ssl8.revizesites.com

Issued by R3

About this certificate

This digital certificate with serial number 04:fd:63:6c:71:eb:3d:17:94:92:c0:29:63:a3:1c:3f:c5:12 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ssl8.revizesites.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:fd:63:6c:71:eb:3d:17:94:92:c0:29:63:a3:1c:3f:c5:12
Serial Number (int): 434672739208231656771531873116675387671826
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 44:9b:a1:e6:36:0a:aa:f2:a7:47:5a:62:78:3b:1f:38:02:d2:5a:68
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 90:bf:16:69:a5:75:8f:77:a9:90:43:61:af:98:d4:10:66:32:47:f5
Fingerprint (sha256): 0f:b1:2b:14:5b:cf:82:bb:fb:84:2b:c7:43:88:06:4a:49:14:3e:e1:57:02:3a:80:91:73:be:75:96:52:36:c2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ssl8.revizesites.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl8.revizesites.com

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

akronohio.gov
akronreach.org
burkecounty-ga.gov
ccrpc.org
cityofmontesano.com
cityofredding.gov
cityofredding.info
cityofredding.org
colmarmanor.org
desototexas.gov
fallriverma.gov
franklintownship.net
joinakronfire.com
lock3live.com
montrose-mn.com
navasotaedc.com
neill-lib.org
niskayuna.org
okanogantransit.com
ortonvillevillage.com
publicsafety.akronohio.gov
pullman-wa.gov
pullmanparksandrec.com
pullmanswims.com
pullmantransit.com
rabaride.com
reddingaquaticcenter.com
reddingart.org
reddingelectricutility.com
reddingfire.org
reddingmlkcenter.com
reddingparks.com
reddingpolice.com
reddingpolice.org
reddingrecreation.org
reddingsolidwaste.net
reddingtrails.com
reddingutilities.com
reupower.com
reupower.net
sharontownship.org
shastacreeks.com
ssl8.revizesites.com
wolfforthlibrary.org
wolfforthpd.org
wolfforthtx.us
www.akronohio.gov
www.akronreach.org
www.akronrecreationandparks.com
www.burkecounty-ga.gov
www.ccrpc.org
www.cityofmontesano.com
www.cityofredding.gov
www.cityofredding.info
www.cityofredding.org
www.colmarmanor.org
www.desototexas.gov
www.fallriverma.gov
www.franklintownship.net
www.lock3live.com
www.montrose-mn.com
www.navasotaedc.com
www.neill-lib.org
www.niskayuna.org
www.okanogantransit.com
www.ortonvillevillage.com
www.pullman-wa.gov
www.pullmanparksandrec.com
www.pullmanswims.com
www.pullmantransit.com
www.rabaride.com
www.reddingaquaticcenter.com
www.reddingart.org
www.reddingelectricutility.com
www.reddingfire.org
www.reddingmlkcenter.com
www.reddingparks.com
www.reddingpolice.com
www.reddingpolice.org
www.reddingrecreation.org
www.reddingsolidwaste.net
www.reddingtrails.com
www.reddingutilities.com
www.reupower.com
www.reupower.net
www.sharontownship.org
www.shastacreeks.com
www.wolfforthlibrary.org
www.wolfforthpd.org
www.wolfforthtx.us

Other certificates including the domain name revizesites.com

(limited to 100 certificates)
ssl1.revizesites.com
ssl8.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl3.revizesites.com
ssl4.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl1.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl2.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl-wg1.revizesites.com
ssl2.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl9.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl1.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl9.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl7.revizesites.com
ssl9.revizesites.com
ssl8.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl2.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl1.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl9.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl2.revizesites.com
ssl7.revizesites.com
ssl1.revizesites.com
ssl7.revizesites.com
ssl-wg1.revizesites.com
ssl4.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl7.revizesites.com
ssl4.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl3.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com

Certificate

The complete raw certificate details for ssl8.revizesites.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 434672739208231656771531873116675387671826
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 15:29:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-04 15:29:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl8.revizesites.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3813473213581506661415715725838267314460646964433283483140981595813900067560670781037645047463958521490218495444395200942612330234653222554344570354039286936469918501084641720149694602357609601452336022768820233351012104499419589351067578461240620212307959804236977050256949943604919294221860313138833510954575855211336256422160651122153983596136099380468119937039645294293100806689283151722372150846673571179860530725908017888231224615001037847659082667239367927151082793436376898424438985183254822530258704194273210556213772303052453140390047506747048974333254567785432735867271861138019990040392418192886264319450500870505634675749823105299476203760676552204579913148746249363304169353189204266932947794504814139479698109966597948259723826510747691118822421742890771481575635519619951263527682366193991679112630120627054878961133856595046888529541144657026866627872925712640489089864742502752061174157088701559069783664271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							449ba1e6360aaaf2a7475a62783b1f3802d25a68
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1882 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akronohio.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akronreach.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burkecounty-ga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccrpc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofmontesano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofredding.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofredding.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofredding.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colmarmanor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desototexas.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fallriverma.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franklintownship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joinakronfire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lock3live.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montrose-mn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navasotaedc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neill-lib.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niskayuna.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okanogantransit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ortonvillevillage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publicsafety.akronohio.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pullman-wa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pullmanparksandrec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pullmanswims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pullmantransit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rabaride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddingaquaticcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddingart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddingelectricutility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddingfire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddingmlkcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddingparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddingpolice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddingpolice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddingrecreation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddingsolidwaste.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddingtrails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddingutilities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reupower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reupower.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharontownship.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shastacreeks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl8.revizesites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wolfforthlibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wolfforthpd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wolfforthtx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akronohio.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akronreach.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akronrecreationandparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.burkecounty-ga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccrpc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofmontesano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofredding.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofredding.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofredding.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colmarmanor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.desototexas.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fallriverma.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.franklintownship.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lock3live.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.montrose-mn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.navasotaedc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neill-lib.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.niskayuna.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.okanogantransit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ortonvillevillage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pullman-wa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pullmanparksandrec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pullmanswims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pullmantransit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rabaride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddingaquaticcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddingart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddingelectricutility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddingfire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddingmlkcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddingparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddingpolice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddingpolice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddingrecreation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddingsolidwaste.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddingtrails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddingutilities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reupower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reupower.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharontownship.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shastacreeks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wolfforthlibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wolfforthpd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wolfforthtx.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c3ad083000000040300483046022100ad9f47a84c68d80b34a5015a94dedca8c1b58c61d1acdaadf858e0046349a73c02210087f3178d3637f7d45c3e5d38d243a59b6bf886ee0a70d733c7274925df93de15007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c3ad083220000040300463044022062d3f82a00740cb8c08bea7f08949862709f482ccd7a5c0bba8a2a6f08ae29360220120f7bd073b0779b8116417c0f66beca78403db36598c5176dfcbfbac5c1f929
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00415ecd8ba38ba7d5b018fcdccf1ca05cf69d38557366647f9cccfc3271149371fdec19be06ae6b32efb710cf6dc73293dc33ebd5321c8b7e4dff69522db8158c87698dace67776b94e6c3edfe16ed52fe6f5692958420c92e0690b09acf057cddf3b47b07d8ce27ef0e362250fd17e99263ce2c3942187fa5551779161806e6da09b7351b88622b1c11b51974066160c8693497f3378c98e6d807902a1e4deef85fa5e82128882f4a83f19407f4a83e6576a8583d2582dc89790b0066294e7026ef0e163e84fb3329a51799e3a4eb1a156aa3339663c45fb62eacb580f40536fd48c8574aee530c4950315d92fde66ee447b51eaaa0da3672de55d10c7220214