940044002188104738897823350220606314349378509051396866764677393804972868997954571964308804068666945439002610151431579691686354307525848760614287011631194774460918026382930475738354988352351697408842433575736348338599159806150116742732910702756033188149547656393508638988074596208348063020260184568242058688992294048890045073414070356325068640952243564246392463487518184383483955974116520801493775256189219553080883495983024265806895510751192768410183943336395963305871573286985744045967268690581170347407213930321118679697334350523486803300911218466827078181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							abafe979dfa4f470d1bda7d55a487930e41df006
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1852 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aidep.alea.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alicehousingauthority.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurorapubliclibrarymn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bronson-mi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambridgetownship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambridgetownshipmi.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityoflometa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofolton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityoftucumcari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliffsideparknj.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communityservicesinc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpseniorcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crittendencountyky.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denvercitytexas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denvercitytx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastcleveland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erinhousing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fayetteville.texas.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fayettevillecitytx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galesburgcity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gemcounty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humboldtcountyiowa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jchamo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kimberlyal.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kimberlyal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinlochmo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lejpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbhaonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtpleasantha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pahokeehousing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pearisburg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennfieldmi.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salemha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sciotocountyhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sersg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slopecountynd.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-wg1.revizesites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sweenypolice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tennillehousing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'townofpatrick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'villageofpeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'villageofrichland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westcentralbiosolids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aidep.alea.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alicehousingauthority.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aurorapubliclibrarymn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bronson-mi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cambridgetownship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cambridgetownshipmi.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityoflometa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofolton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityoftucumcari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cliffsideparknj.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communityservicesinc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpseniorcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crittendencountyky.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.denvercitytexas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.denvercitytx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastcleveland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.erinhousing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fayetteville.texas.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fayettevillecitytx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.galesburgcity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gemcounty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.humboldtcountyiowa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jchamo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kimberlyal.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kimberlyal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kinlochmo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lejpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbhaonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtpleasantha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationalparknj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pahokeehousing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pearisburg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennfieldmi.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.salemha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sciotocountyhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slopecountynd.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sweenypolice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tennillehousing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townofpatrick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.villageofpeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.villageofrichland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westcentralbiosolids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yalemi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yalemi.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cb0bf38210000040300463044022061309a079e3b42e43c91068a432511c9ec7723e349bb421609aa781eaca10eb102202f8354b92c202fbfe54e4d2835e8e676d8895fde853ae4c5b5704dd9503aafba00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018cb0bf38fe00000403004730450220500b707ebeef48cb967079076bbbe01cf6e07df1e193ab02fe4c6c8fe7a0dd56022100f5a903305774863516ba3cd2806a74ecc2dbde15529676ebc13eaf471bd3bec1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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