san-c2.granicusgovaccess.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:88:67:a9:02:ee:a7:61:0e:5a:18:ae:ff:6e:a1:ce:39:04 was issued on by Let's Encrypt.

With 61 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san-c2.granicusgovaccess.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:88:67:a9:02:ee:a7:61:0e:5a:18:ae:ff:6e:a1:ce:39:04
Serial Number (int): 307753047737736232907586995706634301225220
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 88:53:c7:8f:b0:5b:0e:31:ea:f3:55:48:bc:93:f3:ad:52:84:5e:bc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d5:58:0f:cb:8a:8e:fa:ed:fd:72:c7:74:4d:05:65:57:80:ae:9e:35
Fingerprint (sha256): 27:88:c2:66:49:03:fb:f4:d1:2d:97:d2:f5:d6:82:5e:54:eb:90:d5:b8:e7:65:07:09:8a:59:16:1d:da:ed:f7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate san-c2.granicusgovaccess.net

61

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-c2.granicusgovaccess.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amw.amarillo.gov
comdev.amarillo.gov
san-c2.granicusgovaccess.net
spanish.wenatcheewa.gov
www.amarillo.gov
www.amarillociviccenter.com
www.amarillolibrary.org
www.amarilloparks.org
www.bobbyjonesgolfclub.com
www.choosekingman.com
www.ci.hercules.ca.us
www.cityofkingman.gov
www.cityofpsl.com
www.cityofsancarlos.org
www.explorefrederickcareers.com
www.fly-ama.com
www.flyokv.com
www.gilibrary.org
www.giparks.com
www.gipolice.org
www.giud.com
www.glastonbury-ct.gov
www.glendaleca.gov
www.glendaletransit.com
www.glendalevotes.org
www.gpltexas.org
www.grand-island.com
www.grandforksgov.com
www.greenwoodcounty-sc.gov
www.hanover-township.org
www.hastingsmn.gov
www.henderson-county.com
www.hernandocounty.us
www.hoffmanestates.org
www.hvilletn.org
www.industrybusinesscouncil.org
www.kershaw.sc.gov
www.kingmanairport.com
www.kissimmee.org
www.lbcwd.org
www.leesburgva.gov
www.leydentownship.com
www.lovelafayette.org
www.maderacounty.com
www.newark.org
www.panhandletickets.com
www.pearlandtx.gov
www.playgolfamarillo.com
www.ptrc.org
www.rltaylor.com
www.rochestermn.gov
www.rplmn.org
www.sanfordfl.gov
www.sarasotafl.gov
www.sarasotapd.org
www.smith-county.com
www.srqauditorium.com
www.townofmorrisville.org
www.usd383.org
www.wenatcheewa.gov
www.yesfrederickva.com

Other certificates including the domain name granicusgovaccess.net

(limited to 100 certificates)
san-b1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-z1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net

Certificate

The complete raw certificate details for san-c2.granicusgovaccess.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKjDCCCXSgAwIBAgISA4hnqQLup2EOWhiu/26hzjkEMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMjUxNzAwNTVaFw0y
MDA1MjUxNzAwNTVaMCcxJTAjBgNVBAMTHHNhbi1jMi5ncmFuaWN1c2dvdmFjY2Vz
cy5uZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzRjiAEn/ENa6H
yDxG6LgWXMmzAk2IxjmgUZFMt7ohYuoIomEMeE50Qs94FbRG2hl8X2Hl9JKQxw+Y
PwgoDYWq4KWbpdvTa0ArYCw91fumrya8n0HwYAD9VhYoUrFVpf2raRhJ9MnimcHM
JCqANWso1+xlGvc94jLTgXCPJCbqL3kTl2lhviy8kFdp8p5qSuJ2QiWIc1Jnvwyr
AwBfadkmn/KeVGNSGAjs9oGf1ZHfTx0re9psoGWKaBXz2c0xU6VmG3TkLwUDZyot
SheRYAPQX3B0t2HyG+noUV63HyTcVFIZ7/eVtRDEKS/Oh7NXQTCrzm8Xb9NX3eKC
ZTtqBF8vAgMBAAGjggeNMIIHiTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFIhTx4+w
Ww4x6vNVSLyT861ShF68MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh
MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZy8wggVBBgNVHREEggU4MIIFNIIQYW13LmFtYXJpbGxv
LmdvdoITY29tZGV2LmFtYXJpbGxvLmdvdoIcc2FuLWMyLmdyYW5pY3VzZ292YWNj
ZXNzLm5ldIIXc3BhbmlzaC53ZW5hdGNoZWV3YS5nb3aCEHd3dy5hbWFyaWxsby5n
b3aCG3d3dy5hbWFyaWxsb2NpdmljY2VudGVyLmNvbYIXd3d3LmFtYXJpbGxvbGli
cmFyeS5vcmeCFXd3dy5hbWFyaWxsb3BhcmtzLm9yZ4Iad3d3LmJvYmJ5am9uZXNn
b2xmY2x1Yi5jb22CFXd3dy5jaG9vc2VraW5nbWFuLmNvbYIVd3d3LmNpLmhlcmN1
bGVzLmNhLnVzghV3d3cuY2l0eW9ma2luZ21hbi5nb3aCEXd3dy5jaXR5b2Zwc2wu
Y29tghd3d3cuY2l0eW9mc2FuY2FybG9zLm9yZ4Ifd3d3LmV4cGxvcmVmcmVkZXJp
Y2tjYXJlZXJzLmNvbYIPd3d3LmZseS1hbWEuY29tgg53d3cuZmx5b2t2LmNvbYIR
d3d3LmdpbGlicmFyeS5vcmeCD3d3dy5naXBhcmtzLmNvbYIQd3d3LmdpcG9saWNl
Lm9yZ4IMd3d3LmdpdWQuY29tghZ3d3cuZ2xhc3RvbmJ1cnktY3QuZ292ghJ3d3cu
Z2xlbmRhbGVjYS5nb3aCF3d3dy5nbGVuZGFsZXRyYW5zaXQuY29tghV3d3cuZ2xl
bmRhbGV2b3Rlcy5vcmeCEHd3dy5ncGx0ZXhhcy5vcmeCFHd3dy5ncmFuZC1pc2xh
bmQuY29tghV3d3cuZ3JhbmRmb3Jrc2dvdi5jb22CGnd3dy5ncmVlbndvb2Rjb3Vu
dHktc2MuZ292ghh3d3cuaGFub3Zlci10b3duc2hpcC5vcmeCEnd3dy5oYXN0aW5n
c21uLmdvdoIYd3d3LmhlbmRlcnNvbi1jb3VudHkuY29tghV3d3cuaGVybmFuZG9j
b3VudHkudXOCFnd3dy5ob2ZmbWFuZXN0YXRlcy5vcmeCEHd3dy5odmlsbGV0bi5v
cmeCH3d3dy5pbmR1c3RyeWJ1c2luZXNzY291bmNpbC5vcmeCEnd3dy5rZXJzaGF3
LnNjLmdvdoIWd3d3LmtpbmdtYW5haXJwb3J0LmNvbYIRd3d3Lmtpc3NpbW1lZS5v
cmeCDXd3dy5sYmN3ZC5vcmeCEnd3dy5sZWVzYnVyZ3ZhLmdvdoIWd3d3LmxleWRl
bnRvd25zaGlwLmNvbYIVd3d3LmxvdmVsYWZheWV0dGUub3JnghR3d3cubWFkZXJh
Y291bnR5LmNvbYIOd3d3Lm5ld2Fyay5vcmeCGHd3dy5wYW5oYW5kbGV0aWNrZXRz
LmNvbYISd3d3LnBlYXJsYW5kdHguZ292ghh3d3cucGxheWdvbGZhbWFyaWxsby5j
b22CDHd3dy5wdHJjLm9yZ4IQd3d3LnJsdGF5bG9yLmNvbYITd3d3LnJvY2hlc3Rl
cm1uLmdvdoINd3d3LnJwbG1uLm9yZ4IRd3d3LnNhbmZvcmRmbC5nb3aCEnd3dy5z
YXJhc290YWZsLmdvdoISd3d3LnNhcmFzb3RhcGQub3JnghR3d3cuc21pdGgtY291
bnR5LmNvbYIVd3d3LnNycWF1ZGl0b3JpdW0uY29tghl3d3cudG93bm9mbW9ycmlz
dmlsbGUub3Jngg53d3cudXNkMzgzLm9yZ4ITd3d3LndlbmF0Y2hlZXdhLmdvdoIW
d3d3Lnllc2ZyZWRlcmlja3ZhLmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3Bgsr
BgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0
Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AG9Tdqwx8DEZ2JkApFEV/3cV
HBHZAsEAKQaNsgiaN9kTAAABcH2CSZkAAAQDAEcwRQIhAPo7ko/PXX+wBT83DfZ/
vnzFmA764RE5tFVH/ysOzz+1AiAuosTcaAD3g4cYWXdz3F3j6NXp5ew3YUbPaz9j
VNsNTQB2AAe3XBvlfWj/8bDGHSMVx7rmV3xXlLdq7rxhOhpp06IcAAABcH2CSZ4A
AAQDAEcwRQIhAKc8L4v48GkeY44Fs9euYKDEa1xSDX9SdOL4eS+NCOHHAiAcjI5R
XFoUnU8F3oOlenU6QBJyL21ZUv+DTsjmi4SnaTANBgkqhkiG9w0BAQsFAAOCAQEA
iyYF1NChQ5nLVUViiKkf9b4n6nhNoQ683tadmrUEmluF0ev4NOhSxwC8Va5ZQRsO
vF0i6LThXy2gE57Me26bTHlQamo8Al4xau3kJzxq5qhrFfvvXmZy7NHGpLJllcqt
e+oPpgx7wQ0gNEalNPYqalzpYb+Gjc1SZS8QYrCuQVN2ZGDhTzOTdoW0lYL2ofCJ
zTxEILvuHpw7GHrcjycR8RJ8Lc2UsLkhyMnKou6YbmbdpfEE9QqO1vzui5Fqx6nQ
+7e/aNipmBMlR6BcOmkVWFu27TIRGGSuLnaRvyDll4qr2PX5yDOpTWUR88YYSAs9
Ds3lpyUrmJZCpa+zprjCsQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA80Y4gBJ/xDWuh8g8Rui4
FlzJswJNiMY5oFGRTLe6IWLqCKJhDHhOdELPeBW0RtoZfF9h5fSSkMcPmD8IKA2F
quClm6Xb02tAK2AsPdX7pq8mvJ9B8GAA/VYWKFKxVaX9q2kYSfTJ4pnBzCQqgDVr
KNfsZRr3PeIy04FwjyQm6i95E5dpYb4svJBXafKeakridkIliHNSZ78MqwMAX2nZ
Jp/ynlRjUhgI7PaBn9WR308dK3vabKBlimgV89nNMVOlZht05C8FA2cqLUoXkWAD
0F9wdLdh8hvp6FFetx8k3FRSGe/3lbUQxCkvzoezV0Ewq85vF2/TV93igmU7agRf
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307753047737736232907586995706634301225220
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-25 17:00:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-25 17:00:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-c2.granicusgovaccess.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30710535226577320029628976875279898025983105719009541602312556341706780594047482949856211386765059020815300358167922570138109518559479382238490287602049183147111275579646138228957763201036169479242658184051734205022047512286726252117036646907468014220702518412657934412725806662578776522121374764796411614392189602424974854334073847216885188769892910529115732850450589582988179077174946666135034834038540780165958026495204237694003548168258733143664697858500441270727639091987216220866572899354567414420883611624080724435676572594034209454152906129757369644961529146292871582376815288431050256185088947701387012366127
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8853c78fb05b0e31eaf35548bc93f3ad52845ebc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1336 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amw.amarillo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comdev.amarillo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-c2.granicusgovaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spanish.wenatcheewa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amarillo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amarillociviccenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amarillolibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amarilloparks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bobbyjonesgolfclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.choosekingman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.hercules.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofkingman.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofpsl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofsancarlos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorefrederickcareers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fly-ama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flyokv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gilibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gipolice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glastonbury-ct.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glendaleca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glendaletransit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glendalevotes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gpltexas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grand-island.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandforksgov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenwoodcounty-sc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hanover-township.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hastingsmn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.henderson-county.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hernandocounty.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoffmanestates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hvilletn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.industrybusinesscouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kershaw.sc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingmanairport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kissimmee.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lbcwd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leesburgva.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leydentownship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lovelafayette.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maderacounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newark.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.panhandletickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pearlandtx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playgolfamarillo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ptrc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rltaylor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochestermn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rplmn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanfordfl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sarasotafl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sarasotapd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smith-county.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.srqauditorium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townofmorrisville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usd383.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wenatcheewa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yesfrederickva.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001707d8249990000040300473045022100fa3b928fcf5d7fb0053f370df67fbe7cc5980efae11139b45547ff2b0ecf3fb502202ea2c4dc6800f7838718597773dc5de3e8d5e9e5ec376146cf6b3f6354db0d4d00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001707d82499e0000040300473045022100a73c2f8bf8f0691e638e05b3d7ae60a0c46b5c520d7f5274e2f8792f8d08e1c702201c8c8e515c5a149d4f05de83a57a753a4012722f6d5952ff834ec8e68b84a769
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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