san-e2.granicusgovaccess.net

Issued by R3

About this certificate

This digital certificate with serial number 04:ef:1d:b9:86:3e:b8:3d:d1:08:cf:dc:30:84:11:bf:8b:53 was issued on by Let's Encrypt.

With 66 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=san-e2.granicusgovaccess.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:ef:1d:b9:86:3e:b8:3d:d1:08:cf:dc:30:84:11:bf:8b:53
Serial Number (int): 429816140330753923796295114229798745901907
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: dd:ae:ec:d8:d1:90:af:71:a1:a8:1c:20:25:57:78:b4:5d:d8:55:9a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4e:cb:92:48:1c:e7:3b:1e:18:9d:5b:6b:c0:06:cc:c6:5a:6c:cb:8b
Fingerprint (sha256): 5e:d3:15:9c:7e:21:87:2e:cb:d3:0c:8c:a4:f5:05:34:0b:55:5c:fa:74:52:f6:8c:11:1a:1d:e6:12:3c:3f:fc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate san-e2.granicusgovaccess.net

66

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-e2.granicusgovaccess.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

citycouncil.atlantaga.gov
comnet.cityofmerced.org
gyr.fortlauderdale.gov
intranet.fremont.gov
legislature.rocklandcountyny.gov
san-e2.granicusgovaccess.net
www.albanycounty.com
www.atlantafirerescue.com
www.atlantaga.gov
www.atlantapd.org
www.blendontwp.org
www.brokenarrowok.gov
www.chanhassenmn.gov
www.cityofbartow.net
www.cityofcaseyil.org
www.cityofcashmere.org
www.cityofhialeahgardens.com
www.cityoflacrosse.org
www.cityofmerced.org
www.cityoforting.org
www.cityofsavage.com
www.cityofseward.us
www.clerkofcourt.maricopa.gov
www.colusasutteryolochildsupport.org
www.cottonwoodheights.utah.gov
www.crane-transit.com
www.destinationelsegundo.com
www.douglasvilleconferencecenter.com
www.douglasvillega.gov
www.ed3online.org
www.elsegundo.org
www.elsegundobusiness.com
www.elsegundofd.org
www.elsegundolibrary.org
www.elsegundopd.org
www.elsegundorecparks.org
www.explorecharlescounty.com
www.falconheights.org
www.fay-nccrimestoppers.org
www.fayettevillenc.gov
www.fcpr.us
www.flpd.gov
www.flyfay.com
www.flyfxe.com
www.fortlauderdale.gov
www.fremont.gov
www.gillettewy.gov
www.ksbma.ks.gov
www.lemont.il.us
www.leonianj.gov
www.longboatkey.org
www.lovevail.org
www.lyonco.org
www.montgomerysheriff.com
www.ncletc.org
www.operationceasefire.com
www.prairiecenter.org
www.reevescounty.org
www.rentershelpline.org
www.smfd.org
www.sunriversharc.com
www.sweetwatertx.gov
www.swiftcurrent.ca
www.tdpud.org
www.villageofschaumburg.com
www.vopnc.org

Other certificates including the domain name granicusgovaccess.net

(limited to 100 certificates)
san-b1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-z1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-d1.granicusgovaccess.net

Certificate

The complete raw certificate details for san-e2.granicusgovaccess.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvh3WjEjIplZ4BFA2jp9o
56qv0vjDdu9X60gIqJQOdP/zDQBPX9uMa+bK99Cc8vn6Eke9AjMLs5cxcgerLNke
QZ0yCKR9t4+k/A9TcR4otya6//sbFsLszN4fZ1/jw6cF3XLOnOJhxEweNn4jiR80
YC3kmyPXoTTx7+26VU9qoQddCeghi/tTeI0zQslz1qo01vmjVOOmKHnRPTutCsoa
+D0nsdpNE0VChuDoVujmLZfGp6aAvsBTmKLFegyuKLHFu+bOgCRV1eBWNmlkcI9C
l2SKlaNjloSgLPY3qP521g3BvMS5VEl9DsuJmC+jZH9Nb2MDfC+DIrtaOKBkgrw2
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 429816140330753923796295114229798745901907
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-20 20:17:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-18 20:17:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-e2.granicusgovaccess.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23999991648234107820067187496819839990765238096264388070318975582723687689868680240212141487161327010169501364831138823967561799063650744880687551986349034978755755802012404508094073572522494902339678760797957110902564687019809846998995983402395167117601953036100938190783162554759544330911627892792189069279278147366533055326913310925047713651113227922257700057330473568002838228825119862767573299206025544512385269642990778036906127162587766137956054222964372012025888325147533414038789729013410892823490428123605181838795783087458592310498412594146872433000835374094102486841933019346283494929982065075875061970473
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ddaeecd8d190af71a1a81c20255778b45dd8559a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1519 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citycouncil.atlantaga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comnet.cityofmerced.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gyr.fortlauderdale.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.fremont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legislature.rocklandcountyny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-e2.granicusgovaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albanycounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlantafirerescue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlantaga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlantapd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blendontwp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brokenarrowok.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chanhassenmn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofbartow.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofcaseyil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofcashmere.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofhialeahgardens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityoflacrosse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofmerced.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityoforting.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofsavage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofseward.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clerkofcourt.maricopa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colusasutteryolochildsupport.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cottonwoodheights.utah.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crane-transit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.destinationelsegundo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.douglasvilleconferencecenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.douglasvillega.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ed3online.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elsegundo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elsegundobusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elsegundofd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elsegundolibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elsegundopd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elsegundorecparks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorecharlescounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.falconheights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fay-nccrimestoppers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fayettevillenc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fcpr.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flpd.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flyfay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flyfxe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fortlauderdale.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fremont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gillettewy.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ksbma.ks.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lemont.il.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leonianj.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.longboatkey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lovevail.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lyonco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.montgomerysheriff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncletc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.operationceasefire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prairiecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reevescounty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rentershelpline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smfd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunriversharc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sweetwatertx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swiftcurrent.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tdpud.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.villageofschaumburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vopnc.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e5dba004200000403004730450221009d1e6abff13f0265d7ae63da2558c6a0c703074c6fb4aac19521b53ce66dc68e02201a4f02377c9a90115dce79a6517ca7ea0daac9328f159fa6d27c4c20e896471a007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e5dba0055000004030047304502201f812293100c5850b04499f49541eba49bc9328f83b04211a6dd1466e32850a4022100c3e231c242517900a2b5cf5f28a2c5e3d9363dc09b92ea764a0ee9282e0d556b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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