san-e1.granicusgovaccess.net

Issued by R3

About this certificate

This digital certificate with serial number 03:f4:df:10:ba:ef:99:40:98:c5:b4:99:fd:4d:71:f4:6c:25 was issued on by Let's Encrypt.

With 66 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=san-e1.granicusgovaccess.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:f4:df:10:ba:ef:99:40:98:c5:b4:99:fd:4d:71:f4:6c:25
Serial Number (int): 344662260035310644241156432543975214443557
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 89:b5:97:96:4f:1b:14:11:52:a7:aa:f8:9a:6c:7e:e9:76:b1:4c:7a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 91:df:9a:d5:ea:80:9c:a6:78:5a:3f:ee:c8:97:26:54:36:3b:1f:b9
Fingerprint (sha256): 0f:d9:6e:8f:b1:97:42:32:54:59:a3:b3:2b:3a:18:e6:1a:a9:f9:22:19:d8:fd:d5:47:2c:f4:46:97:c7:60:22

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate san-e1.granicusgovaccess.net

66

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-e1.granicusgovaccess.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-e1.granicusgovaccess.net
training.ocdapa.org
visit.sierravistaaz.gov
www-e.weknowgovernment.com
www.adamscountyil.gov
www.athletics.mpc.edu
www.blacksburg.gov
www.bozeman.net
www.bozemanlibrary.org
www.brazoriacountyclerktx.gov
www.carolinabeach.org
www.centralbasin.org
www.charlescountymd.gov
www.charlescountyparks.com
www.chooselocustgrove.com
www.cityofdaytontx.com
www.cityofdelrio.com
www.cityofindianwells.org
www.cityoflaredo.com
www.cityofmartinsburg.org
www.cityoftyler.org
www.clarkecounty.gov
www.developgoodyearaz.com
www.edennc.us
www.ellwoodcityborough.com
www.flinttownship.org
www.fremontpolice.gov
www.galvestonvotes.org
www.goodyearaz.gov
www.hermosabeach.gov
www.hpboro.com
www.intranet.cityofcreedmoor.org
www.kcdhs.org
www.kerncounty.com
www.kerncountyemployees.com
www.kerncountyhealthbenefits.com
www.lexingtonva.gov
www.lincolncity.org
www.lith.org
www.locustgrove-ga.gov
www.manteonc.gov
www.maricopa-az.gov
www.mc-ala.org
www.miltonga.gov
www.minnetonkamn.gov
www.mofd.org
www.montgomeryprobatecourtal.gov
www.mpc.edu
www.mpcfoundation.org
www.newfairfield.org
www.newfairfieldlibrary.org
www.nkc.org
www.prairiepages.edenprairie.org
www.sckls.info
www.sedonaaz.gov
www.sierravistaaz.gov
www.sjcounty.net
www.skamaniacounty.org
www.sunriverowners.org
www.sunsetvalley.org
www.tylerareampo.org
www.village.homewood.il.us
www.visitlocustgrove.com
www.waxhaw.com
www.westonct.gov
www.wpb.org

Other certificates including the domain name granicusgovaccess.net

(limited to 100 certificates)
san-b1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-z1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net

Certificate

The complete raw certificate details for san-e1.granicusgovaccess.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvTpp+aj8ZLd9hyP04nm
4+dZKpAVebDX3tZrOsMVz+qm/sd3IWDepR3Af2t33aG11p0Rk9bvdzf68wvDpFvJ
W3PeI/gkm6CmozBMPQIQWOgSuWq1ipAoJKNK+HLjBiiGAAg39EdIrcWxPlv4Lv3N
CfR1u6FsPGhFlsSKWFJt6/eHKZmLTDTnwHUB/lVOzZ8xLqAunikMciGIFEYoiWxE
aUQzj4Rmzixb7aiH1WcN5P4grg7Wdeu6LLQAsgszIJOX2I+TUqfLaTfj5AjqzrNM
a5tqJoW7/YuWZb4gMCqnI+RoLimYPrKqahiEuGVk49MVdtLV3MlBuFhge5nVU2Ic
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344662260035310644241156432543975214443557
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-26 21:37:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-25 21:37:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-e1.granicusgovaccess.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23601095686234142693058277816018241235770867932293329862860845578088025138981030671347596558627190559277081345562020788261236264510270076723009779888573276269924492913906825235274394607242164366976261666748279693919960361480080114687221465057199935237197861056529404880285426262790211306709237688294866706720616668698060513111686138375535770604696700218373217137358349230785014338873745511293017981506738367644577325611015453985823118281342465883845990044697677358086838513364559726821488632754651112287898914866167486149464647242121919421204647741689992472952294768215263243793220140273626045805232189446496480009361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							89b597964f1b141152a7aaf89a6c7ee976b14c7a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1491 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-e1.granicusgovaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training.ocdapa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visit.sierravistaaz.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-e.weknowgovernment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adamscountyil.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athletics.mpc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blacksburg.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bozeman.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bozemanlibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brazoriacountyclerktx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carolinabeach.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralbasin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charlescountymd.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charlescountyparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chooselocustgrove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofdaytontx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofdelrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofindianwells.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityoflaredo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofmartinsburg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityoftyler.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clarkecounty.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.developgoodyearaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edennc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ellwoodcityborough.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flinttownship.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fremontpolice.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.galvestonvotes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodyearaz.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hermosabeach.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hpboro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intranet.cityofcreedmoor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kcdhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kerncounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kerncountyemployees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kerncountyhealthbenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lexingtonva.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lincolncity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lith.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.locustgrove-ga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manteonc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maricopa-az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mc-ala.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miltonga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minnetonkamn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mofd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.montgomeryprobatecourtal.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mpc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mpcfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newfairfield.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newfairfieldlibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nkc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prairiepages.edenprairie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sckls.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sedonaaz.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sierravistaaz.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjcounty.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skamaniacounty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunriverowners.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunsetvalley.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tylerareampo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.village.homewood.il.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitlocustgrove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waxhaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westonct.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wpb.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f1c8e0c3d0000040300483046022100fc1fa7ef9d13d38c36fd61d2776c3f1203973b0eaa3d9e3b794a5c768fbab92a022100c9f31d9e8124ebc285460187e5fbbda5ab6ace8d2039124bff3837d6601302d0007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f1c8e0ce900000403004630440220117b0e66c1e940d66815afadcae4e7fc7a18bd8dc463b2cd68675f324f6efec4022020767966ada26a88a6ce2547edf736bea4e65c1963d66cad5e985160c962cdce
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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