san-e2.granicusgovaccess.net

Issued by R3

About this certificate

This digital certificate with serial number 04:c2:ab:29:4c:38:e9:f6:d2:f9:85:4c:16:64:a9:3f:2d:b3 was issued on by Let's Encrypt.

With 66 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san-e2.granicusgovaccess.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c2:ab:29:4c:38:e9:f6:d2:f9:85:4c:16:64:a9:3f:2d:b3
Serial Number (int): 414691435327125784418255152088276568845747
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 42:2e:6b:33:bb:47:47:44:24:89:62:a4:d6:46:c9:7f:4d:9c:f2:36
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 72:04:35:29:87:44:f4:91:42:a4:16:89:bc:44:3d:b8:8f:a2:80:ed
Fingerprint (sha256): 41:03:55:01:ec:cb:82:b8:12:b1:75:e7:6d:10:fe:f4:23:2b:ab:e7:a4:bf:29:6b:bb:4b:da:c8:2b:e0:88:11

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate san-e2.granicusgovaccess.net

66

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-e2.granicusgovaccess.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

citycouncil.atlantaga.gov
comnet.cityofmerced.org
gyr.fortlauderdale.gov
intranet.fremont.gov
san-e2.granicusgovaccess.net
www.albanycounty.com
www.atlantafirerescue.com
www.atlantaga.gov
www.atlantapd.org
www.blendontwp.org
www.bluecc.edu
www.brokenarrowok.gov
www.ccvaatraining.org
www.chanhassenmn.gov
www.cityofbartow.net
www.cityofcaseyil.org
www.cityofcashmere.org
www.cityofhialeahgardens.com
www.cityoflacrosse.org
www.cityofmerced.org
www.cityoforting.org
www.cityofsavage.com
www.cityofseward.us
www.clerkofcourt.maricopa.gov
www.colusasutteryolochildsupport.org
www.cottonwoodheights.utah.gov
www.crane-transit.com
www.destinationelsegundo.com
www.douglasvilleconferencecenter.com
www.douglasvillega.gov
www.ed3online.org
www.elsegundo.org
www.elsegundobusiness.com
www.elsegundofd.org
www.elsegundolibrary.org
www.elsegundopd.org
www.elsegundorecparks.org
www.explorecharlescounty.com
www.falconheights.org
www.fay-nccrimestoppers.org
www.fayettevillenc.gov
www.fcpr.us
www.flpd.org
www.flyfay.com
www.flyfxe.com
www.fortlauderdale.gov
www.fremont.gov
www.gillettewy.gov
www.lemont.il.us
www.leonianj.gov
www.longboatkey.org
www.lyonco.org
www.montgomerysheriff.com
www.mundelein.org
www.ncletc.org
www.operationceasefire.com
www.prairiecenter.org
www.reevescounty.org
www.rentershelpline.org
www.smfd.org
www.sunriversharc.com
www.sweetwatertx.gov
www.tdpud.org
www.townofhertfordnc.com
www.villageofschaumburg.com
www.vopnc.org

Other certificates including the domain name granicusgovaccess.net

(limited to 100 certificates)
san-b1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-z1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-d1.granicusgovaccess.net

Certificate

The complete raw certificate details for san-e2.granicusgovaccess.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3kCZjUAyNE42BZTYmX5
WqOvV0/awa1QPkLjSCUj/MxdODNimxj1HbLTZyevQTjg+OSFJGdCfdo7wUzq1kEG
Ubxu9u0WvwA+TfHqGjn0OCl5IUyOj+tfzwW8ZpBiCWnxier9TTQmJfqIVDhJW73m
RWjAbUToxyxQFHooOSqJL9XnBUFOVbOXUOZMZvXnhvFtKG2QLnlR/QEAp9hrutls
L6r5yguUfte1HZct/1NLrZ2Yut+anxlBWZ+qDfDK1yQIKBs/Rxn7bgp+nTofvBF1
GKT15IlCxQnjyE7u35GY2X36HS2WN5JH5KbiWTHCFiCeWBFA0XwBm1ZKCEYwQj8+
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 414691435327125784418255152088276568845747
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-22 15:55:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-23 15:55:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-e2.granicusgovaccess.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24676141413745964052923139829061804957044328728277258885500521422629560294800992884094543628050513633022110489252783331908829691992947082226960332029840382093803066285876413927485684809247429346622019656462233069501366307508659819537929562428031612155965292931907301370282114705486099785029935099010647902987512092590297877821377364219140573239734321487057085624753627338015952354368449392080085228178769654817187084960367772309909690566537798345301121640537678609632961642053785297896636190150692497769169062294978196228333808879097626671107288437238739676194787848160135328803197192515485565796628118612921209011743
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							422e6b33bb474744248962a4d646c97f4d9cf236
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1512 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citycouncil.atlantaga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comnet.cityofmerced.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gyr.fortlauderdale.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.fremont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-e2.granicusgovaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albanycounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlantafirerescue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlantaga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlantapd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blendontwp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluecc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brokenarrowok.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccvaatraining.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chanhassenmn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofbartow.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofcaseyil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofcashmere.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofhialeahgardens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityoflacrosse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofmerced.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityoforting.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofsavage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofseward.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clerkofcourt.maricopa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colusasutteryolochildsupport.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cottonwoodheights.utah.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crane-transit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.destinationelsegundo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.douglasvilleconferencecenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.douglasvillega.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ed3online.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elsegundo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elsegundobusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elsegundofd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elsegundolibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elsegundopd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elsegundorecparks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorecharlescounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.falconheights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fay-nccrimestoppers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fayettevillenc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fcpr.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flpd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flyfay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flyfxe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fortlauderdale.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fremont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gillettewy.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lemont.il.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leonianj.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.longboatkey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lyonco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.montgomerysheriff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mundelein.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncletc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.operationceasefire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prairiecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reevescounty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rentershelpline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smfd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunriversharc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sweetwatertx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tdpud.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townofhertfordnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.villageofschaumburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vopnc.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001867a0d97d30000040300473045022100f78f048dc1dd8d43bde8937d81616738db695e4ab9f06d49ee3e6746e00aa94d02204b4941703c2cba28559d76ad357e78ba19de4a7b3f54c7cb67c8b0b4b1ea81700075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001867a0d97e50000040300463044022015b86a5eb66cb94a0c490b7b17093e44be024f1efe2f1f2a3839edb93fbc8a2402207cf678f0ed77d1e77b81f0cf84e453a807a2bf0f87ee1ef514aa52efb99e9506
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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