san-b2.granicusgovaccess.net

Issued by R3

About this certificate

This digital certificate with serial number 03:66:eb:00:c2:3c:11:b7:c9:a2:7f:66:45:fd:a0:b7:59:7c was issued on by Let's Encrypt.

With 66 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san-b2.granicusgovaccess.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:66:eb:00:c2:3c:11:b7:c9:a2:7f:66:45:fd:a0:b7:59:7c
Serial Number (int): 296358031739772554733333393668076606019964
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:44:a7:1e:fe:c4:dc:e2:ac:24:36:dd:b8:f8:dc:f2:05:e3:97:dc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9f:bc:25:eb:f4:05:24:b2:bf:28:b2:8d:eb:fd:97:90:c2:c0:83:98
Fingerprint (sha256): 10:35:98:51:3b:8c:6f:7c:15:50:51:11:02:5c:4e:ce:d2:bd:63:18:4c:e1:f5:a3:32:da:b1:5e:66:a7:5e:7d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate san-b2.granicusgovaccess.net

66

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-b2.granicusgovaccess.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

environmental.marionfl.org
insite.manhattanbeach.gov
intranet.mountprospect.org
library.pflugervilletx.gov
parks.marionfl.org
parks.pflugervilletx.gov
police.pflugervilletx.gov
san-b2.granicusgovaccess.net
selp.marionfl.org
utilitybilling.pflugervilletx.gov
www.allegancounty.org
www.bces.wa.gov
www.choose-newton.com
www.ci.millbrae.ca.us
www.cityoforoville.org
www.cityofpalmdesert.org
www.cityofranchocordova.org
www.cityofredding.org
www.cleanwaterteam.com
www.co.okeechobee.fl.us
www.experiencemountprospect.org
www.fairfield.ca.gov
www.ffpubliclibrary.org
www.funinmontgomery.com
www.hacm.org
www.louisville-library.org
www.lpacfl.com
www.marionflcoc.org
www.mayoclinichealthsystemeventcenter.com
www.mdaqmd.ca.gov
www.midvalecity.org
www.montgomeryal.gov
www.montgomeryzoo.com
www.mountprospect.org
www.nationalcityca.gov
www.newtonkansas.com
www.noaca.org
www.norfolkpubliclibrary.org
www.novatofire.org
www.nuecesco.com
www.ocalafl.org
www.ocalapd.com
www.ourpureh2o.com
www.outagamie.org
www.peachtreecornersga.gov
www.peoriaaz.gov
www.peoriaed.com
www.peoriasportscomplex.com
www.pflugervilletx.gov
www.plymouthmn.gov
www.portolavalley.net
www.poudre-fire.org
www.provo.org
www.pvkansas.com
www.queencreekaz.gov
www.ranchocordovapd.com
www.raymore.com
www.redmondoregon.gov
www.redwoodcity.org
www.reno.gov
www.richlandbusiness.com
www.robbinsdalemn.com
www.rockhillusa.com
www.rosamondcsd.com
www.villageofnorridge.com
www.visitpeoriaaz.com

Other certificates including the domain name granicusgovaccess.net

(limited to 100 certificates)
san-b1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-z1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net

Certificate

The complete raw certificate details for san-b2.granicusgovaccess.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3H6zqqZUmv0zA34OLRH
XqkMBDTUJSiMDggQ07qjG2wOLMIxMLUOc0S51It4kVSBCX9lW7ghPH9OTYR/7ym2
oK01oXu3wjktfHuilZpj5ncJMxm97RhlXP10yN6aL3P7xrpLnn/r3jyEaXv2L10U
f4/B3Yd8zSUikYo16SbnUfSjE6cVXIBDxWlRtyUE6hP8iJhLFleRtXbzW0l/HxwK
9vHLRhSn8qgzfYPfP+jE7hp5Bfy1y00VSEu+o+WTIsuOzN8bjk0m1TEtNtP7cmyF
bQk4i583xSisuiSDjiUh0WNBY3QFgh9lfsA7JGPx9xVvrwd2eX1rWaRTXlZnvrYO
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296358031739772554733333393668076606019964
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-15 18:39:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-13 18:39:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-b2.granicusgovaccess.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19623142762495750931854223738321582444894245565511706450128347749159723933077925473334775799419150672633943407865996988150802318217894132220001174082476463733056064729542111964096929643329445884024707428040776592712021025489975785457895674624165525513596051161108669099973285611437827589583703448267600924022123303131431834969094021789024122130254104596802805499681862778257366527413493950605469237820079392676461768473933539483584370079043170660438982418278437447701136377918748178330080320804788168941529299385575192532586828523394396912694765831827181278075771168396646893954471932322653282376120317461952204246619
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f44a71efec4dce2ac2436ddb8f8dcf205e397dc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1523 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'environmental.marionfl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insite.manhattanbeach.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.mountprospect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'library.pflugervilletx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parks.marionfl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parks.pflugervilletx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'police.pflugervilletx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-b2.granicusgovaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selp.marionfl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utilitybilling.pflugervilletx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allegancounty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bces.wa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.choose-newton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.millbrae.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityoforoville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofpalmdesert.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofranchocordova.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofredding.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cleanwaterteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co.okeechobee.fl.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.experiencemountprospect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fairfield.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ffpubliclibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.funinmontgomery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hacm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.louisville-library.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lpacfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marionflcoc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mayoclinichealthsystemeventcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mdaqmd.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.midvalecity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.montgomeryal.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.montgomeryzoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountprospect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationalcityca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newtonkansas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.noaca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norfolkpubliclibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novatofire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nuecesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ocalafl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ocalapd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourpureh2o.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.outagamie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peachtreecornersga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peoriaaz.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peoriaed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peoriasportscomplex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pflugervilletx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plymouthmn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portolavalley.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poudre-fire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.provo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pvkansas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.queencreekaz.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ranchocordovapd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raymore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redmondoregon.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redwoodcity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reno.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richlandbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robbinsdalemn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rockhillusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosamondcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.villageofnorridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitpeoriaaz.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017f8f176b200000040300473045022100d65aea09d7c64caff0e70e5bbd69331e046f8e7a889203d3db6446033efae23f02206b2d0992e1a374b4398f5cf87fb95ed3af8208778f31a44cc9bf1f6291982bb30075002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017f8f176b190000040300463044022072baafc11d22854e0cd35beba928fa22d549a44cca8f0fa22a4c6af259d820d902201228ece6224a9922fbe1923ac06a0addedc0356ce510de57e526d11087fe6b94
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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