san-c2.granicusgovaccess.net

Issued by R3

About this certificate

This digital certificate with serial number 03:f9:1a:5b:cb:54:2d:04:be:be:63:d8:c3:2a:5c:29:78:fa was issued on by Let's Encrypt.

With 65 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=san-c2.granicusgovaccess.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:f9:1a:5b:cb:54:2d:04:be:be:63:d8:c3:2a:5c:29:78:fa
Serial Number (int): 346102203709497199578655918256829367941370
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d8:aa:9a:da:18:58:88:31:9d:72:72:97:80:22:87:b1:e4:60:81:ef
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f2:da:19:c4:72:03:7e:e0:1f:cb:ad:49:b1:af:91:b3:86:de:38:6c
Fingerprint (sha256): 2d:32:18:2f:72:9b:2b:d4:3f:01:a8:e2:f4:e4:22:a3:76:8d:94:e4:3d:2c:cb:de:2b:9d:eb:f7:54:81:8c:a7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate san-c2.granicusgovaccess.net

65

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-c2.granicusgovaccess.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amw.amarillo.gov
comdev.amarillo.gov
library.mountainview.gov
san-c2.granicusgovaccess.net
www.amarillo.gov
www.amarillociviccenter.com
www.amarillolibrary.org
www.amarilloparks.org
www.artspotsilverthorne.org
www.cityoforange.org
www.cityofpsl.com
www.donaanacounty.org
www.explorefrederickcareers.com
www.fly-ama.com
www.flyokv.com
www.gilibrary.org
www.giparks.com
www.gipolice.org
www.giud.com
www.glastonburyct.gov
www.glendaleca.gov
www.glendaletransit.com
www.glendalevotes.org
www.gpltexas.org
www.grand-island.com
www.grandforksgov.com
www.hanover-township.org
www.hastingsmn.gov
www.henderson-county.com
www.herculesca.gov
www.hernandocounty.us
www.hoffmanestates.org
www.janesvillewi.gov
www.kershaw.sc.gov
www.kissimmee.gov
www.lbcwd.org
www.leesburgva.gov
www.lesherartscenter.org
www.lovelafayette.org
www.maderacounty.com
www.manteca.gov
www.mlbair.com
www.morrisvillenc.gov
www.newark.org
www.orangepubliclibrary.org
www.panhandletickets.com
www.parks.pearlandtx.gov
www.pearlandtx.gov
www.perrycountyal.gov
www.playgolfamarillo.com
www.ptrc.org
www.rltaylor.com
www.rochestermn.gov
www.rplmn.org
www.sarasotacountylibraries.org
www.sarasotacountyparks.com
www.sarasotafl.gov
www.sarasotapd.org
www.smith-county.com
www.srqauditorium.com
www.usd383.org
www.wenatcheewa.gov
www.willingboronj.gov
www.woodsidefire.org
www.yesfrederickva.com

Other certificates including the domain name granicusgovaccess.net

(limited to 100 certificates)
san-b1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-z1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net

Certificate

The complete raw certificate details for san-c2.granicusgovaccess.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0pwocIc6ULRFn2H+YLt
m8K6j7cAwPqenfwiZ/H/nDca1rVqzjehJV+iSaIVQXIXlWIf9DTT8oleZprCAz0t
qIiEtyKNVLDHfMNVYNlN393Oke5QgAJU5SH3RyQSwP/cyAITwJwuKuWuLQfJbyfg
67/ZII1rs9kyXs+BPUL+rsb97OcNc9FhCfn1QWLG18Lwy1RiWYOjNA1+FgiBPGlT
4JAedHzDgnvcDc82nuUb1haXuramny5gxiq0S/4eaurSwGWjNGsUbN6oFXkvR58e
DiYViroo4strQkQWiLY16BNTgvjlROEzDm2zWA4acTJJdD9koyEFnInTgGtR3w7y
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346102203709497199578655918256829367941370
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-16 14:24:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-15 14:24:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-c2.granicusgovaccess.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24653177184833473060224194481355533824793573078860662056174101553096506927708096801038363592554711089727928168526178541503139427353917391464915876538496998755394284349988631665319954920297725854881124804239111072677451760491844637499118399728573553534590614130514345090354689049801488821166209481379223801334498571326004661824027433638978026109513443851766068661034942683952663042713200280600726665495482872847443923145164115780795657796419201339744306106985969907853431966410507326745537643239472910723858261109025766578022427732992590271373267446575624417446805866149012663400712719056641631547474906729677807612423
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d8aa9ada185888319d727297802287b1e46081ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1424 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amw.amarillo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comdev.amarillo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'library.mountainview.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-c2.granicusgovaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amarillo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amarillociviccenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amarillolibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amarilloparks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artspotsilverthorne.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityoforange.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofpsl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.donaanacounty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorefrederickcareers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fly-ama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flyokv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gilibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gipolice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glastonburyct.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glendaleca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glendaletransit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glendalevotes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gpltexas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grand-island.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandforksgov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hanover-township.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hastingsmn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.henderson-county.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.herculesca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hernandocounty.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoffmanestates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.janesvillewi.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kershaw.sc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kissimmee.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lbcwd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leesburgva.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lesherartscenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lovelafayette.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maderacounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manteca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mlbair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morrisvillenc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newark.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orangepubliclibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.panhandletickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parks.pearlandtx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pearlandtx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perrycountyal.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playgolfamarillo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ptrc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rltaylor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochestermn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rplmn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sarasotacountylibraries.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sarasotacountyparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sarasotafl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sarasotapd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smith-county.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.srqauditorium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usd383.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wenatcheewa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.willingboronj.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woodsidefire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yesfrederickva.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ee78209e7000004030048304602210091431da1d4772b6588c37e1983dfc43c42112a028acc8516b707fb8e31ff2aec022100a8f05010b6cbd8ec4b1ecf25af454560dd7bffb9c67bfb3319b6b1120def893200760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ee78209c30000040300473045022100f74ca0187ea60e6aad17070b43647f8188adec4fb95afd3a9de7676b7cabae5e02201fdd9a31327e412c15d4d740734cc0d0aea202c439e794d98eacc3c2824330c2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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