san-a2.granicusgovaccess.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2a:65:d0:cf:ef:30:53:2f:44:cc:04:f7:26:22:a0:99:04 was issued on by Let's Encrypt.

With 70 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san-a2.granicusgovaccess.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2a:65:d0:cf:ef:30:53:2f:44:cc:04:f7:26:22:a0:99:04
Serial Number (int): 275764053448690281793983162334227734763780
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 08:b7:89:8e:7e:99:52:e7:a9:3f:1e:0b:7e:9f:52:d0:f6:f5:b9:10
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d3:6c:f7:a0:4d:2d:e7:3f:b0:cc:6d:28:e1:12:c5:f4:e7:ea:2a:34
Fingerprint (sha256): 2b:47:a3:7f:0c:9d:52:1b:64:aa:df:d7:3e:37:6b:d1:76:c2:ba:58:c0:13:ed:cf:2a:be:02:72:d7:df:c8:4a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate san-a2.granicusgovaccess.net

70

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-a2.granicusgovaccess.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

capitalprojects.c3gov.com
intranet.c3gov.com
kids.whittierlibrary.org
localhistory.whittierlibrary.org
recreation.c3gov.com
san-a2.granicusgovaccess.net
www.artsblooming.org
www.bloomingtonparks.org
www.brazoriacountytx.gov
www.c3gov.com
www.ci.hibbing.mn.us
www.cityblm.org
www.cityofelcajon.us
www.cityofgoleta.org
www.cityofgreenwoodsc.com
www.cityofindustry.org
www.cityofkeller.com
www.cityofwhittier.org
www.co.eau-claire.wi.us
www.cypressca.org
www.darenc.com
www.downtownodessatx.com
www.east-wenatchee.com
www.emeraldtriangle.us
www.englewoodco.gov
www.fairfaxva.gov
www.fairhopeal.gov
www.farmington-ct.org
www.fauquiercounty.gov
www.fdlco.wi.gov
www.fdlsheriff.com
www.fillmoreca.com
www.franklintwpnj.org
www.germantown-tn.gov
www.gilbertaz.gov
www.golfgreenwoodsc.com
www.gptx.org
www.grandview.org
www.greenbeltmd.gov
www.guilfordcountync.gov
www.herndon-va.gov
www.hillsboro-oregon.gov
www.homesteadmuseum.org
www.hursttx.gov
www.industryexpocenter.com
www.industryyal.org
www.jacksoncounty-il.gov
www.jaspercountysc.gov
www.keepodessabeautiful.org
www.kentwa.gov
www.localhealthauthority.org
www.odessa-tx.gov
www.odessacvb.com
www.odessapd.com
www.odessatxparks.org
www.paramountcity.com
www.pecostx.gov
www.pvestates.org
www.redefiningcommerce.com
www.sao12.org
www.scgov.net
www.soldotna.org
www.southpasadenaca.gov
www.thekellerpointe.com
www.townofdillon.com
www.uptowngreenwood.com
www.visitgrandprairietx.com
www.visitgreenwoodsc.com
www.whittierlibrary.org
www.whittierprcs.org

Other certificates including the domain name granicusgovaccess.net

(limited to 100 certificates)
san-b1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-z1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net

Certificate

The complete raw certificate details for san-a2.granicusgovaccess.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbaZuSrdCCt39P1W9eQy
mhK2f6da0WSMttRKKxPMwNUQ+UtpFszHoxAEithqBb8zv9qK4uJ75JvxfGGVs1er
qRauaEyKzPqVQcHwXoWtk7366P0BIxSh8TsrhSJQfrUQOcPbb6hy6noAMrklpsIj
yJl9e6jViG551Vzvryj3hp4nsDdxTV9hrHiLoCPh0847H+Qu6dC6kw6X77Fkl8Rp
BH8LVOstkqHIUAl8cPW5wNmgj3a62sIFy3C+6M3uK0bkXRr5NCrj4VrRXJd3ZYMb
swHC3iM1KQv2rm+KxgOWeRgKKAM+stWbCEznw+BKByG1POkxRtoARaUKBgDeE6Ca
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275764053448690281793983162334227734763780
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-06 20:07:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-05 20:07:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-a2.granicusgovaccess.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25968896171531761333526045808179720498333339930307659919351589791616906201937200861949285330325199297059845555797993123298180913318919875348079107641328611465773623685282216030127877471873366961153716163133991809565625414070108038296823546746246704932261825315221284969383254175579241572585183455668758888393112901003477196761586672163748366054762797298667444069528589378759216067064607892447898741791908079294792462809955950381498722598791407182312343245971765698386888724627258924362295605930124083693968727225855686700907181024359840195786341831819562862840314931131607814967256957686212120823883144368796924418641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							08b7898e7e9952e7a93f1e0b7e9f52d0f6f5b910
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1576 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalprojects.c3gov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.c3gov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kids.whittierlibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localhistory.whittierlibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recreation.c3gov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-a2.granicusgovaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artsblooming.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bloomingtonparks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brazoriacountytx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.c3gov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.hibbing.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityblm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofelcajon.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofgoleta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofgreenwoodsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofindustry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofkeller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofwhittier.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co.eau-claire.wi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cypressca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.darenc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.downtownodessatx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.east-wenatchee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emeraldtriangle.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.englewoodco.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fairfaxva.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fairhopeal.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmington-ct.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fauquiercounty.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fdlco.wi.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fdlsheriff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fillmoreca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.franklintwpnj.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.germantown-tn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gilbertaz.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.golfgreenwoodsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gptx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenbeltmd.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guilfordcountync.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.herndon-va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hillsboro-oregon.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homesteadmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hursttx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.industryexpocenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.industryyal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jacksoncounty-il.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jaspercountysc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepodessabeautiful.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kentwa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.localhealthauthority.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odessa-tx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odessacvb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odessapd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odessatxparks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountcity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pecostx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pvestates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redefiningcommerce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sao12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scgov.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soldotna.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southpasadenaca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thekellerpointe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townofdillon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uptowngreenwood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitgrandprairietx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitgreenwoodsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whittierlibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whittierprcs.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d086714b30000040300473045022100d08c68b6775fc4eab53e8fa0281a3c71530b2c56b888f3e3f27e2281d3addb7a02203461a1212a2728e617eba7428a99b1ea8b3fc9e817eb4e9fda71c7a603c4120800750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d086716c000000403004630440220731dfc6dcec1f4eed58dc122b7847f6b1c61d4267acd08905fbb29eb0649c3f80220067b28277fc7dc9f2dac43775ea8fd575e6881bcc1dccbf63a8af8ffabd384b8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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