san-b1.granicusgovaccess.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:29:c4:b6:22:dc:30:00:ac:69:00:f1:21:27:ea:00:3a:8b was issued on by Let's Encrypt.

With 59 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san-b1.granicusgovaccess.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:29:c4:b6:22:dc:30:00:ac:69:00:f1:21:27:ea:00:3a:8b
Serial Number (int): 275549909231288292163537980447775531219595
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cd:36:04:92:82:ad:42:ff:28:27:74:0f:10:b5:dc:ab:ec:dd:71:0f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7a:b2:3d:da:4a:f7:db:cf:2b:ba:cc:9f:75:74:b8:a3:76:7d:8d:56
Fingerprint (sha256): 24:c1:9e:bc:77:fc:6b:87:1c:f0:26:b3:00:e0:25:f1:c0:6d:bf:5b:b0:56:87:7c:05:48:48:4d:ab:e3:9f:af

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate san-b1.granicusgovaccess.net

59

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-b1.granicusgovaccess.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arts.torranceca.gov
business.torranceca.gov
san-b1.granicusgovaccess.net
transit.torranceca.gov
www-b.weknowgovernment.com
www.arizonamuseumofnaturalhistory.org
www.boonecounty.iowa.gov
www.brentwoodtn.gov
www.bryancountyga.org
www.ccgov.org
www.ci.punta-gorda.fl.us
www.ci.richland.wa.us
www.ci.rolling-hills-estates.ca.us
www.citymb.info
www.cityofalbertville.com
www.cityoflancasterca.org
www.cityofloveland.org
www.cityofmarion.org
www.cityofmonrovia.org
www.cityofrockhill.com
www.cityofsantacruz.com
www.co.marquette.wi.us
www.coffeycountyks.org
www.danapoint.org
www.dedham-ma.gov
www.dsrsd.com
www.eid.org
www.elkgrove.org
www.enid.org
www.falconfieldairport.com
www.lafourchegov.org
www.lauderhill-fl.gov
www.library.torranceca.gov
www.louisvilleco.gov
www.lowermerion.org
www.lvmwd.com
www.madisoncountyal.gov
www.mankatomn.gov
www.maplevalleywa.gov
www.marioncountyfl.org
www.marylandheights.com
www.mathewscountyva.gov
www.mcdonoughga.org
www.melbourneflorida.org
www.mesaaz.gov
www.mesalibrary.org
www.mesaparks.com
www.mnairspectacular.com
www.nevadadot.com
www.nixa.com
www.oaklawn-il.gov
www.richfieldmn.gov
www.richland.lib.wa.us
www.richlandhills.com
www.richlandparksandrec.com
www.roswellatwork.com
www.roswellgov.com
www.selectmesa.com
www.torranceca.gov

Other certificates including the domain name granicusgovaccess.net

(limited to 100 certificates)
san-b1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-z1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-d1.granicusgovaccess.net

Certificate

The complete raw certificate details for san-b1.granicusgovaccess.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ffahLtdSMMffcUQ3diH
G++a7JiOGiLWYemcR9Jd/uAylhBXto0FlUkiOepZ6+h79POLZJ2r8c1Ug/s9S5ER
FR0nNIAIUcJKQHKJ0E0MjhAERIoiIW/UvGW4VeTmuCID6QlCFnicRWsVzieRDqQz
hcZXHExm+bUziL8A4+wsPBbfC58DZocnjbn2HNhV5+xNBvn3Hlr4x4d8gC2QpHzx
NaGLrglZqt777Af2+bN9gmY4RRaZ/yj8sXXys2JyXh+GSur+CFTTP4OmNao4ybyL
9/hAj5rPYO8K3sQJdzHBXDrwLdOdPsXgevR7ZePfDFkbfOU2fOqGrqgyVQ0g8/Ty
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275549909231288292163537980447775531219595
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-11 20:19:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-09 20:19:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-b1.granicusgovaccess.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27010980117173438970786565378173985239049023286310809860864849442035101645436301492539980504434133952226330999317453641614082880256092447090284368695622856309378095621167177540636625017704692070913200366995470099962714709590276242553110395507499998699852468289993892230995833818944797960373499139686183474929737776737466355826718945041145913061031821726727579147514843395806507256458156205674779804304797370451805529188956485820999654562092483663538930872417914250688567179415092052723067221014349270654218209684482456839738171373526322886214292953090370604760197912002390814645720662354880996698630835440088859865699
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cd36049282ad42ff2827740f10b5dcabecdd710f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1339 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arts.torranceca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.torranceca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-b1.granicusgovaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transit.torranceca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-b.weknowgovernment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arizonamuseumofnaturalhistory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boonecounty.iowa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brentwoodtn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bryancountyga.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccgov.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.punta-gorda.fl.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.richland.wa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.rolling-hills-estates.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citymb.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofalbertville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityoflancasterca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofloveland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofmarion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofmonrovia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofrockhill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofsantacruz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co.marquette.wi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coffeycountyks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.danapoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dedham-ma.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsrsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elkgrove.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.falconfieldairport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lafourchegov.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lauderhill-fl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.library.torranceca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.louisvilleco.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lowermerion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvmwd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madisoncountyal.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mankatomn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maplevalleywa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marioncountyfl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marylandheights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mathewscountyva.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcdonoughga.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melbourneflorida.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesaaz.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesalibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesaparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mnairspectacular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nevadadot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nixa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oaklawn-il.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richfieldmn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richland.lib.wa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richlandhills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richlandparksandrec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roswellatwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roswellgov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.selectmesa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.torranceca.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170cb77cc7e0000040300473045022100d4488a38bd30a985fd30ea6bb3504fc064bac98eed59f1c800972d217cb0d22b022019e9ab97b6a92a41ddf8ca182f6b17bde00807b2fd58367d440c3e73a2417ae300760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170cb77cca1000004030047304502201cd94df2669183c3765f68e00f0a7847ce4f00468c672bb7e2422292ea26e87e0221009a085123679e583a790d57ce4b0e1076d56e1a776c1f96f5ad909ca5b2f904e1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00391a85ad9e1b1a4d42a9951a40287adcf22a838ea5e4719f411a74ced1596d78227164a13775c03809d5d2be501852594b3479e7143353c7f81df9eaa21e97c47a162f03482c861d6aaa69e9919b969d68674b5212f1fb4d1e0648122f2e79f369cd6e4a219dbdb03728aaca14228a97b3bf2f74c3e977369ad3526991a07ba1c883df31063673d33ce3f533e026b104a07e35fdf513b4f032119ca98948c649dbc549020ffb8867b588c0796c01d55743f8d869f8c44f500a6da617a0332abf002ecf03a57e7deeeb5e3908f1db1d0e9846af22447c67a38cdbdcca23ce01d3564c4d59bd6f05abe43f8238b009e78d65fc22dffd993712155484fa32aaf546