san-b1.granicusgovaccess.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3a:b1:f4:3e:db:ae:dc:ac:87:46:41:4a:e2:e8:b5:3d:a9 was issued on by Let's Encrypt.

With 63 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san-b1.granicusgovaccess.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3a:b1:f4:3e:db:ae:dc:ac:87:46:41:4a:e2:e8:b5:3d:a9
Serial Number (int): 281309776627297063615351854420831080103337
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cc:98:56:5f:4a:27:34:11:89:e3:59:c0:48:0a:86:4f:19:53:f1:41
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 36:6a:fa:51:cd:f1:a6:81:67:3f:b7:d6:36:7d:ff:bb:d8:99:b8:fd
Fingerprint (sha256): 45:04:25:b1:f9:64:81:d5:35:1b:ec:a4:ef:c6:ed:32:80:fa:2b:46:65:2a:f1:99:54:fb:68:a0:fa:d7:f4:89

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate san-b1.granicusgovaccess.net

63

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-b1.granicusgovaccess.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arts.torranceca.gov
business.torranceca.gov
san-b1.granicusgovaccess.net
transit.torranceca.gov
www.arizonamuseumofnaturalhistory.org
www.boonecounty.iowa.gov
www.brentwoodtn.gov
www.bryancountyga.org
www.ccgov.org
www.ci.punta-gorda.fl.us
www.ci.richland.wa.us
www.ci.rolling-hills-estates.ca.us
www.citymb.info
www.cityofalbertville.com
www.cityoflancasterca.org
www.cityofloveland.org
www.cityofmarion.org
www.cityofmonrovia.org
www.cityofrockhill.com
www.cityofsantacruz.com
www.co.marquette.wi.us
www.coffeycountyks.org
www.danapoint.org
www.dedham-ma.gov
www.dsrsd.com
www.eid.org
www.elkgrove.org
www.enid.org
www.falconfieldairport.com
www.lafourchegov.org
www.lauderhill-fl.gov
www.library.torranceca.gov
www.louisvilleco.gov
www.lowermerion.org
www.lvmwd.com
www.madisoncountyal.gov
www.mankatomn.gov
www.maplevalleywa.gov
www.marioncountyfl.org
www.marylandheights.com
www.mathewscountyva.gov
www.mcdonoughga.org
www.mchenrycountyil.gov
www.melbourneflorida.org
www.mesaaz.gov
www.mesacountsoncollege.org
www.mesalibrary.org
www.mesaparks.com
www.mnairspectacular.com
www.nevadadot.com
www.nixa.com
www.oaklawn-il.gov
www.richfieldmn.gov
www.richland.lib.wa.us
www.richlandhills.com
www.richlandparksandrec.com
www.robbinsdalemn.com
www.rockhillusa.com
www.rosamondcsd.com
www.roswellatwork.com
www.roswellgov.com
www.selectmesa.com
www.torranceca.gov

Other certificates including the domain name granicusgovaccess.net

(limited to 100 certificates)
san-b1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-z1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-d1.granicusgovaccess.net

Certificate

The complete raw certificate details for san-b1.granicusgovaccess.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGwAXv20ULKP8ChgCz5K
ZGWQLzwP8v4aWiVs8PFGqGHaSIuDq9jH0A05AoLYSvjYkGe/TaObGsTy58ixcvD2
aGwfDKKg8IV4oCrRyHrA6A6oqsMVsd80nuqt1umftzrC2oaaaN+PnyI+fALa+65m
Nb54Z1ibZb8v1+IQlD/JMaJuA1Cat0yFP0Y3bkHdK7cdfSwyKUcXaKHy98ig0qKc
6Hv+NckIvrlggH8akLzxFNXN0+1RfTzaHF6GWrDqsqlJL1+0FGhBafK2zkhEZdaz
QNHIoZeNzP1jcz7VkqPy5TJyWjKnPYEv004zVeXgLTTAg+OVVySiNTt9mzUEUmPn
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 281309776627297063615351854420831080103337
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-05 19:47:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-03 19:47:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-b1.granicusgovaccess.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22776152393547619928800132086684995395915830262984479572177067292707421536148029658289546802816089163184156744936248492529000877185528225080916935038495530100995330791542220925992084969878472155420999140543262556138872475967614720621190531152654270933518622167418378516903347475261994353092960110091870246430975498350402479734606311535210045861329968946880732028866011053882069229830068098492488127140818872723700372268797794370384372005236586771164059306822784001650956741047413776173456105137506286550989139513973395488198089037447707854871747431935748842366565160813596661018941615240859006855530737116817196836819
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cc98565f4a27341189e359c0480a864f1953f141
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1430 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arts.torranceca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.torranceca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-b1.granicusgovaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transit.torranceca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arizonamuseumofnaturalhistory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boonecounty.iowa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brentwoodtn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bryancountyga.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccgov.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.punta-gorda.fl.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.richland.wa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.rolling-hills-estates.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citymb.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofalbertville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityoflancasterca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofloveland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofmarion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofmonrovia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofrockhill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofsantacruz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co.marquette.wi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coffeycountyks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.danapoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dedham-ma.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsrsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elkgrove.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.falconfieldairport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lafourchegov.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lauderhill-fl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.library.torranceca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.louisvilleco.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lowermerion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvmwd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madisoncountyal.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mankatomn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maplevalleywa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marioncountyfl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marylandheights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mathewscountyva.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcdonoughga.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mchenrycountyil.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melbourneflorida.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesaaz.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesacountsoncollege.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesalibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesaparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mnairspectacular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nevadadot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nixa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oaklawn-il.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richfieldmn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richland.lib.wa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richlandhills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richlandparksandrec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robbinsdalemn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rockhillusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosamondcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roswellatwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roswellgov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.selectmesa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.torranceca.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e3d524a260000040300483046022100c55ebbaa5d7787959858a4d8a0d90510630b07dc422a1e240bf225cb0e052cf4022100d39fa22ffbfe5ecc122a5ecf9771093d5c2ab631c47167ff1d9dec6b4ab2201e00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e3d524a50000004030047304502202f9a756ac10ebe5ef1f8db0a19872ac700a69f675784873b2ca297394cbf7e290221008fa55c70e5cb39f61855de198561d820733abc97636e5c6a88b44c43c819e877
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0080364d4ecdacd47f0b0ca39b6bf54b31c42bf8dfb052001eaa11345ec1750dfa3da48294c5c36839d385659bcb83b01a95b774b01d02856867fd4cd76fa6e66463abcae0c7cd16a7b3ecdd6256e2054d252328dbcdd2cc0edcf4b05d42ba9162907c65ae2b6dc69f6ad0a07a259d1a99ece075b59183dfa0c7d7e822f7a4f6da774d9b8548f56bc5f6012b2cca925c2d23801070c1788206153a28af9175f98601e7d53919194b5791ec5f525da4e0604c752186c24c2438f5b648c8203efd29aa165a6f99a00729c0cd7385422602626ac98fa8940fb841f2f8ec563ae373afdb6e7215d1b98b60b13137e28c70f76448daf82c5ce7a552b3dcfe20362e08f6