ssl-wg1.revizesites.com

Issued by R3

About this certificate

This digital certificate with serial number 04:b4:20:72:f3:2d:12:ae:d1:95:6e:07:25:77:e7:a2:c3:65 was issued on by Let's Encrypt.

With 56 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ssl-wg1.revizesites.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b4:20:72:f3:2d:12:ae:d1:95:6e:07:25:77:e7:a2:c3:65
Serial Number (int): 409743101922713483361683895151568913351525
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8e:6d:a4:82:9b:56:8c:91:4d:40:1d:79:e2:52:92:b0:e2:de:21:94
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7e:9f:56:32:a3:5f:bd:3c:7e:31:d1:e7:8c:7b:46:5d:98:02:ed:fc
Fingerprint (sha256): 10:91:92:43:d2:e3:d5:c7:dd:fd:62:69:5b:a7:33:0d:20:d4:6a:33:0d:7c:1a:e3:ff:9e:46:a6:15:80:6f:aa

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ssl-wg1.revizesites.com

56

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl-wg1.revizesites.com

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bataviaoh.gov
bataviavillage.org
bibblib.org
buffalotex.com
ci.victoria.mn.us
cityofcrosbyton.org
cityofhancockmn.com
cityofnewmanil.com
cityofutica.org
elko-cd.com
flatrockmi.org
haytiheightshousingauthority.com
hettingercountynd.com
mariontwpcvxmi.gov
merceroliver911em.com
morrisoncity.org
murchisontx.com
newfieldme.org
redcloudhousingauthority.com
richlandtownship.com
sainthedwigcity.com
southcountywater.com
southcountywater.org
ssl-wg1.revizesites.com
townofchocowinity.com
townofwagram.net
victoriamn.gov
villageofwaterman.com
www.bataviaoh.gov
www.bataviavillage.org
www.bibblib.org
www.buffalotex.com
www.ci.victoria.mn.us
www.cityofcrosbyton.org
www.cityofhancockmn.com
www.cityofnewmanil.com
www.cityofutica.org
www.elko-cd.com
www.flatrockmi.org
www.haytiheightshousingauthority.com
www.hettingercountynd.com
www.mariontwpcvxmi.gov
www.mcintyrega.com
www.merceroliver911em.com
www.morrisoncity.org
www.murchisontx.com
www.newfieldme.org
www.redcloudhousingauthority.com
www.richlandtownship.com
www.sainthedwigcity.com
www.southcountywater.com
www.southcountywater.org
www.townofchocowinity.com
www.townofwagram.net
www.victoriamn.gov
www.villageofwaterman.com

Other certificates including the domain name revizesites.com

(limited to 100 certificates)
ssl1.revizesites.com
ssl8.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl3.revizesites.com
ssl4.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl1.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl2.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl-wg1.revizesites.com
ssl2.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl9.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl1.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl9.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl7.revizesites.com
ssl9.revizesites.com
ssl8.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl2.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl1.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl9.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl2.revizesites.com
ssl7.revizesites.com
ssl1.revizesites.com
ssl7.revizesites.com
ssl-wg1.revizesites.com
ssl4.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl7.revizesites.com
ssl4.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl3.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com

Certificate

The complete raw certificate details for ssl-wg1.revizesites.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 409743101922713483361683895151568913351525
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-07 15:14:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-06 15:14:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl-wg1.revizesites.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3021279712787911422418649844705211959314733445073628334504934476700829780774810122929761130682981360132288629030012865773868148022505271153179869892041473415258923773562228361376891780185277154387513428806583383898892738742398831124022602401956195654735659693640851684961493492511586339455948881001718206376047519140118552456599946996646452593310394161147671426142754449907903739047993263302801177051583535721809190656633168834400460186986175670668144053302976529332803152442411305655623387062976627894190300827935771665123278960056762768796234642641381184697063377854704670701816137192461983138449409472255582898521752715576111416055954314695134220370177684245905412296279506576376154884884403351003056738002128144307033705856376174478765364069456943767620443694390622057178639305815241068691804354333404448581039024358240895285791957999069416697064893605411156370272604700557825917297009281537127937176154801245586277186199
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8e6da4829b568c914d401d79e25292b0e2de2194
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1235 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bataviaoh.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bataviavillage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibblib.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buffalotex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci.victoria.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofcrosbyton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofhancockmn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofnewmanil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofutica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elko-cd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flatrockmi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haytiheightshousingauthority.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hettingercountynd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mariontwpcvxmi.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merceroliver911em.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morrisoncity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'murchisontx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newfieldme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redcloudhousingauthority.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richlandtownship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sainthedwigcity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southcountywater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southcountywater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-wg1.revizesites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'townofchocowinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'townofwagram.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victoriamn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'villageofwaterman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bataviaoh.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bataviavillage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bibblib.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buffalotex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.victoria.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofcrosbyton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofhancockmn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofnewmanil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofutica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elko-cd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flatrockmi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haytiheightshousingauthority.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hettingercountynd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mariontwpcvxmi.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcintyrega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.merceroliver911em.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morrisoncity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.murchisontx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newfieldme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redcloudhousingauthority.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richlandtownship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sainthedwigcity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southcountywater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southcountywater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townofchocowinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townofwagram.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.victoriamn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.villageofwaterman.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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