san-g1.granicusgovaccess.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:8c:42:58:7b:e1:03:9b:fb:19:63:b8:6e:4c:5a:f3:f1:4d was issued on by Let's Encrypt.

With 62 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san-g1.granicusgovaccess.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8c:42:58:7b:e1:03:9b:fb:19:63:b8:6e:4c:5a:f3:f1:4d
Serial Number (int): 396176863578381561822989788823624602612045
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ce:1d:62:bc:99:32:d4:d4:c0:07:01:e5:40:a1:3c:4d:91:9f:42:5d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 04:bd:0e:3c:0a:2f:66:a3:38:09:e7:a6:cd:4c:c2:1e:c7:06:df:db
Fingerprint (sha256): 2a:1b:65:5a:c0:ee:ad:57:e4:49:47:c6:86:a1:ed:bf:0a:3e:66:83:26:8a:ce:f7:05:70:d2:5f:f0:c6:d7:28

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate san-g1.granicusgovaccess.net

62

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-g1.granicusgovaccess.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

demo.weknowgovernment.com
econdev.wooddale.com
epic.tempeschools.org
govaccess.weknowgovernment.com
granicusdemo.visioninternet.net
library.whatcom.edu
midwest.weknowgovernment.com
northwest.weknowgovernment.com
san-g1.granicusgovaccess.net
south.weknowgovernment.com
southeast.weknowgovernment.com
west.weknowgovernment.com
www.ci.staunton.va.us
www.ci.tumwater.wa.us
www.cityofshelby.com
www.cityofyankton.org
www.cosatx.us
www.governmentresource.com
www.ronholifield.com
www.san-clemente.org
www.san-marcos.net
www.sandpointidaho.gov
www.sandyspringsga.gov
www.santaclaraca.gov
www.sarasotaclerk.com
www.sbvmwd.com
www.sclibrary.org
www.seatacwa.gov
www.sgprc.org
www.shakopeemn.gov
www.sheboygancounty.com
www.shorelinewa.gov
www.shoreviewcommunitycenter.com
www.shoreviewmn.gov
www.siliconvalleypower.com
www.simivalley.org
www.sioux-city.org
www.slocity.org
www.smyrnaga.gov
www.southsnofire.org
www.ssf.net
www.stauntonbusiness.com
www.stlouispark.org
www.stlucieco.gov
www.superiorcolorado.gov
www.svaca.com
www.svpfiber.com
www.tempeschools.org
www.thomasville-nc.gov
www.townofsmyrna.org
www.townoftruckee.com
www.tredyffrin.org
www.tulare.ca.gov
www.vwd.org
www.whatcom.edu
www.williamsburgva.gov
www.wilmingtonde.gov
www.wilmingtonnc.gov
www.wixomgov.org
www.wooddale.com
www.yeswilliamsburg.com
www.yolocounty.org

Other certificates including the domain name granicusgovaccess.net

(limited to 100 certificates)
san-b1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-z1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net

Certificate

The complete raw certificate details for san-g1.granicusgovaccess.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZEgALMS2QoYuPaE77R7
uFIWfnIDQKG0+i9b4gwoyT7natr5+lZWRwP6OEmEOvFdW9/7kdoWg8WL7TNKY4kv
LsYObAv+lYypFJzwBjJ9PfQ8U2aiEbZrPkRPTqCSBj1pAlbBmAyn+2+0QO4ze4Cy
OWfDWnrtXZK4kzJxQrcB5nvnTAzktE/5aLMJITbPIeFOwE5kqZeWf7+jgHwunk2n
WMTiGlls3L2CEWkonQGaJnNAdUUCrfcUIChlDvfnrSUdGSZoBgQx/86nsmdnJRnw
qs69avasBVow1d6VXBw+HcrYXSRaoxUMUPX2PUjPFkLNL8NxHanNEwcC+GDm0b63
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 396176863578381561822989788823624602612045
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 16:51:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-02 16:51:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-g1.granicusgovaccess.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22415743788975262564321244689187623779395837864121906621744228354894306233560201200499467643095200736779194185735107169589168556093816288501672176931350590496966532664198390265449379848503324684485408118707717955555414342122047952459166502672711217980264458927077821023990096775256976648071308613241907044815772315208588288079553610095297963677870893778569822979721689488286624146193643077235584692710799088865962811649003177752594760181530692467691786310361602792344382783063532918551480338079642098494275192398805805957212490357023260751419268352858487763500074282069747451959379917565471515958896028196472612632457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ce1d62bc9932d4d4c00701e540a13c4d919f425d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1393 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.weknowgovernment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'econdev.wooddale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epic.tempeschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'govaccess.weknowgovernment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'granicusdemo.visioninternet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'library.whatcom.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midwest.weknowgovernment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northwest.weknowgovernment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-g1.granicusgovaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'south.weknowgovernment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southeast.weknowgovernment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'west.weknowgovernment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.staunton.va.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.tumwater.wa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofshelby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofyankton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cosatx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.governmentresource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ronholifield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.san-clemente.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.san-marcos.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandpointidaho.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandyspringsga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santaclaraca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sarasotaclerk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sbvmwd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sclibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seatacwa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sgprc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shakopeemn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sheboygancounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shorelinewa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shoreviewcommunitycenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shoreviewmn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.siliconvalleypower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simivalley.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sioux-city.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slocity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smyrnaga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southsnofire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ssf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stauntonbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stlouispark.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stlucieco.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.superiorcolorado.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.svaca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.svpfiber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tempeschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thomasville-nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townofsmyrna.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townoftruckee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tredyffrin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tulare.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vwd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whatcom.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.williamsburgva.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wilmingtonde.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wilmingtonnc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wixomgov.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wooddale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yeswilliamsburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yolocounty.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170a6ac693c0000040300473045022100b0a46bb63ccd87a9eb419b137a817be02db151d249c117b3b0698d810a5a54ab022003dfa8e97203827319d58df2022176a85f2f6cd2f4c5e74105279b94f8a7dcbf00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170a6ac6975000004030046304402203994ebc5f36b1050bc5ec31ecafe9aa063da473244b0b1db43a34daee477c0c8022027dca0d1de6326f7f5d9092574dcbca6bdc13f6a7db346d31d5c6339555c4d59
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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