san-f2.granicusgovaccess.net

Issued by R3

About this certificate

This digital certificate with serial number 04:a7:a1:e6:eb:6f:c1:80:13:41:9b:a8:00:f5:95:e0:1f:e9 was issued on by Let's Encrypt.

With 65 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=san-f2.granicusgovaccess.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a7:a1:e6:eb:6f:c1:80:13:41:9b:a8:00:f5:95:e0:1f:e9
Serial Number (int): 405491503713657012788332771528623599394793
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f0:f6:3e:d7:c4:c7:d4:94:60:7c:77:23:0e:b0:3e:61:52:b4:53:30
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e7:b7:65:b0:6c:e3:b7:90:ec:1f:4c:00:75:9f:f8:74:3f:6b:11:48
Fingerprint (sha256): 22:64:28:61:12:f6:4b:2a:73:5e:0c:40:2a:f2:fb:e4:f1:3b:3d:17:b9:06:15:55:2b:da:b5:eb:41:ab:cf:67

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate san-f2.granicusgovaccess.net

65

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-f2.granicusgovaccess.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

econdev.mountainview.gov
intranet.fremontfire.gov
intranet.fremontpolice.gov
san-f2.granicusgovaccess.net
www.albemarle.org
www.brentwoodca.gov
www.campverde.az.gov
www.ci.commerce.ca.us
www.cityofalachua.com
www.cityofcalabasas.com
www.cityofcommercepubliclibrary.org
www.cityofperris.org
www.cityofsanteeca.gov
www.cityofvacaville.gov
www.cityofwalnut.org
www.cityofwinder.com
www.cocosheriff.org
www.cosb.us
www.dol.ks.gov
www.edwarddufresnecommunitycenter.com
www.enablealbemarle.org
www.firedepartment.org
www.greenlightnc.com
www.kenmorewa.gov
www.library.sunnyvale.ca.gov
www.liveoakcity.org
www.norco.ca.us
www.pittsylvaniacountyva.gov
www.readymontereycounty.org
www.regionalflood.org
www.sandcity.org
www.sausalito.gov
www.sausalitolibrary.org
www.scpparksandrec.com
www.sewallspoint.org
www.sharpsburgnc.com
www.silverthorne.org
www.sjcfire.org
www.stcharlesparish.gov
www.sunnyvale.ca.gov
www.suttercounty.org
www.suttersheriff.org
www.suwanee.com
www.taber.ca
www.tcwd.ca.gov
www.tecumsehok.org
www.tempe.gov
www.tempecenterforthearts.com
www.tempepubliclibrary.org
www.thatcher.az.gov
www.townhall.westwood.ma.us
www.trio-us.org
www.villagesussex.org
www.wallawallapubliclibrary.org
www.wallawallawa.gov
www.warrencountynjveterans.com
www.warrencountyvotes.com
www.washingtoncountyar.gov
www.wdm.iowa.gov
www.west192.org
www.westcovina.org
www.westwoodpd.org
www.wilsoncountync.gov
www.wilsonnc.org
www.yucca-valley.org

Other certificates including the domain name granicusgovaccess.net

(limited to 100 certificates)
san-b1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-z1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-c2.granicusgovaccess.net

Certificate

The complete raw certificate details for san-f2.granicusgovaccess.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0b0hqXlIYQ3NF3ISYic
0caKcDjquE3vHouO1120NQtKJ5WfAMb4Kz0wPI3V68oTC1CKUwCKZc9JEiRNK9fJ
L5JZWnNGN/y/nLVhgSZX2sI1KT4GpuNNwraopszcRSzpyPU/BP+sNAUtKBLbfEIX
UnfvL3op37BXdPrDdJ6z70kCzjYCqisXMGsbdhGoQzdc3EAP2D3s/C5vc39vuah8
UBsZ2We/ioKLirvqItK9wkWO2iMri04ny1zCpNRnbfnImAmI0J/05Ui3HG9x/y+O
4qR2O03itlYo/5GACSY/Eroyvn+10KZjQ2IBqA6k4otH4zzpzQ2dDcoxZk+fNT+R
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 405491503713657012788332771528623599394793
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 16:12:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-12 16:12:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-f2.granicusgovaccess.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21116786232444895995354274413069691089771940221644063149868175535320543073492520155707486422624936923699365074311389873855291559618671610500464010397771438601360374244130477152997491999232338376010644775323689272537782182921064355864814375087264855721440814610353522096256706447725905943388987005990026905671591285312522832520026585984849490751296162831376610020862538576286296113019994887021184839648528701242357357483955217151271566043403555894531012986932245050657151696226895182426717600430480927738803748516324005253085637583215869356807963955302319101372543659720989576776038329568332634456842603263343231734071
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f0f63ed7c4c7d494607c77230eb03e6152b45330
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1503 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'econdev.mountainview.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.fremontfire.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.fremontpolice.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-f2.granicusgovaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albemarle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brentwoodca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campverde.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.commerce.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofalachua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofcalabasas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofcommercepubliclibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofperris.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofsanteeca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofvacaville.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofwalnut.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofwinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cocosheriff.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cosb.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dol.ks.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edwarddufresnecommunitycenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enablealbemarle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firedepartment.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenlightnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kenmorewa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.library.sunnyvale.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liveoakcity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norco.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pittsylvaniacountyva.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.readymontereycounty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regionalflood.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandcity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sausalito.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sausalitolibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scpparksandrec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sewallspoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharpsburgnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.silverthorne.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjcfire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcharlesparish.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunnyvale.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suttercounty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suttersheriff.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suwanee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taber.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tcwd.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tecumsehok.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tempe.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tempecenterforthearts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tempepubliclibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thatcher.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townhall.westwood.ma.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trio-us.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.villagesussex.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wallawallapubliclibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wallawallawa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warrencountynjveterans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warrencountyvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.washingtoncountyar.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wdm.iowa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.west192.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westcovina.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westwoodpd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wilsoncountync.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wilsonnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yucca-valley.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d9e4e59220000040300473045022100fa62c4f1dbe34c78aff73708ff5ed544e51a0fb323dba47f05457215e990914702207fb2ab0cb9c26b62348d393115cfb1664b802b5f9a13d7beeaa921e6cb256524007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d9e4e59280000040300483046022100c9eda780c4f26da95275c9fad0af1e12382451d5a2b1f8815c52e8c9899d76ca022100fd27b5a5ddce62a7fa09efe0ae65292c9dc0ca30c0a69305a70b27b1d9cfa5d3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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