support.cityofmontrose.org

- City of Montrose -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 7c:bc:29:8d:38:0a:66:0a:91:98:ed:0b:61:de:ae:5c was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

City of Montrose

Organization: City of Montrose
State / Province: Colorado
Locality: Montrose
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 7c:bc:29:8d:38:0a:66:0a:91:98:ed:0b:61:de:ae:5c
Serial Number (int): 165801266054042511748526350857999920732
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: c7:3e:66:aa:d3:f0:f0:b3:89:30:52:95:b8:9b:91:6f:e7:10:21:78
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 81:be:52:1d:4e:7a:6e:61:d9:77:37:36:21:f4:b8:e5:84:d9:7f:71
Fingerprint (sha256): 47:52:18:6d:dd:79:89:38:f2:1b:61:f3:0c:4b:9f:77:d4:c9:9c:46:a4:7e:60:fb:ab:2f:79:8b:58:e2:06:f7

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate support.cityofmontrose.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for support.cityofmontrose.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

support.cityofmontrose.org
www.support.cityofmontrose.org

Other certificates including the domain name cityofmontrose.org

(limited to 100 certificates)
support.billinhelpdesk.com
helpdesk.livestockfeedsplc.com
support.henrypeters.com
eyehelp.eyemartexpress.com
support.billinhelpdesk.com
www.cityofmontrose.org
eyehelp.eyemartexpress.com
eyehelp.eyemartexpress.com
servicedesk.grupocorinsa.hn
eyehelp.eyemartexpress.com
servicedesk.grupocorinsa.hn
servicedesk.additionfi.com
helpdesk.maca.net.au
support.billinhelpdesk.com
support.lantech.com
www.cityofmontrose.org
eyehelp.eyemartexpress.com
support.billinhelpdesk.com
servicedesk.biggroup.co.uk
helpdesk.motirservices.com
support.billinhelpdesk.com
helpdesk.livestockfeedsplc.com
vpn.cityofmontrose.org
servicedesk.roosterpoultry.com.fj
www.cityofmontrose.org
support.cityofmontrose.org
helpdesk.maca.net.au
www.cityofmontrose.org
helpdesk.lincolncountybancorp.com
support.henrypeters.com
eyehelp.eyemartexpress.com
eyehelp.eyemartexpress.com
helpdesk.lincolncountybancorp.com
helpdesk.dayair.org
helpdesk.mepco.biz
helpdesk.maca.net.au
servicedesk.lakeside.net
www.cityofmontrose.org
vpn.cityofmontrose.org
helpdesk.lincolncountybancorp.com
helpdesk.dayair.org
vpn.cityofmontrose.org
eyehelp.eyemartexpress.com
support.billinhelpdesk.com
sd.bbacerts.co.uk
helpdesk.motirservices.com
sdp.charlesignatius.co.in
helpdesk.stsholdings.net
support.cityofmontrose.org
helpdesk.maca.net.au
helpdesk.mepco.biz
eyehelp.eyemartexpress.com
apps.cityofmontrose.org
mia.grupoitsupport.com
gis.cityofmontrose.org
gis.cityofmontrose.org
www.cityofmontrose.org
omsweb.cityofmontrose.org
www.cityofmontrose.org
support.lantech.com
servicedesk.lakeside.net
eyehelp.eyemartexpress.com
support.henrypeters.com
sd.bbacerts.co.uk
eyehelp.eyemartexpress.com
helpdesk.lincolncountybancorp.com
helpdesk.greenstonedatasolutions.com
eyehelp.eyemartexpress.com
sd.jltest.ca
eyehelp.eyemartexpress.com
helpdesk.mepco.biz
eyehelp.eyemartexpress.com
support.lantech.com
servicedesk.grupocorinsa.hn
servicedesk.lakeside.net
sdp.charlesignatius.co.in
support.billinhelpdesk.com
servicedesk.i3secure.co.uk
it.servicedesk.qsix.com
cws.cityofmontrose.org
mia.grupoitsupport.com
www.cityofmontrose.org
servicedesk.biggroup.co.uk
servicedesk.grupocorinsa.hn
eyehelp.eyemartexpress.com
it.servicedesk.qsix.com
support.billinhelpdesk.com
www.cityofmontrose.org
eyehelp.eyemartexpress.com
helpdesk.lincolncountybancorp.com
servicedesk.grupocorinsa.hn
vpn.cityofmontrose.org
support.billinhelpdesk.com
www.cityofmontrose.org
support.cityofmontrose.org
it.servicedesk.qsix.com
apps.cityofmontrose.org
it.servicedesk.qsix.com
ithelp.cityofmontrose.org
gis.cityofmontrose.org

Certificate

The complete raw certificate details for support.cityofmontrose.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGQTCCBSmgAwIBAgIQfLwpjTgKZgqRmO0LYd6uXDANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y
NDA1MDgyMjA3MjVaFw0yNTA1MjUyMjA3MjNaMHMxCzAJBgNVBAYTAlVTMREwDwYD
VQQIEwhDb2xvcmFkbzERMA8GA1UEBxMITW9udHJvc2UxGTAXBgNVBAoTEENpdHkg
b2YgTW9udHJvc2UxIzAhBgNVBAMTGnN1cHBvcnQuY2l0eW9mbW9udHJvc2Uub3Jn
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3DQbPxl3n4oUrds+9/k5
ZlMV8GaoQdNa/HQael9ssrCYpjL9MuH8CAbfKF7oUx4b8nwZxFiy5YI5sjHO1aZN
UaAQF9Dlpf5yAvWoq0/Z6aMPAHJnVlY/sX7mtW/Qf7A+8kXTIv+gjD41nL2b2lAi
2rpY+UDaihhW1moBxhMbXJ2b4SKmuqSDomtQ9sJSedgyHWsMpkznwrrXWbw/um8W
0yaUCShGEfuuoB6Le76OIhLiwE6tyqIkuof9xQsLEHnrjoUCwNDp10k63o6Ikgdq
3W0qYDZQtT/WS0u+QsX7z976xtahlY3pDFOEkg/CPbJSyyitEpU8424S0tMEq4GF
Zml2cetEfilQuNpwe59XUBN4icUx4sNj268MxiZY0Nt4VF7dzrACzjOAsr1HLuHO
/9vhln2S3l2+TJdyaIM8PPGDsYPvBqlnj898oZrg+2RpuLAtbET564hsWaj4EQI5
bvzpLfurs/qVjufZayaleG8RRS37s6imiX4Hq5x4QClV+kNmugBzL59qnceeWMOF
43eAsiyYArejmXD7Zvqrcaxcdz2RjHOAdkg1rp9buZfQspnRxPpJykOQAWN5qyID
mgRFCS1Txobz4YtuYwxj9XpEYqbxc0p01FlEAQAnvbv86qUYm4JXVsMJSv0EaUUD
CR7mRT30Vv6x8LDqyn9OBukCAwEAAaOCAYcwggGDMAwGA1UdEwEB/wQCMAAwHQYD
VR0OBBYEFMc+ZqrT8PCziTBSlbibkW/nECF4MB8GA1UdIwQYMBaAFIKicHTdvFM/
z3vU981/p2DGCky/MGgGCCsGAQUFBwEBBFwwWjAjBggrBgEFBQcwAYYXaHR0cDov
L29jc3AuZW50cnVzdC5uZXQwMwYIKwYBBQUHMAKGJ2h0dHA6Ly9haWEuZW50cnVz
dC5uZXQvbDFrLWNoYWluMjU2LmNlcjAzBgNVHR8ELDAqMCigJqAkhiJodHRwOi8v
Y3JsLmVudHJ1c3QubmV0L2xldmVsMWsuY3JsMEUGA1UdEQQ+MDyCGnN1cHBvcnQu
Y2l0eW9mbW9udHJvc2Uub3Jngh53d3cuc3VwcG9ydC5jaXR5b2Ztb250cm9zZS5v
cmcwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMBMGA1UdIAQM
MAowCAYGZ4EMAQICMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUA
A4IBAQCOGjxpklNTHIDc6ibXEBet5E/28Ot/wCHB+wiVpCdhCE9mXnCwLa/45lqe
B7yVhTnJ6T4nHHQr2JRtraw1bJb3ZoNH3IpMW1XNWvjf3VHQ9LNU4c6rD2ofC0+v
hsCVCVL1EMUbCIBMg4WRjEdfCLd5094BLHLm+ptbCSfWd3UwakxLuY0Nx8T3v9zK
QTv7SfG9fxu7hGL+IX3aKWcG4xn6uJQV6H9ZJ1Xft+Jf6Ob3Ua0X+8pbNYWzd4GV
kz1++jIMzPufHJeQ6RQ9EYegwL2koW73LO/hxtpMge5651pj7jFvfCBEhKAYG+jA
EGcbFqArmkBi8javKcxycXYco0Y7
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 165801266054042511748526350857999920732
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-08 22:07:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-25 22:07:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Colorado'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montrose'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'City of Montrose'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'support.cityofmontrose.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 898352068770940032740205646113137945373854646814602500164525939434645713190169956895950715319149298488033573459694889632934877055635849812141693324674294459372557719999599621067989368427133753791964180776663757119070638634041700435265516638090154893760658197839802948000728893563606088396002809015362841774255852242238523795084101994343711821920684266846915290672588697811688251253101964224345235362040642947486105498676378303951467611629634669161039018694580604079409133863127786361964611244239583301799731448533077392745419182530587894831287826680765988918119356302861687280037056666759251212926662147947786645606786026214638233655285079877523046171726407478334836596936120076475849926858308321376122492619127981295258589686785342463824254494327427745071422631567502199989147201282658297719419257623915251459070197530846645325920707852048379738169481159459419715404784696135219862714472408749357009385179637959351149420082970883352048272457206800454814608044711411153374205713869330376975236096985878154145608827308573076664438280884445601509235610711866601238382252592118823819460520134304480729019795051511198925812632214128148906772214643147167802252455531455599368113131770387336896870854528168982152837602227474080778953819881
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c73e66aad3f0f0b389305295b89b916fe7102178
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.cityofmontrose.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.support.cityofmontrose.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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