san-b2.granicusgovaccess.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:73:4c:ec:ca:1f:94:b8:6e:62:4d:21:a3:be:c2:54:1f:10 was issued on by Let's Encrypt.

With 52 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san-b2.granicusgovaccess.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:73:4c:ec:ca:1f:94:b8:6e:62:4d:21:a3:be:c2:54:1f:10
Serial Number (int): 300571580800475770784478441098989729488656
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 26:1c:26:37:70:b8:d0:f2:c2:be:bf:7b:ef:1c:d1:ed:da:4e:99:4c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a2:47:1b:8f:a5:f5:87:30:f6:64:59:9a:7e:79:f8:e7:e7:76:a0:a2
Fingerprint (sha256): 27:96:2c:ff:41:de:e5:a9:aa:a1:49:7d:82:6f:1c:a8:96:1e:b8:92:08:36:cd:39:2e:73:cb:2f:6a:c9:3b:c3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate san-b2.granicusgovaccess.net

52

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-b2.granicusgovaccess.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

intranet.mountprospect.org
library.pflugervilletx.gov
mdaqmd.ca.gov
parks.pflugervilletx.gov
police.pflugervilletx.gov
san-b2.granicusgovaccess.net
utilitybilling.pflugervilletx.gov
www.belleayre.com
www.ci.millbrae.ca.us
www.ci.punta-gorda.fl.us
www.ci.redmond.or.us
www.cityoforoville.org
www.cityofpalmdesert.org
www.cityofranchocordova.org
www.cityofredding.org
www.co.okeechobee.fl.us
www.experiencemountprospect.org
www.hacm.org
www.midvalecity.org
www.montgomeryal.gov
www.mountprospect.org
www.nationalcityca.gov
www.newtonkansas.com
www.noaca.org
www.norfolkpubliclibrary.org
www.novatofire.org
www.nuecesco.com
www.ocalafl.org
www.ocalamariontpo.org
www.ocalapd.com
www.outagamie.org
www.pccsk12.com
www.peachtreecornersga.gov
www.peoriaaz.gov
www.peoriaed.com
www.peoriasportscomplex.com
www.pflugervilletx.gov
www.pikeroad.us
www.plymouthmn.gov
www.portolavalley.net
www.poudre-fire.org
www.provo.org
www.pvkansas.com
www.queencreek.org
www.raymore.com
www.redwoodcity.org
www.reno.gov
www.selectranchocordova.org
www.suntran.org
www.villageofnorridge.com
www.visitpeoriaaz.com
www.vopnc.org

Other certificates including the domain name granicusgovaccess.net

(limited to 100 certificates)
san-b1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-z1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net

Certificate

The complete raw certificate details for san-b2.granicusgovaccess.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyzfg0AuAvPoMAHYOQeH
h393W/sJQgwO4uTrX1ShzzrWS/7YtfXVeWXz8KrnlfDIwPzcIWn5iYjDmoDiGI77
0N9zVFJluxQXY0ISq5jM3hy0eJOnmkUkPV/2HXEFUDcbwWhsvCkDuNO/g7C/GSI3
QuwlC/Q5oMxE9+evM4WDGlyHA2c0/mURXzQ5qfa8+dJDmxZLIUIkeWqerxPB6rf/
LFSmJ2SP1UO1FZa1pCpWgA3AZizAeuhYELiB7LU1erETTncFmid96INMdxmLcq0s
Ce2FLjzVyZX3qrUFxLdBorOUrlMuYcGxCEBUusFz+a/eU+/JjC4dADfZeRT5niE4
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300571580800475770784478441098989729488656
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-02 18:52:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-01 18:52:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-b2.granicusgovaccess.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25648503656695083092318809092006580356100523097804932784284894373559865041434091752042397806973350901471095843694926205043846769600494937486974255709724947174534337694377473151773911394048899890922549621753648648590704662108835126117797082245073982631653499413716091725725898784008167297472056048736365381265252807202406982216961131297851807571865531630705900961705885495668462878545765575701186798712487962746705720051471140416103128406791636803794227448522791515314513056968590451343337511304787116570813802749575576829035513441944196086812513037919762105261468492682408037752044383797578667726310081986879926908929
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							261c263770b8d0f2c2bebf7bef1cd1edda4e994c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1160 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.mountprospect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'library.pflugervilletx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdaqmd.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parks.pflugervilletx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'police.pflugervilletx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-b2.granicusgovaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utilitybilling.pflugervilletx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belleayre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.millbrae.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.punta-gorda.fl.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.redmond.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityoforoville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofpalmdesert.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofranchocordova.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofredding.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co.okeechobee.fl.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.experiencemountprospect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hacm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.midvalecity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.montgomeryal.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountprospect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationalcityca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newtonkansas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.noaca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norfolkpubliclibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novatofire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nuecesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ocalafl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ocalamariontpo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ocalapd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.outagamie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pccsk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peachtreecornersga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peoriaaz.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peoriaed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peoriasportscomplex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pflugervilletx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pikeroad.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plymouthmn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portolavalley.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poudre-fire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.provo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pvkansas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.queencreek.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raymore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redwoodcity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reno.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.selectranchocordova.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suntran.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.villageofnorridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitpeoriaaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vopnc.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169df9c9adc0000040300473045022100a329a8bf10c66d262bc22faf268fe59ba481102eee10ff9fce384b1a4bae517102200e4e85cc854433d024ce92e6bda4763f9fdd7826cae45df578cc5914b5b0b2de00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169df9c9ae000000403004830460221009b78523db0b5ba608af4a6ac241be0e948544a8a81422520dd826b0b587a801a022100da08dd8f38b6d76c0093b0e2b3deefa0417f7ce283074666614de2c1dd7fdbc4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0020a33dea37a33b625cb88fb5cafa5bcc3c1a393f13617e452d22173b070b58fb20ac08a4d8b511ff1addbf1a1a2207b305fbdea07012f3297a4b366dcfdad938df0cfe5823972039ae13f5d71cc37c3188c2d6562c960be869ae225f92a6fdc136437a3098141fb48a1681aca079a18b2826b72ebce1cbdd6a33e829d98e776d543489bbb1e50cb7ddec9c749fd176fa2621ebc9847092228b9b5b810581d24830649563da60c5857b888aaf93128f387cfa7acb15f78b78f73c786a6783b4f834e1832c62b2f4cd2d427fd61c5128ddc3e57bed4cf75830ae6e4e7455cfc77d54b070a614d68864ef9d7b5c6899207e54eefc438be44233a3b260ee41a984c2