san-b2.granicusgovaccess.net

Issued by R3

About this certificate

This digital certificate with serial number 04:14:dc:8b:45:ee:10:a6:7d:5b:29:69:94:7d:2f:90:a5:3a was issued on by Let's Encrypt.

With 67 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san-b2.granicusgovaccess.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:14:dc:8b:45:ee:10:a6:7d:5b:29:69:94:7d:2f:90:a5:3a
Serial Number (int): 355547944372143492053023110749090567202106
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 53:d4:7d:1d:ba:47:83:6e:e5:b1:71:ed:d2:69:14:61:43:63:a3:30
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 44:e7:30:87:4e:d2:5f:ba:a5:a9:84:08:b4:3c:8d:19:ea:ef:5d:db
Fingerprint (sha256): 1d:f0:2d:6a:59:e5:fc:7a:34:3d:a3:c5:48:0d:ae:d4:54:9b:a8:a9:a5:6e:10:5a:a6:a7:b4:a8:77:6e:72:b4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate san-b2.granicusgovaccess.net

67

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-b2.granicusgovaccess.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

environmental.marionfl.org
insite.manhattanbeach.gov
intranet.mountprospect.org
library.pflugervilletx.gov
parks.marionfl.org
parks.pflugervilletx.gov
police.pflugervilletx.gov
san-b2.granicusgovaccess.net
selp.marionfl.org
utilitybilling.pflugervilletx.gov
www.allegancounty.org
www.bces.wa.gov
www.choose-newton.com
www.ci.millbrae.ca.us
www.cityoforoville.org
www.cityofpalmdesert.org
www.cityofranchocordova.org
www.cityofredding.org
www.cleanwaterteam.com
www.co.okeechobee.fl.us
www.experiencemountprospect.org
www.fairfield.ca.gov
www.ffpubliclibrary.org
www.funinmontgomery.com
www.hacm.org
www.intranet.pbfl.org
www.louisville-library.org
www.lpacfl.com
www.marionflcoc.org
www.mayoclinichealthsystemeventcenter.com
www.mdaqmd.ca.gov
www.midvalecity.org
www.montgomeryal.gov
www.montgomeryzoo.com
www.mountprospect.org
www.nationalcityca.gov
www.newtonkansas.com
www.noaca.org
www.norfolkpubliclibrary.org
www.novatofire.org
www.nuecesco.com
www.ocalafl.org
www.ocalapd.gov
www.ourpureh2o.com
www.outagamie.org
www.palmdesert.gov
www.peoriaaz.gov
www.peoriaed.com
www.peoriasportscomplex.com
www.pflugervilletx.gov
www.plymouthmn.gov
www.portolavalley.net
www.poudre-fire.org
www.provo.org
www.queencreekaz.gov
www.ranchocordovapd.com
www.raymore.com
www.redmondoregon.gov
www.redwoodcity.org
www.reno.gov
www.richlandbusiness.com
www.robbinsdalemn.com
www.rockhillusa.com
www.rosamondcsd.com
www.unioncountyky.org
www.villageofnorridge.com
www.visitpeoriaaz.com

Other certificates including the domain name granicusgovaccess.net

(limited to 100 certificates)
san-b1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-z1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-c2.granicusgovaccess.net

Certificate

The complete raw certificate details for san-b2.granicusgovaccess.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJHXdRQrkBmgBtD+RKjK
ZS3XcqJi8/G9mur0hN5jRZPsfHOBmGhYm3C5id2pVr32v3agMRWy+6DuXnYq+mkP
/1GYQjfo9XLesK7tXyGImnppfIUr5KT/pF0Fljw8y57VSrG/pjkxP+oP1pYpxi1T
WKKAZfdBWqPfx9kyuvFcJKYVStYIkM8PXvG7gOTJR4qq9K1hJPSZmsDzbC3iE0yo
qNwZrREeeIUDVj1ghiSObphbQqMf/mtDk08dUxWl4rWz6MqYXugo9BP8iwB47SC4
NPgywwOgn/ACCle8oZMbRWvWuoFXJ98xWqZ/wT2EEd2hxMBOC7I2yyfEGeLAP+tX
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 355547944372143492053023110749090567202106
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-10 23:38:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-10 23:38:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-b2.granicusgovaccess.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23299765302011786812865979787995479738478348845256909971897016766768098898750345347475031336071246677058803196768976071074946448727272461217365406288893107263520802337261130138114424067590158922921761247356287990029983548892677459965891565923855193909605699521812560916798753671662954574421725820611666265700817474599206594076961592134173166671032697505554447333540461964543593381504228530354984917793421543630246417281408126036968106468294673029912475696688706571847070854122124151054470258625469854726268788672806106129607426509401621594778275317049656115603137492066848003992587187445498892364337983229755375966163
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							53d47d1dba47836ee5b171edd26914614363a330
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1543 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'environmental.marionfl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insite.manhattanbeach.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.mountprospect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'library.pflugervilletx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parks.marionfl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parks.pflugervilletx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'police.pflugervilletx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-b2.granicusgovaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selp.marionfl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utilitybilling.pflugervilletx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allegancounty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bces.wa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.choose-newton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.millbrae.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityoforoville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofpalmdesert.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofranchocordova.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofredding.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cleanwaterteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co.okeechobee.fl.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.experiencemountprospect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fairfield.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ffpubliclibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.funinmontgomery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hacm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intranet.pbfl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.louisville-library.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lpacfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marionflcoc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mayoclinichealthsystemeventcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mdaqmd.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.midvalecity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.montgomeryal.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.montgomeryzoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountprospect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationalcityca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newtonkansas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.noaca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norfolkpubliclibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novatofire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nuecesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ocalafl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ocalapd.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourpureh2o.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.outagamie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.palmdesert.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peoriaaz.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peoriaed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peoriasportscomplex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pflugervilletx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plymouthmn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portolavalley.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poudre-fire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.provo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.queencreekaz.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ranchocordovapd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raymore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redmondoregon.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redwoodcity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reno.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richlandbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robbinsdalemn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rockhillusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosamondcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unioncountyky.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.villageofnorridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitpeoriaaz.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001859e43e5870000040300483046022100c8fc4ac7e62d89b2eda1235bf01ee9d4620219167239c7410c044a503e561874022100992dfd17e407513a31daa4d54744d1e340c5edb2ae5b1227e31becdb161cdd8f007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001859e43e7e50000040300473045022100a4228dc7594c2c79d086c25b2c3def1217979fa451026a4758bb54d1a654595202201eb4e2f356c0bbb02ae27f9ed6e457ccda867f1d0421d6181a43ba4f28359bc7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001157fdcc39ac4a1512217a6ad4d7c7ff946e635e04ba83ab6eb3f7a15adae194b765d9a77870eb7b1e98ad01b021b691e2834e1f0a8981ac86176635b131bca50cdd01e99b58feff16d3949ab8c4ef3a39c8d7f5f91c46db86d1d5c5b8d83d494bb70ffa42ee1efb30b03133eb25c7209036f3fe9a0a8a173ee2704c85a662b51f6aaf11c3fd4ace2739d7246a4be27d23d4a4db00318846406dafd930378a4b75558e566589cf5181ff834028d996c3377d9ffb01893f9d3ed83165417735109e369397ad3d74743bb88b143ec369b745c1cd75d13f74788bb72bd888ad1dc9f867e6ee851cbbd6c84e19103c786c329ce29d5d6d510b674a1b250b0e6249b2