san-h1.granicusgovaccess.net

Issued by R3

About this certificate

This digital certificate with serial number 03:01:50:fb:f0:fd:12:c0:a9:42:c9:64:54:68:26:87:91:70 was issued on by Let's Encrypt.

With 57 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=san-h1.granicusgovaccess.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:01:50:fb:f0:fd:12:c0:a9:42:c9:64:54:68:26:87:91:70
Serial Number (int): 261784786556204797550658000743516799996272
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 08:ce:d0:0a:38:1a:5f:9f:fb:9b:fd:55:f5:59:83:cb:21:43:42:3e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 92:99:e4:83:0f:61:db:4d:33:64:4a:b2:ab:2d:46:08:36:9c:c6:ad
Fingerprint (sha256): 27:e5:e5:67:b8:f7:ae:8c:a7:99:3a:46:db:02:bb:48:72:c6:2a:d3:62:e3:d2:16:b3:8a:12:74:93:4d:d7:c9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate san-h1.granicusgovaccess.net

57

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-h1.granicusgovaccess.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

countyconnect.unioncountync.gov
developmentpermits.mountainview.gov
fire.ci.oceanside.ca.us
firerescue.bedfordcountyva.gov
inside.countyofkings.com
insite.minnetonkamn.gov
parks.bedfordcountyva.gov
san-h1.granicusgovaccess.net
sheriff.bedfordcountyva.gov
www-h.weknowgovernment.com
www.berwyn-il.gov
www.carmel.in.gov
www.centralvalleyfire.com
www.chavescounty.gov
www.childcare.virginia.gov
www.choosecarmelin.com
www.comptoncity.org
www.coosbayor.gov
www.creditriver-mn.gov
www.dillonamp.com
www.doe.virginia.gov
www.dominionwsd.org
www.douglascountylibrary.org
www.ecodevlewisville.com
www.edgartownpolice.org
www.encinitasca.gov
www.fortsmithar.gov
www.gcoem.org
www.icgov.org
www.indio.org
www.indiopd.org
www.jeffersoncountyar.gov
www.jerometownship.com
www.jobfestkern.com
www.jyfmuseums.org
www.kernpublicworks.com
www.kernvote.com
www.lawtonok.gov
www.lvmpd.com
www.macedonia.oh.us
www.macrec.com
www.mesaconventioncenter.com
www.ncyte.net
www.olatheks.gov
www.osidebiz.com
www.rcs800mhz.org
www.rgvmpo.org
www.scottcityks.org
www.smithfieldri.gov
www.socialcirclega.gov
www.uclnc.org
www.uppermac.org
www.visitscottcity.com
www.walnutcreekartsrec.org
www.walnutcreekconnected.com
www.walnutcreekpdca.gov
www.westlafayette.in.gov

Other certificates including the domain name granicusgovaccess.net

(limited to 100 certificates)
san-b1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-z1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net

Certificate

The complete raw certificate details for san-h1.granicusgovaccess.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tX/cJ7razNkC8f3FdED
Gdzl/cwCkbEgrWRq74s/9bVlSm+UhtsrenFqx3/HxsmskxiFpCGk2ZoNX4Oq1o05
+Pujm0nQthm+Iagg0vFuBBLia8Zam5DASexu9+JqJHZ7Ut/FtGj88uTbHikvPCdv
P9Ycg3/71pTJ7Xhbd9jePzOHbmtB4zkvSxUZ/7q5EuF35uvLvCW5wKuFbANZJXUn
Xk9LE52MHgP6NZzeoOInfuIaK66wlers0E+q+qVwV3js/jgVAX39iJXSH54iEcTx
T4y8CDVrdiG5khNfT6cMKMD7HzPaV+Dpu7EcA06YUXu8hCTnUG20K3/1874E2rVf
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261784786556204797550658000743516799996272
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 12:28:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 12:28:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-h1.granicusgovaccess.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30150242836138442180220213126482442310730550438615003257248465570292635048381906025035098485968558961632463530321218450078236483609742530376147762531943244242780187870496976434554351832305180818140967543802317772573241055867461147393106282291038082526142173851066838257757190025681187059625526587161604947674767181310833025651462471417489081767338607095744890091039495507360412918048950733273258633151827099627894164727035302043211534167464443602721362918539147997198551203061681782460248357481737976848902552629972105294127530044497525235328033560466232928513900222583101421397098526237052219804613674897506097782737
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							08ced00a381a5f9ffb9bfd55f55983cb2143423e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1300 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countyconnect.unioncountync.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developmentpermits.mountainview.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fire.ci.oceanside.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firerescue.bedfordcountyva.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.countyofkings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insite.minnetonkamn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parks.bedfordcountyva.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-h1.granicusgovaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sheriff.bedfordcountyva.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-h.weknowgovernment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berwyn-il.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carmel.in.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralvalleyfire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chavescounty.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.childcare.virginia.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.choosecarmelin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comptoncity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coosbayor.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.creditriver-mn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dillonamp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doe.virginia.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dominionwsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.douglascountylibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecodevlewisville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edgartownpolice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.encinitasca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fortsmithar.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gcoem.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icgov.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indiopd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jeffersoncountyar.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jerometownship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jobfestkern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jyfmuseums.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kernpublicworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kernvote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lawtonok.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvmpd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macedonia.oh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macrec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesaconventioncenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncyte.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olatheks.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osidebiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rcs800mhz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rgvmpo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scottcityks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smithfieldri.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.socialcirclega.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uclnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uppermac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitscottcity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walnutcreekartsrec.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walnutcreekconnected.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walnutcreekpdca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westlafayette.in.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e9eff9cd70000040300483046022100d5b5b39e17b978a2c1f9883fd6abcd09d094ffd6bcfab73319efbfa43ff34b7b022100d6817dc763cd1a8c9586426658fd506c5c48e62ba2c2965b8bc1f3e0cb81e09500750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e9eff9d1c0000040300463044022071059b827eb66a8bcf620eff7b5a8c264facca91d47c3ecdcd70a88e446bf911022071a4dc4ed6531611497fb9bab284d033a0a483547c291baf3295b23adbf44eed
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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