san-c2.granicusgovaccess.net

Issued by R3

About this certificate

This digital certificate with serial number 03:4a:67:9a:38:85:43:65:f3:a6:46:8e:e8:21:19:91:7e:05 was issued on by Let's Encrypt.

With 67 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=san-c2.granicusgovaccess.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4a:67:9a:38:85:43:65:f3:a6:46:8e:e8:21:19:91:7e:05
Serial Number (int): 286655464191085389101184116229148813393413
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: de:1c:b6:20:ca:11:10:7e:bb:7d:24:16:1f:b1:eb:ab:a2:6d:ce:6a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a7:9e:e3:fb:23:a8:05:b5:b3:1e:c0:a2:9f:f7:38:00:0a:1d:80:a8
Fingerprint (sha256): 16:7f:c8:f8:7d:89:97:c5:f8:9b:79:4c:11:8d:da:78:78:a4:6c:0c:ae:69:93:89:80:d9:d7:ab:61:19:3e:c2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate san-c2.granicusgovaccess.net

67

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-c2.granicusgovaccess.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amw.amarillo.gov
comdev.amarillo.gov
library.mountainview.gov
san-c2.granicusgovaccess.net
www.amarillo.gov
www.amarillociviccenter.com
www.amarillolibrary.org
www.amarilloparks.org
www.artspotsilverthorne.org
www.cerrogordoauditor.gov
www.ci.hercules.ca.us
www.cityoforange.org
www.cityofpsl.com
www.donaanacounty.org
www.explorefrederickcareers.com
www.fly-ama.com
www.flyokv.com
www.gilibrary.org
www.giparks.com
www.gipolice.org
www.giud.com
www.glastonburyct.gov
www.glendaleca.gov
www.glendaletransit.com
www.glendalevotes.org
www.gpltexas.org
www.grand-island.com
www.grandforksgov.com
www.hanover-township.org
www.hastingsmn.gov
www.henderson-county.com
www.hernandocounty.us
www.hoffmanestates.org
www.hvilletn.org
www.janesvillewi.gov
www.kershaw.sc.gov
www.kissimmee.gov
www.lbcwd.org
www.leesburgva.gov
www.lesherartscenter.org
www.lovelafayette.org
www.maderacounty.com
www.manteca.gov
www.morrisvillenc.gov
www.newark.org
www.orangepubliclibrary.org
www.panhandletickets.com
www.parks.pearlandtx.gov
www.pearlandtx.gov
www.perrycountyal.gov
www.playgolfamarillo.com
www.ptrc.org
www.rltaylor.com
www.rochestermn.gov
www.rplmn.org
www.sarasotacountylibraries.org
www.sarasotacountyparks.com
www.sarasotafl.gov
www.sarasotalibraries.org
www.sarasotapd.org
www.smith-county.com
www.srqauditorium.com
www.usd383.org
www.wenatcheewa.gov
www.willingboronj.gov
www.woodsidefire.org
www.yesfrederickva.com

Other certificates including the domain name granicusgovaccess.net

(limited to 100 certificates)
san-b1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-z1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-c2.granicusgovaccess.net

Certificate

The complete raw certificate details for san-c2.granicusgovaccess.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEqPbgfLFiuwa26OSgOu
kHpPVO0D/s9PsEinvHZJkBp8kXmA5jU+sQFU3EYzCb/RK6sImUzsCQ+xVTQbEM2i
ESUI158ndIKPyoJkJiRss/Jj45QEVwYTVbFlbOAVEFtXRHqCgYY4EGfJ76QmMbMu
xXnW2uXtGGAicB/em5fm/ITrCLl5yU6ic0Po8vY5Z7FD9MBUMPGYPsULl5WSqoTC
qJ3U/aNlsx/q+sWk3uh9savsXX1wxqTK3/iuBY2WdW0RV92nwx6/KHxkV26v93L3
XkhaX+TLTaUYs744ujcLPtcTRw41qyxnuUFqXJUXT7sJv0PC0bnkfdow1aDBYm8Y
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286655464191085389101184116229148813393413
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 20:52:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-04 20:52:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-c2.granicusgovaccess.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23264615154540318638079724402211309062385049386856891104544495893602060632372862898451084474901042115200098827217097869701483702537208927539185847730952790244327256315502565993315007976232079292022640047514258298474304731695248613683940843354479271012655977789755805428945606851619569103187713108997715763534665115291346156009083100043523318663016685404084211920858503203948508297512679694962225564180510369008906270366358156148018876236666094755412378452035526710865769839981141679147705421728146345877417343683678390122428313371120026097673651212246677588126364732762752304870853655127873775058234739682723585005569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							de1cb620ca11107ebb7d24161fb1ebaba26dce6a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1483 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amw.amarillo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comdev.amarillo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'library.mountainview.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-c2.granicusgovaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amarillo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amarillociviccenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amarillolibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amarilloparks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artspotsilverthorne.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cerrogordoauditor.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.hercules.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityoforange.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofpsl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.donaanacounty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorefrederickcareers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fly-ama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flyokv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gilibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gipolice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glastonburyct.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glendaleca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glendaletransit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glendalevotes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gpltexas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grand-island.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandforksgov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hanover-township.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hastingsmn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.henderson-county.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hernandocounty.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoffmanestates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hvilletn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.janesvillewi.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kershaw.sc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kissimmee.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lbcwd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leesburgva.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lesherartscenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lovelafayette.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maderacounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manteca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morrisvillenc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newark.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orangepubliclibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.panhandletickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parks.pearlandtx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pearlandtx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perrycountyal.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playgolfamarillo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ptrc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rltaylor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochestermn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rplmn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sarasotacountylibraries.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sarasotacountyparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sarasotafl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sarasotalibraries.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sarasotapd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smith-county.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.srqauditorium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usd383.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wenatcheewa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.willingboronj.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woodsidefire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yesfrederickva.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c3bf7b29800000403004630440220330f9e750410e522f8c1a3fe2ea33453928788d9a15ac02d44b25c80ba10b5610220584017131e07398c6a9ef3c97bed9bf3240f548d59c0c45ce1dec4d1c871f68100770029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c3bf7b361000004030048304602210099cf21d9244a804b559d1f3fcc36eabc9c3c9d16f2adf0014ad671f27991624a02210088001556395aed4c0cf90a932bd546153e8c2ae18402324249139a2f6d56362a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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