san-e2.granicusgovaccess.net

Issued by R3

About this certificate

This digital certificate with serial number 04:c6:79:b8:62:ad:17:6a:cf:9e:a3:08:80:9f:12:95:da:8f was issued on by Let's Encrypt.

With 64 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=san-e2.granicusgovaccess.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c6:79:b8:62:ad:17:6a:cf:9e:a3:08:80:9f:12:95:da:8f
Serial Number (int): 415986846348888608135799177883737535142543
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 59:d7:17:ea:b3:4d:89:b4:80:07:2d:f8:12:d6:6a:33:ec:cc:ae:ac
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 90:69:5a:91:87:95:c8:29:6e:37:99:da:eb:05:af:9c:c1:65:79:17
Fingerprint (sha256): 0f:cf:0d:0a:bc:48:8f:b9:f8:4e:50:be:31:00:7f:9b:e2:c4:b1:0e:22:2f:11:42:af:85:32:e5:5e:9a:bb:fd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate san-e2.granicusgovaccess.net

64

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-e2.granicusgovaccess.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

citycouncil.atlantaga.gov
comnet.cityofmerced.org
gyr.fortlauderdale.gov
intranet.fremont.gov
san-e2.granicusgovaccess.net
www.albanycounty.com
www.atlantafirerescue.com
www.atlantaga.gov
www.atlantapd.org
www.blendontwp.org
www.brokenarrowok.gov
www.chanhassenmn.gov
www.cityofbartow.net
www.cityofcaseyil.org
www.cityofcashmere.org
www.cityofhialeahgardens.com
www.cityoflacrosse.org
www.cityofmerced.org
www.cityoforting.org
www.cityofsavage.com
www.cityofseward.us
www.clerkofcourt.maricopa.gov
www.colusasutteryolochildsupport.org
www.cottonwoodheights.utah.gov
www.crane-transit.com
www.destinationelsegundo.com
www.douglasvilleconferencecenter.com
www.douglasvillega.gov
www.ed3online.org
www.elsegundo.org
www.elsegundobusiness.com
www.elsegundofd.org
www.elsegundolibrary.org
www.elsegundopd.org
www.elsegundorecparks.org
www.explorecharlescounty.com
www.falconheights.org
www.fay-nccrimestoppers.org
www.fayettevillenc.gov
www.fcpr.us
www.flpd.org
www.flyfay.com
www.flyfxe.com
www.fortlauderdale.gov
www.fremont.gov
www.gillettewy.gov
www.lemont.il.us
www.leonianj.gov
www.longboatkey.org
www.lovevail.org
www.lyonco.org
www.montgomerysheriff.com
www.mundelein.org
www.ncletc.org
www.operationceasefire.com
www.prairiecenter.org
www.reevescounty.org
www.rentershelpline.org
www.smfd.org
www.sunriversharc.com
www.sweetwatertx.gov
www.tdpud.org
www.villageofschaumburg.com
www.vopnc.org

Other certificates including the domain name granicusgovaccess.net

(limited to 100 certificates)
san-b1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-z1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-d1.granicusgovaccess.net

Certificate

The complete raw certificate details for san-e2.granicusgovaccess.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz09y+IZKHV4Il9VcPrqv
GpP+J2dHzs+qoOHa3BM94EJKXHuq9Y1n8WELjXGOnlPSKlah1+MeVLsBUu6ltWIB
RBSLBO1wNDrDHTYwjs6MPXaesrqFYiR6DePL1TXkQRLi/IOb0ImvHtXvuL9zHCMS
qR3GyMOWUcWCHzkBKjKmkIaXieK50JU2rRmB7MdLPhOfynyxSZ7fhRMbYpj3bANJ
Fh8hfAaRctj4+hanuh2kkGK5Pis0hDx2ML7R2zotCrKO9mfs20Ej0tLWjKJ8qI7Z
5ti6K5Pg1Hjb5ZyJ6eG7R93WJQ8RdpC04g//CvtN3tnPlAWq5iIMfuEzHCoVd64i
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 415986846348888608135799177883737535142543
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-27 17:59:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 17:59:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-e2.granicusgovaccess.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26170506941670911474248298096244101975305975018606015646881829490977812930335582932965137685902233940639501617857039765514353169928335033465020705261666239695093253961495337151257015608300875755768666477698978477289696917519659892078419804906631267963933882865634413133463933591196786769147707255512791840734826840762068612125001854541512535074880456502408909882558012248406296374598837932132314813989765684160006883956640451472495703846813139733756620703455601215327236582176417848153155620969309876342782475551123880652361761933659965848021886397517937221074187982151466023346468647002504934910453731454045658161793
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							59d717eab34d89b480072df812d66a33ecccaeac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1465 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citycouncil.atlantaga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comnet.cityofmerced.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gyr.fortlauderdale.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.fremont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-e2.granicusgovaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albanycounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlantafirerescue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlantaga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlantapd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blendontwp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brokenarrowok.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chanhassenmn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofbartow.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofcaseyil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofcashmere.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofhialeahgardens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityoflacrosse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofmerced.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityoforting.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofsavage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofseward.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clerkofcourt.maricopa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colusasutteryolochildsupport.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cottonwoodheights.utah.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crane-transit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.destinationelsegundo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.douglasvilleconferencecenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.douglasvillega.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ed3online.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elsegundo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elsegundobusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elsegundofd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elsegundolibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elsegundopd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elsegundorecparks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorecharlescounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.falconheights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fay-nccrimestoppers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fayettevillenc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fcpr.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flpd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flyfay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flyfxe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fortlauderdale.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fremont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gillettewy.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lemont.il.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leonianj.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.longboatkey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lovevail.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lyonco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.montgomerysheriff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mundelein.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncletc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.operationceasefire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prairiecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reevescounty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rentershelpline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smfd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunriversharc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sweetwatertx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tdpud.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.villageofschaumburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vopnc.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b7281dc1e00000403004730450221008e0d75f3cc6475544257993f58f4a66e42c9ae4689dd6028ac5eaf918efa2d4d0220266ca41de5bb1f92d65a48c093907ffc238598ba8cf3c4dfa63780486ce7455b0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b7281dc0300000403004730450220162222f483ce1bc66e935a5e21d9286391e5c9539bbfd8e16dc1308255960365022100e47b7964351c693ac8bf0f26faf2aa4787882dec0abd2d67110aebc00ca5c1a0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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