san-d2.granicusgovaccess.net
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:cb:82:35:2e:7e:75:18:af:a4:52:ac:03:5d:9f:0d:6d:4f was issued on by Let's Encrypt.
With 48 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=san-d2.granicusgovaccess.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:cb:82:35:2e:7e:75:18:af:a4:52:ac:03:5d:9f:0d:6d:4fSerial Number (int): 417699539986186865913490722185806596631887
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 0a:9b:e4:72:e4:12:02:96:ca:72:82:34:b1:ba:6b:93:eb:b6:5b:33
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 8e:6a:02:d4:35:74:00:0f:9c:c0:24:bb:13:b6:f1:fe:e5:46:45:17
Fingerprint (sha256): 13:ad:b9:66:2e:b1:b7:3d:86:f5:9c:6a:3f:a9:39:23:d8:9f:95:01:d9:bd:a0:fe:8a:6b:6a:bb:d3:d5:74:08
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate san-d2.granicusgovaccess.net
48
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for san-d2.granicusgovaccess.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
inet.cityofvacaville.com
san-d2.granicusgovaccess.net
www.ci.vacaville.ca.us
www.cityofhernando.org
www.cityofwalnut.org
www.cityofwinder.com
www.co.monterey.ca.us
www.co.portage.wi.us
www.co.washington.ar.us
www.collinsvilleil.org
www.currycounty.org
www.dallas-lovefield.com
www.developpalmbay.org
www.edwarddufresnecommunitycenter.com
www.kirkwoodelectric.org
www.kirkwoodmo.org
www.kirkwoodparksandrec.org
www.lexingtonnc.gov
www.mypalmbeachclerk.com
www.oakcreekwi.org
www.ocsd.com
www.okc.gov
www.orbgdpu.com
www.palmbayflorida.org
www.palmspringsca.gov
www.pcbgov.com
www.pinecrest-fl.gov
www.pinecrestgardens.org
www.richmondtx.gov
www.ryeny.gov
www.santa-clarita.com
www.scpparksandrec.com
www.sharpsburgnc.com
www.silverthorne.org
www.sswd.org
www.stcharlesparish-la.gov
www.suncitygrand.com
www.suwanee.com
www.tasin.org
www.tcwd.ca.gov
www.townofwestspringfield.org
www.trio-us.org
www.victoriatx.org
www.wdm.iowa.gov
www.westcovina.org
www.westportct.gov
www.wilson-co.com
www.wsps.org
san-d2.granicusgovaccess.net
www.ci.vacaville.ca.us
www.cityofhernando.org
www.cityofwalnut.org
www.cityofwinder.com
www.co.monterey.ca.us
www.co.portage.wi.us
www.co.washington.ar.us
www.collinsvilleil.org
www.currycounty.org
www.dallas-lovefield.com
www.developpalmbay.org
www.edwarddufresnecommunitycenter.com
www.kirkwoodelectric.org
www.kirkwoodmo.org
www.kirkwoodparksandrec.org
www.lexingtonnc.gov
www.mypalmbeachclerk.com
www.oakcreekwi.org
www.ocsd.com
www.okc.gov
www.orbgdpu.com
www.palmbayflorida.org
www.palmspringsca.gov
www.pcbgov.com
www.pinecrest-fl.gov
www.pinecrestgardens.org
www.richmondtx.gov
www.ryeny.gov
www.santa-clarita.com
www.scpparksandrec.com
www.sharpsburgnc.com
www.silverthorne.org
www.sswd.org
www.stcharlesparish-la.gov
www.suncitygrand.com
www.suwanee.com
www.tasin.org
www.tcwd.ca.gov
www.townofwestspringfield.org
www.trio-us.org
www.victoriatx.org
www.wdm.iowa.gov
www.westcovina.org
www.westportct.gov
www.wilson-co.com
www.wsps.org
Other certificates including the domain name granicusgovaccess.net
(limited to 100 certificates)
san-b1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-z1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-z1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
Certificate
The complete raw certificate details for san-d2.granicusgovaccess.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJcDCCCFigAwIBAgISBMuCNS5+dRivpFKsA12fDW1PMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MDUyMDM1MTZaFw0x OTA5MDMyMDM1MTZaMCcxJTAjBgNVBAMTHHNhbi1kMi5ncmFuaWN1c2dvdmFjY2Vz cy5uZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaQlZAkMnsqcaL Bt0VG9695K0sIhjUXTziomZJOjBbmXLKM9fqNLKrjkBXXFNrHXxaLxS+6d+cpppX NvW3Q2fLpjghn9xNtZ2NlYNO2TAi1FIRLXMD+ksQHKmvtLH51iHdGJR/tj3SdPRW z29kVbV29OWI/j65RQjJ9l7hAtojpGG1pimkKQXfbb4k7ln3eibuXHWLwbxnyIC5 WXwfyd660ROgDbXKeqD+5aAD5CtnQQdzg2nuXo1yMY6qAoqTag1/mx2a1ExXc8Qc rwKJ93v6DH+pR+kts5S57YdWihT+Ogok5cFBP61+1ALYeRYW2G8r7JVfW+iLUx3v /hjMFgdJAgMBAAGjggZxMIIGbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFAqb5HLk EgKWynKCNLG6a5PrtlszMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wggQkBgNVHREEggQbMIIEF4IYaW5ldC5jaXR5b2Z2 YWNhdmlsbGUuY29tghxzYW4tZDIuZ3JhbmljdXNnb3ZhY2Nlc3MubmV0ghZ3d3cu Y2kudmFjYXZpbGxlLmNhLnVzghZ3d3cuY2l0eW9maGVybmFuZG8ub3JnghR3d3cu Y2l0eW9md2FsbnV0Lm9yZ4IUd3d3LmNpdHlvZndpbmRlci5jb22CFXd3dy5jby5t b250ZXJleS5jYS51c4IUd3d3LmNvLnBvcnRhZ2Uud2kudXOCF3d3dy5jby53YXNo aW5ndG9uLmFyLnVzghZ3d3cuY29sbGluc3ZpbGxlaWwub3JnghN3d3cuY3Vycnlj b3VudHkub3Jnghh3d3cuZGFsbGFzLWxvdmVmaWVsZC5jb22CFnd3dy5kZXZlbG9w cGFsbWJheS5vcmeCJXd3dy5lZHdhcmRkdWZyZXNuZWNvbW11bml0eWNlbnRlci5j b22CGHd3dy5raXJrd29vZGVsZWN0cmljLm9yZ4ISd3d3Lmtpcmt3b29kbW8ub3Jn ght3d3cua2lya3dvb2RwYXJrc2FuZHJlYy5vcmeCE3d3dy5sZXhpbmd0b25uYy5n b3aCGHd3dy5teXBhbG1iZWFjaGNsZXJrLmNvbYISd3d3Lm9ha2NyZWVrd2kub3Jn ggx3d3cub2NzZC5jb22CC3d3dy5va2MuZ292gg93d3cub3JiZ2RwdS5jb22CFnd3 dy5wYWxtYmF5ZmxvcmlkYS5vcmeCFXd3dy5wYWxtc3ByaW5nc2NhLmdvdoIOd3d3 LnBjYmdvdi5jb22CFHd3dy5waW5lY3Jlc3QtZmwuZ292ghh3d3cucGluZWNyZXN0 Z2FyZGVucy5vcmeCEnd3dy5yaWNobW9uZHR4LmdvdoINd3d3LnJ5ZW55LmdvdoIV d3d3LnNhbnRhLWNsYXJpdGEuY29tghZ3d3cuc2NwcGFya3NhbmRyZWMuY29tghR3 d3cuc2hhcnBzYnVyZ25jLmNvbYIUd3d3LnNpbHZlcnRob3JuZS5vcmeCDHd3dy5z c3dkLm9yZ4Iad3d3LnN0Y2hhcmxlc3BhcmlzaC1sYS5nb3aCFHd3dy5zdW5jaXR5 Z3JhbmQuY29tgg93d3cuc3V3YW5lZS5jb22CDXd3dy50YXNpbi5vcmeCD3d3dy50 Y3dkLmNhLmdvdoIdd3d3LnRvd25vZndlc3RzcHJpbmdmaWVsZC5vcmeCD3d3dy50 cmlvLXVzLm9yZ4ISd3d3LnZpY3RvcmlhdHgub3JnghB3d3cud2RtLmlvd2EuZ292 ghJ3d3cud2VzdGNvdmluYS5vcmeCEnd3dy53ZXN0cG9ydGN0LmdvdoIRd3d3Lndp bHNvbi1jby5jb22CDHd3dy53c3BzLm9yZzBMBgNVHSAERTBDMAgGBmeBDAECATA3 BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNy eXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2AG9Tdqwx8DEZ2JkApFEV /3cVHBHZAsEAKQaNsgiaN9kTAAABaymRThgAAAQDAEcwRQIhAL8A0CNZUN0iYYVG ZdOIvQ5zcLJPsP7jG9fnYtnz2FhJAiAPPyRigOQNXKlDwz2RGa8a0vQrwKQ6/FYV IQZ6lj1V/AB3ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABaymR TqEAAAQDAEgwRgIhAKCjQcp2DwLA8cdFTrSG5tnVyJNo7B5RvyYahfU8UCgcAiEA 0NNuMMe+BW3iWVIyw2MLCUkDiXQKcRgdpAdNbdsFOgYwDQYJKoZIhvcNAQELBQAD ggEBAJjxpX0rf5k+7cMtRlU3bajgrlgQMcZuB8zqE6i4U5ruTysIcT4Wm9M7Jr1G oqcT2/wW7TwHxLjcp9FVd86W/JKTDtoi/sfb8HEGHsbnzzajcgxWoE4ZidVmqGBK JOKda44iigCPKyhsdMmU6okAR9MuYeboN14pjyrN0kV6HtIesPUm4PTaSoZABlk7 iLq22PjdPR/nfGtT4AfWB1Fo1L+EdEIG2UUeEyzBJr5nc45CEKUhLnZnJd6+6dv+ SxSSwKiEUWD3uL8kKK18qpJfShikCRME6o4O8c6UQdVMcjNxhrpkkNDLhcmF7ftI xuE78cjDXsAuPj5LScNyUZsaW7A= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkJWQJDJ7KnGiwbdFRve veStLCIY1F084qJmSTowW5lyyjPX6jSyq45AV1xTax18Wi8UvunfnKaaVzb1t0Nn y6Y4IZ/cTbWdjZWDTtkwItRSES1zA/pLEBypr7Sx+dYh3RiUf7Y90nT0Vs9vZFW1 dvTliP4+uUUIyfZe4QLaI6RhtaYppCkF322+JO5Z93om7lx1i8G8Z8iAuVl8H8ne utEToA21ynqg/uWgA+QrZ0EHc4Np7l6NcjGOqgKKk2oNf5sdmtRMV3PEHK8Cifd7 +gx/qUfpLbOUue2HVooU/joKJOXBQT+tftQC2HkWFthvK+yVX1voi1Md7/4YzBYH SQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 417699539986186865913490722185806596631887 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-05 20:35:16 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-03 20:35:16 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-d2.granicusgovaccess.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19473410920544028430399849989417268792393974098089132448291703614106591816609953478282964260877154435064328261147339356330564042665180989927467766235400239804184729547533028968691866024034273710697303182707295757287969650819691851863875805154329051416610268707346351408886197273087364002405003371442445873758316926341606652541774350664295760753446622049663989793793221973677260789975000899506787935147502464371976532696295463832471074151009242620614041982228574467650576501288382845288560121510983082907669210225827648946743630576831023815737377185710806144585022975042958991031250697061615187945395327955084957321033 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0a9be472e4120296ca728234b1ba6b93ebb65b33 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1051 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inet.cityofvacaville.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-d2.granicusgovaccess.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.vacaville.ca.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofhernando.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofwalnut.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofwinder.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co.monterey.ca.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co.portage.wi.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co.washington.ar.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collinsvilleil.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.currycounty.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dallas-lovefield.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.developpalmbay.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edwarddufresnecommunitycenter.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kirkwoodelectric.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kirkwoodmo.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kirkwoodparksandrec.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lexingtonnc.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mypalmbeachclerk.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oakcreekwi.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ocsd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.okc.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orbgdpu.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.palmbayflorida.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.palmspringsca.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcbgov.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pinecrest-fl.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pinecrestgardens.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richmondtx.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ryeny.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santa-clarita.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scpparksandrec.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharpsburgnc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.silverthorne.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sswd.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcharlesparish-la.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suncitygrand.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suwanee.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tasin.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tcwd.ca.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townofwestspringfield.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trio-us.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.victoriatx.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wdm.iowa.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westcovina.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westportct.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wilson-co.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wsps.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016b29914e180000040300473045022100bf00d0235950dd2261854665d388bd0e7370b24fb0fee31bd7e762d9f3d8584902200f3f246280e40d5ca943c33d9119af1ad2f42bc0a43afc561521067a963d55fc007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b29914ea10000040300483046022100a0a341ca760f02c0f1c7454eb486e6d9d5c89368ec1e51bf261a85f53c50281c022100d0d36e30c7be056de2595232c3630b09490389740a71181da4074d6ddb053a06 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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