san-f1.granicusgovaccess.net

Issued by R3

About this certificate

This digital certificate with serial number 04:61:85:31:89:f1:f5:52:95:cd:7e:11:5b:72:1e:dc:e0:a1 was issued on by Let's Encrypt.

With 66 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=san-f1.granicusgovaccess.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:61:85:31:89:f1:f5:52:95:cd:7e:11:5b:72:1e:dc:e0:a1
Serial Number (int): 381633577862217506093056203271753678250145
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 55:de:32:31:7d:ed:72:b2:ae:f2:c3:7f:62:af:4d:92:82:04:49:4c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 31:db:bd:20:b7:86:f0:a4:e5:92:a5:20:12:67:67:f7:da:50:40:92
Fingerprint (sha256): 1e:e6:6e:e1:c8:e7:a0:06:5e:c1:e1:ac:ce:84:67:83:b9:67:95:37:e2:04:e4:c1:c7:14:97:4f:f6:86:cb:5b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate san-f1.granicusgovaccess.net

66

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-f1.granicusgovaccess.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

myes.elsegundo.org
san-f1.granicusgovaccess.net
www-f.weknowgovernment.com
www.adamhscc.org
www.ajcc.lacounty.gov
www.boyntonbeachcra.com
www.cantonga.gov
www.carync.gov
www.catoosa.com
www.choosestamford.com
www.ci.chatfield.mn.us
www.cityofbroussard.com
www.cityofwestpark.org
www.clintoncountypa.gov
www.co.monroe.wi.us
www.co.prince-edward.va.us
www.compass.aoc.gov
www.deq.virginia.gov
www.dunwoodyga.gov
www.edgartown-ma.us
www.employee.lowermerion.org
www.fergusfallsmn.gov
www.folsom.ca.us
www.gallatinutilities.com
www.gowallawalla.us
www.graniteshoals.org
www.hgcity.org
www.joinsdsheriff.net
www.kcdhh.ks.gov
www.lagunabeachcity.net
www.lakeparkflorida.gov
www.lakeportfire.com
www.library.folsom.ca.us
www.maplewoodnj.gov
www.mcso.org
www.newhavenct.gov
www.newtonma.gov
www.nwresd.org
www.oakislandnc.gov
www.obndd.ok.gov
www.oswegoil.org
www.parks.fortlauderdale.gov
www.pomonaca.gov
www.priorlakemn.gov
www.pubdef.ocgov.com
www.publicsquare.ks.gov
www.sciotownship.org
www.sdsheriff.gov
www.shelbytwp.org
www.sjafca.org
www.sjpd.org
www.sjpdyou.com
www.stamfordct.gov
www.stillwatermn.gov
www.tasin.org
www.thetfordvt.gov
www.townofbuchanan.org
www.townofgypsum.com
www.ulct.org
www.viennava.gov
www.warrencountynj.gov
www.warrencountynjheritage.com
www.westminster-ca.gov
www.whitehousetn.gov
www.wilsoncountypubliclibrary.org
www.yumaaz.gov

Other certificates including the domain name granicusgovaccess.net

(limited to 100 certificates)
san-b1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-z1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net

Certificate

The complete raw certificate details for san-f1.granicusgovaccess.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4k2v3zY3/tywts9qruo
MRzNkYqNevELdjC/xhGZH74YciYs3rXAUaXHOLKLb3AhTO8h5JxQiDKUlTup24tN
A8EanJuKzYHOts6/IJ5T0TZewaWs+fl0qRUYakZXOVZ7HTpVYLQ0nu6okwIe48+A
/uCk/S7DJQjmOdb3OlfNQBchf48XWLbrzilNy7otVHUZb/TTXgYolHnmBh9U1ncl
f7uwIiTt0cjccXoUyL0GHyscRF+rJ1oC75pPpakbA2MmQ0HTsuGeeqXFnai/Wxbc
+epz1kkHT9nLNXA6Atlt7kSKJ5VDn8RE8bbAINgksQmQwEga0kjuwTTTCja8bU+O
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 381633577862217506093056203271753678250145
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-08 17:44:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-06 17:44:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-f1.granicusgovaccess.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22664319264802395410380847427162773526653740714940646442697558674223359312259954199247864186760851948959273763193388577144347251842266812262584576773761739796261452018747370296702702323765297548061731972279095646441807170712744249292596104897390634532405616429373806704126396831595489030688488512018615216289111918992497124476096830736716550921483557147644496284899312829452469252077435239903334249291579617934719977021424650160706867559680638841803818101062281064794285522153634872200725097295791409503267004628756530813229879790096247261956644907260929293668829326078711233482354822903958336465369539342388746489369
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							55de32317ded72b2aef2c37f62af4d928204494c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1428 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myes.elsegundo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-f1.granicusgovaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-f.weknowgovernment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adamhscc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ajcc.lacounty.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boyntonbeachcra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cantonga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carync.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catoosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.choosestamford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.chatfield.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofbroussard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofwestpark.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clintoncountypa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co.monroe.wi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co.prince-edward.va.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.compass.aoc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deq.virginia.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dunwoodyga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edgartown-ma.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.employee.lowermerion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fergusfallsmn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.folsom.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gallatinutilities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gowallawalla.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.graniteshoals.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hgcity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joinsdsheriff.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kcdhh.ks.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lagunabeachcity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lakeparkflorida.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lakeportfire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.library.folsom.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maplewoodnj.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newhavenct.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newtonma.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nwresd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oakislandnc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.obndd.ok.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oswegoil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parks.fortlauderdale.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pomonaca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.priorlakemn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pubdef.ocgov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.publicsquare.ks.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sciotownship.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sdsheriff.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shelbytwp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjafca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjpd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjpdyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stamfordct.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stillwatermn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tasin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thetfordvt.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townofbuchanan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townofgypsum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ulct.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viennava.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warrencountynj.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warrencountynjheritage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westminster-ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whitehousetn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wilsoncountypubliclibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yumaaz.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f59851aed0000040300483046022100e1ccfcb80024dd729259afef760a8a835c1cee5440d806ea0c35f95df2396ea60221009d44b8dba1aa47fac67982cfcbc3a0e536354001d85d15ea3907e09768c26b9000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f59851af7000004030047304502203e1a2b093cc090d88c5c91991603adadd8ecd82b419ea8d43b99ddda3a0cbd18022100a348306d82baea33431c70f35ecf9348aa4da2bf6f313996228fe47b38b69f1a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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