san-b2.granicusgovaccess.net

Issued by R3

About this certificate

This digital certificate with serial number 03:4e:73:0a:6d:a1:ca:97:a1:6c:ff:d6:57:ba:e3:70:2a:b2 was issued on by Let's Encrypt.

With 64 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san-b2.granicusgovaccess.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4e:73:0a:6d:a1:ca:97:a1:6c:ff:d6:57:ba:e3:70:2a:b2
Serial Number (int): 288031797781198871008598136200428581300914
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7e:70:42:df:db:45:2b:4c:ff:7e:88:57:7c:c3:31:40:f6:61:55:1e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e2:2b:09:9b:de:fb:43:40:8f:f0:d7:72:e2:a0:5d:d8:4f:e7:55:6a
Fingerprint (sha256): 2b:c9:d9:c6:96:97:9b:0f:87:f8:d1:dd:8f:ae:02:1f:f0:3a:ba:a0:5a:81:dd:bf:f0:49:a6:22:1e:7e:2e:7b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate san-b2.granicusgovaccess.net

64

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-b2.granicusgovaccess.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

insite.manhattanbeach.gov
intranet.mountprospect.org
library.pflugervilletx.gov
parks.marionfl.org
parks.pflugervilletx.gov
police.pflugervilletx.gov
san-b2.granicusgovaccess.net
selp.marionfl.org
utilitybilling.pflugervilletx.gov
www.allegancounty.org
www.bces.wa.gov
www.choose-newton.com
www.ci.millbrae.ca.us
www.cityoforoville.org
www.cityofranchocordova.org
www.cityofredding.org
www.cleanwaterteam.com
www.co.okeechobee.fl.us
www.experiencemountprospect.org
www.fairfield.ca.gov
www.ffpubliclibrary.org
www.funinmontgomery.com
www.hacm.org
www.intranet.pbfl.org
www.louisville-library.org
www.lpacfl.com
www.marionflcoc.org
www.mayoclinichealthsystemeventcenter.com
www.mdaqmd.ca.gov
www.midvalecity.org
www.montgomeryal.gov
www.montgomeryzoo.com
www.mountainview.gov
www.mountprospect.org
www.nationalcityca.gov
www.newtonkansas.com
www.noaca.org
www.norfolkpubliclibrary.org
www.novatofire.org
www.nuecesco.com
www.ocalafl.gov
www.ocalapd.gov
www.ourpureh2o.com
www.outagamie.org
www.palmdesert.gov
www.peoriaaz.gov
www.peoriaed.com
www.peoriasportscomplex.com
www.pflugervilletx.gov
www.plymouthmn.gov
www.portolavalley.net
www.poudre-fire.org
www.provo.org
www.queencreekaz.gov
www.ranchocordovapd.com
www.raymore.com
www.redwoodcity.org
www.richlandbusiness.com
www.robbinsdalemn.com
www.rockhillusa.com
www.rosamondcsd.com
www.unioncountyky.org
www.villageofnorridge.com
www.visitpeoriaaz.com

Other certificates including the domain name granicusgovaccess.net

(limited to 100 certificates)
san-b1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-z1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net

Certificate

The complete raw certificate details for san-b2.granicusgovaccess.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzG8WAlGOr8g4BG9oTJr
3vImjLGcbzskh0oUeoWSozP1pYq3Ar35MMne65Xij8fphErhsVxwR4HOYka1DvCs
cIs3cyEA5PhU4LcIJH4/5mEtTGu1rCdCkdv8Y5tAGTNV3p7EOs8LlKrdSiupUAD6
fNCJ8SxVyUQ6k+a4OQCOoLYqVTq+SWp8x5G5HdL0WLs89PToHUFSH4V1V3c9fDzy
GW1lCEoYWIUzomsSxR11aeaT7SaXdI93x7R064BBS8W6O7CAnwRd2KmYMJgmtsWb
f5AQe6efItEX/IbPGEm7jrrCuXDEZChoHE1m/I8Qp8AOLJG2stUcQWExQwN5WCL0
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288031797781198871008598136200428581300914
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-25 06:44:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-23 06:44:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-b2.granicusgovaccess.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18076603206934557688460084152677536137263138595285202406038936468304986391335342171303455005785003761165198593901910547776018498933747347339986288790280127053892826937627664672349303154677897759320411846087933539485726647747235957921536623664840034006898621123538559132624390856410117304798925556318333768898987106320001979121139023267067479405971660578647118914246313283722665921394185292529139811695331650425200358239378716149664194083366831305688999452343590380153420871544663017519348551565183331078102416217988361984694335687161797338126129778873960133857451863679773425506176756714814507107107761398093931803797
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7e7042dfdb452b4cff7e88577cc33140f661551e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1474 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insite.manhattanbeach.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.mountprospect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'library.pflugervilletx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parks.marionfl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parks.pflugervilletx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'police.pflugervilletx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-b2.granicusgovaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selp.marionfl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utilitybilling.pflugervilletx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allegancounty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bces.wa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.choose-newton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.millbrae.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityoforoville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofranchocordova.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofredding.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cleanwaterteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co.okeechobee.fl.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.experiencemountprospect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fairfield.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ffpubliclibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.funinmontgomery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hacm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intranet.pbfl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.louisville-library.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lpacfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marionflcoc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mayoclinichealthsystemeventcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mdaqmd.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.midvalecity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.montgomeryal.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.montgomeryzoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountainview.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountprospect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationalcityca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newtonkansas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.noaca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norfolkpubliclibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novatofire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nuecesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ocalafl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ocalapd.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourpureh2o.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.outagamie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.palmdesert.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peoriaaz.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peoriaed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peoriasportscomplex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pflugervilletx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plymouthmn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portolavalley.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poudre-fire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.provo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.queencreekaz.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ranchocordovapd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raymore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redwoodcity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richlandbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robbinsdalemn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rockhillusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosamondcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unioncountyky.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.villageofnorridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitpeoriaaz.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a2ba703e400000403004730450220087afe0c5dcc884c89bb4254ffef6d761e15036fc52eefc1b46380dd2923f1ab02210085ebb7be45456118ca7698bca49129ac19f31c2b28e0cf23dd0d9acb84e45144007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a2ba703eb000004030046304402207e7fd37d375e3dab4ea4c7b652bda9ef24099137628e0662d058c3c4274ad87c02200cdbbcd97e07c6c96dd4f120c3dfe04fc13723fd05402abf78f0790b3cb0e476
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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