san-d2.granicusgovaccess.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f4:d3:b5:41:e0:48:80:10:97:75:09:db:bb:9a:68:d3:62 was issued on by Let's Encrypt.

With 60 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san-d2.granicusgovaccess.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f4:d3:b5:41:e0:48:80:10:97:75:09:db:bb:9a:68:d3:62
Serial Number (int): 344647163572957907460036162319932386235234
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cd:eb:db:d7:21:9b:ea:cc:74:44:e1:97:36:f0:52:00:2f:39:39:8b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 34:81:b2:28:b2:b6:03:bc:6e:b5:c3:6c:06:87:27:ad:12:dd:ae:a4
Fingerprint (sha256): 29:67:46:9e:21:08:44:e1:26:a0:28:42:65:35:a6:44:fb:b5:ad:02:74:fc:28:c1:70:7a:9e:a4:8c:3b:23:c1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate san-d2.granicusgovaccess.net

60

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-d2.granicusgovaccess.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

inet.cityofvacaville.com
san-d2.granicusgovaccess.net
sanjose.visioninternet.net
www.casitaswater.org
www.ci.vacaville.ca.us
www.cityofcherryville.com
www.cityofdavis.org
www.cityofhernando.org
www.cityofkaty.com
www.cityofsanteeca.gov
www.cityofwalnut.org
www.cityofwinder.com
www.co.monterey.ca.us
www.co.portage.wi.us
www.co.washington.ar.us
www.collinsvilleil.org
www.currycounty.org
www.dallas-lovefield.com
www.developpalmbay.org
www.edwarddufresnecommunitycenter.com
www.firedepartment.org
www.kcmo.gov
www.kirkwoodelectric.org
www.kirkwoodmo.org
www.kirkwoodparksandrec.org
www.lexingtonnc.gov
www.mountrainiermd.org
www.mypalmbeachclerk.com
www.oakcreekwi.org
www.ocsd.com
www.okc.gov
www.orbgdpu.com
www.palmbayflorida.org
www.palmspringsca.gov
www.pcbgov.com
www.pinecrest-fl.gov
www.pinecrestgardens.org
www.richmondtx.gov
www.ryeny.gov
www.santa-clarita.com
www.scpparksandrec.com
www.sharpsburgnc.com
www.silverthorne.org
www.sswd.org
www.stcharlesparish-la.gov
www.suncitygrand.com
www.suwanee.com
www.tasin.org
www.taylorsvilleut.gov
www.tcwd.ca.gov
www.townofwestspringfield.org
www.trio-us.org
www.victoriatx.org
www.wallawallapubliclibrary.org
www.wallawallawa.gov
www.wdm.iowa.gov
www.westcovina.org
www.westportct.gov
www.wilson-co.com
www.wsps.org

Other certificates including the domain name granicusgovaccess.net

(limited to 100 certificates)
san-b1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-z1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net

Certificate

The complete raw certificate details for san-d2.granicusgovaccess.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKijCCCXKgAwIBAgISA/TTtUHgSIAQl3UJ27uaaNNiMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MTkxODQ4MDZaFw0x
OTEyMTgxODQ4MDZaMCcxJTAjBgNVBAMTHHNhbi1kMi5ncmFuaWN1c2dvdmFjY2Vz
cy5uZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWHxNr8blYgAQL
uwuUnencwXlkmfZ04xiK93vsoagD8sypoOkUXp1N88lYMCgAG6nwB0vYqsBp+H6m
D1hsXUKqAVOE1CHf7tLC1kvjz1eRJLVTOr6xfEaGLYeM9YTuF1JDqMt444iLQYEy
HdAUvRqWI2Oif2ErEbhlvfaxdFKIMekUcwH9FFziNcApTQPxK5L+0YBL5Va1d8fM
Eakh8BWPob4VKgreeJS//uZWx3A2oKlWnX/caYKZ9Pv6Jp8/oDRll9709Tqbn0eA
vWIvL37nEzXkoJ0SOJFjxzqPoRwO1FO7zNI31KpE1IYHsku/k5gQEfQis5fkTXWO
0SCjgtITAgMBAAGjggeLMIIHhzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFM3r29ch
m+rMdEThlzbwUgAvOTmLMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh
MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZy8wggU/BgNVHREEggU2MIIFMoIYaW5ldC5jaXR5b2Z2
YWNhdmlsbGUuY29tghxzYW4tZDIuZ3JhbmljdXNnb3ZhY2Nlc3MubmV0ghpzYW5q
b3NlLnZpc2lvbmludGVybmV0Lm5ldIIUd3d3LmNhc2l0YXN3YXRlci5vcmeCFnd3
dy5jaS52YWNhdmlsbGUuY2EudXOCGXd3dy5jaXR5b2ZjaGVycnl2aWxsZS5jb22C
E3d3dy5jaXR5b2ZkYXZpcy5vcmeCFnd3dy5jaXR5b2ZoZXJuYW5kby5vcmeCEnd3
dy5jaXR5b2ZrYXR5LmNvbYIWd3d3LmNpdHlvZnNhbnRlZWNhLmdvdoIUd3d3LmNp
dHlvZndhbG51dC5vcmeCFHd3dy5jaXR5b2Z3aW5kZXIuY29tghV3d3cuY28ubW9u
dGVyZXkuY2EudXOCFHd3dy5jby5wb3J0YWdlLndpLnVzghd3d3cuY28ud2FzaGlu
Z3Rvbi5hci51c4IWd3d3LmNvbGxpbnN2aWxsZWlsLm9yZ4ITd3d3LmN1cnJ5Y291
bnR5Lm9yZ4IYd3d3LmRhbGxhcy1sb3ZlZmllbGQuY29tghZ3d3cuZGV2ZWxvcHBh
bG1iYXkub3JngiV3d3cuZWR3YXJkZHVmcmVzbmVjb21tdW5pdHljZW50ZXIuY29t
ghZ3d3cuZmlyZWRlcGFydG1lbnQub3Jnggx3d3cua2Ntby5nb3aCGHd3dy5raXJr
d29vZGVsZWN0cmljLm9yZ4ISd3d3Lmtpcmt3b29kbW8ub3Jnght3d3cua2lya3dv
b2RwYXJrc2FuZHJlYy5vcmeCE3d3dy5sZXhpbmd0b25uYy5nb3aCFnd3dy5tb3Vu
dHJhaW5pZXJtZC5vcmeCGHd3dy5teXBhbG1iZWFjaGNsZXJrLmNvbYISd3d3Lm9h
a2NyZWVrd2kub3Jnggx3d3cub2NzZC5jb22CC3d3dy5va2MuZ292gg93d3cub3Ji
Z2RwdS5jb22CFnd3dy5wYWxtYmF5ZmxvcmlkYS5vcmeCFXd3dy5wYWxtc3ByaW5n
c2NhLmdvdoIOd3d3LnBjYmdvdi5jb22CFHd3dy5waW5lY3Jlc3QtZmwuZ292ghh3
d3cucGluZWNyZXN0Z2FyZGVucy5vcmeCEnd3dy5yaWNobW9uZHR4LmdvdoINd3d3
LnJ5ZW55LmdvdoIVd3d3LnNhbnRhLWNsYXJpdGEuY29tghZ3d3cuc2NwcGFya3Nh
bmRyZWMuY29tghR3d3cuc2hhcnBzYnVyZ25jLmNvbYIUd3d3LnNpbHZlcnRob3Ju
ZS5vcmeCDHd3dy5zc3dkLm9yZ4Iad3d3LnN0Y2hhcmxlc3BhcmlzaC1sYS5nb3aC
FHd3dy5zdW5jaXR5Z3JhbmQuY29tgg93d3cuc3V3YW5lZS5jb22CDXd3dy50YXNp
bi5vcmeCFnd3dy50YXlsb3JzdmlsbGV1dC5nb3aCD3d3dy50Y3dkLmNhLmdvdoId
d3d3LnRvd25vZndlc3RzcHJpbmdmaWVsZC5vcmeCD3d3dy50cmlvLXVzLm9yZ4IS
d3d3LnZpY3RvcmlhdHgub3Jngh93d3cud2FsbGF3YWxsYXB1YmxpY2xpYnJhcnku
b3JnghR3d3cud2FsbGF3YWxsYXdhLmdvdoIQd3d3LndkbS5pb3dhLmdvdoISd3d3
Lndlc3Rjb3ZpbmEub3JnghJ3d3cud2VzdHBvcnRjdC5nb3aCEXd3dy53aWxzb24t
Y28uY29tggx3d3cud3Nwcy5vcmcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYB
BAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v
cmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdQBvU3asMfAxGdiZAKRRFf93FRwR
2QLBACkGjbIImjfZEwAAAW1LEUXHAAAEAwBGMEQCIFQWX+yaS0ULVg81FAUoDjBM
IxComK5kiS8ZErs9H9I6AiBiGT/qsQ+vrUk+bAJ7NSXgwWvPYo0PVrXPcE3nYTDC
DwB3AGPy283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iNAAABbUsRRcEAAAQD
AEgwRgIhALYo1JyMGZdAkkLl5TRDl40aQdG9cPdUEHPBcS6lZHmbAiEAxHelBfht
y/rggAKLhLnJycqwSWW7UMph3FqIwuIc8Y8wDQYJKoZIhvcNAQELBQADggEBABbn
Xsw9kz8QbE2hBVt0vxlha7DYT9Bk0hu/V5kejK1aJ2vjzYjiA7CyEXee0RIm+iDK
hd8kwGQwHTnB5WwNZaES7mTq2uKyrCdervxHhSMyttNYlN1JYvSv/mjj/PvrJyS1
0HXfDoKU2o1dtCqmqWZ7xJiiF5Jn7E6pbg9V9pMjaspk953HrXJhFKLIklPKScZS
1VZOaba1tlPRa291KOHkCLn05hunDB2jak24tk9duB42lhlr3maW/KtJgP67In59
flqIoH92k2iQH1aBguIw1U0jaN89P56T+c53Oef3ypD+yqNcRr3G2CqUtHI8YR6D
rVqXVGGzQQRwrUxsPRY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1h8Ta/G5WIAEC7sLlJ3p
3MF5ZJn2dOMYivd77KGoA/LMqaDpFF6dTfPJWDAoABup8AdL2KrAafh+pg9YbF1C
qgFThNQh3+7SwtZL489XkSS1Uzq+sXxGhi2HjPWE7hdSQ6jLeOOIi0GBMh3QFL0a
liNjon9hKxG4Zb32sXRSiDHpFHMB/RRc4jXAKU0D8SuS/tGAS+VWtXfHzBGpIfAV
j6G+FSoK3niUv/7mVsdwNqCpVp1/3GmCmfT7+iafP6A0ZZfe9PU6m59HgL1iLy9+
5xM15KCdEjiRY8c6j6EcDtRTu8zSN9SqRNSGB7JLv5OYEBH0IrOX5E11jtEgo4LS
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344647163572957907460036162319932386235234
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-19 18:48:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-18 18:48:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-d2.granicusgovaccess.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27030321343322648408263857470312011585413766205420256480758440749535381659836882697549457234160150502823204388202817935340007329176537876072310561254048031873514321644642885419259459358101320314404972778865527975708548262503199788285158872475649524474499409496178804915735475415986619901240247699879163950541186732260601446968940253608576825627695127502018211183717661817453042205016181776089800020242482674764112219839010281576051271242182708342236007085218184513107682757322100488434164733001308525705739272710340332959442589568671985853717258481217501291488463366522329445071692561639740041539576516530561580454419
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cdebdbd7219beacc7444e19736f052002f39398b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1334 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inet.cityofvacaville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-d2.granicusgovaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanjose.visioninternet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casitaswater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.vacaville.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofcherryville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofdavis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofhernando.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofkaty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofsanteeca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofwalnut.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofwinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co.monterey.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co.portage.wi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co.washington.ar.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collinsvilleil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.currycounty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dallas-lovefield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.developpalmbay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edwarddufresnecommunitycenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firedepartment.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kcmo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kirkwoodelectric.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kirkwoodmo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kirkwoodparksandrec.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lexingtonnc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountrainiermd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mypalmbeachclerk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oakcreekwi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ocsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.okc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orbgdpu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.palmbayflorida.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.palmspringsca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcbgov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pinecrest-fl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pinecrestgardens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richmondtx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ryeny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santa-clarita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scpparksandrec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharpsburgnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.silverthorne.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sswd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcharlesparish-la.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suncitygrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suwanee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tasin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taylorsvilleut.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tcwd.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townofwestspringfield.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trio-us.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.victoriatx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wallawallapubliclibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wallawallawa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wdm.iowa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westcovina.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westportct.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wilson-co.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wsps.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d4b1145c70000040300463044022054165fec9a4b450b560f351405280e304c2310a898ae64892f1912bb3d1fd23a022062193feab10fafad493e6c027b3525e0c16bcf628d0f56b5cf704de76130c20f00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d4b1145c10000040300483046022100b628d49c8c1997409242e5e53443978d1a41d1bd70f7541073c1712ea564799b022100c477a505f86dcbfae080028b84b9c9c9cab04965bb50ca61dc5a88c2e21cf18f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0016e75ecc3d933f106c4da1055b74bf19616bb0d84fd064d21bbf57991e8cad5a276be3cd88e203b0b211779ed11226fa20ca85df24c064301d39c1e56c0d65a112ee64eadae2b2ac275eaefc47852332b6d35894dd4962f4affe68e3fcfbeb2724b5d075df0e8294da8d5db42aa6a9667bc498a2179267ec4ea96e0f55f693236aca64f79dc7ad726114a2c89253ca49c652d5564e69b6b5b653d16b6f7528e1e408b9f4e61ba70c1da36a4db8b64f5db81e3696196bde6696fcab4980febb227e7d7e5a88a07f769368901f568182e230d54d2368df3d3f9e93f9ce7739e7f7ca90fecaa35c46bdc6d82a94b4723c611e83ad5a975461b3410470ad4c6c3d16