san-e2.granicusgovaccess.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:08:75:89:d8:b5:5c:53:1e:d8:30:b3:4b:bd:29:a6:51:e9 was issued on by Let's Encrypt.

With 63 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san-e2.granicusgovaccess.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:08:75:89:d8:b5:5c:53:1e:d8:30:b3:4b:bd:29:a6:51:e9
Serial Number (int): 264215352146194046987341798346505039794665
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4e:0b:4c:02:ea:c7:07:18:74:46:47:33:af:b7:6d:85:f6:c7:fa:59
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3e:f5:3c:01:96:39:0f:36:b1:d9:22:9f:56:4f:9a:3c:f7:3d:b9:44
Fingerprint (sha256): 69:94:8f:bf:c3:e3:a2:a1:38:fd:f1:6d:04:b8:bf:2a:40:49:a9:88:07:8b:49:e9:bd:64:37:0f:5b:11:a9:e9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate san-e2.granicusgovaccess.net

63

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-e2.granicusgovaccess.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

citycouncil.atlantaga.gov
cmsres.visioninternet.com
gyr.fortlauderdale.gov
inet.cityofvacaville.com
san-e2.granicusgovaccess.net
www.albanycounty.com
www.atlantafirerescue.com
www.atlantaga.gov
www.atlantapd.org
www.blendontwp.org
www.bluecc.edu
www.brokenarrowok.gov
www.ccvaatraining.org
www.ci.vacaville.ca.us
www.cityofcaseyil.org
www.cityofcashmere.org
www.cityoflacrosse.org
www.cityofmerced.org
www.cityofsavage.com
www.cityofseward.us
www.cityofwalnut.org
www.cityofwinder.com
www.clerkofcourt.maricopa.gov
www.co.washington.ar.us
www.cottonwoodheights.utah.gov
www.desplainesintranet.org
www.destinationelsegundo.com
www.douglasvilleconferencecenter.com
www.douglasvillega.gov
www.elsegundo.org
www.elsegundobusiness.com
www.elsegundofd.org
www.elsegundolibrary.org
www.elsegundopd.org
www.elsegundorecparks.org
www.falconheights.org
www.flpd.org
www.flyfxe.com
www.fortlauderdale.gov
www.gillettewy.gov
www.greenlightnc.com
www.leonianj.gov
www.longboatkey.org
www.lyonco.org
www.montgomerysheriff.com
www.mundelein.org
www.pittsburgtexas.com
www.reevescounty.org
www.sweetwatertx.gov
www.tdpud.org
www.townofhertfordnc.com
www.townofwestspringfield.org
www.trio-us.org
www.victoriatx.org
www.vopnc.org
www.wallawallapubliclibrary.org
www.wallawallawa.gov
www.wdm.iowa.gov
www.west192.org
www.westcovina.org
www.wilson-co.com
www.wilsonnc.org
www.wsps.org

Other certificates including the domain name granicusgovaccess.net

(limited to 100 certificates)
san-b1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-z1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-d1.granicusgovaccess.net

Certificate

The complete raw certificate details for san-e2.granicusgovaccess.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBX4mAWsSMwiz9ZyQOT7
Z2ezflMILxa3GjvF5kZ5/jAll4GkPdY5YRBzulNhMkW340Ip+N5RxyjqcRm+Oo7V
ItY8Ra8Pt7WP++QcDddGSovfGdfa8Yan8BOyr/ywR8qgY8hdG7KgrLrevw3milyO
H4urmAUp+5VENQhiBtcgLULk8FCJz3kh30k2k/GVaWN2B1AKVFSocPPMGCX+ftDP
Q7LxAZEG/2nogEMzHDxNdOLBC+mwcRWk8ZzYu7QiHxTHBBSUQnxOzsyBuNa6Py8Y
Mkv1qM1Z0pjAP22lv/lKjfWd1etUF9Sy0aq2iPj1XWNcn3Ik+YhqG/KqDPoXSmu4
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264215352146194046987341798346505039794665
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-13 20:24:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-11 20:24:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-e2.granicusgovaccess.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25763448551333561485789495409377013029619593128212242938368457544414401709749718126091343078196193273193247846860674103946718085944654581107558450862561284896813064406451778170289122237285329034990332051559722735300003845102211760888320500551733543513579703112707646701014712650243385191499363442428039282551324199196671926843355699530846605998353025994111647105791010600397385104610371814745594627539051572894279951040324499381047922136673959692930383316972483785033241141499216718134632022223621899178643110887437823733756148527290054216084233318942501708256818975933226693219340528041351229431172981487067447671009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4e0b4c02eac7071874464733afb76d85f6c7fa59
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1433 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citycouncil.atlantaga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmsres.visioninternet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gyr.fortlauderdale.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inet.cityofvacaville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-e2.granicusgovaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albanycounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlantafirerescue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlantaga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlantapd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blendontwp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluecc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brokenarrowok.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccvaatraining.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.vacaville.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofcaseyil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofcashmere.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityoflacrosse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofmerced.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofsavage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofseward.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofwalnut.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofwinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clerkofcourt.maricopa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co.washington.ar.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cottonwoodheights.utah.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.desplainesintranet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.destinationelsegundo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.douglasvilleconferencecenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.douglasvillega.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elsegundo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elsegundobusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elsegundofd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elsegundolibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elsegundopd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elsegundorecparks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.falconheights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flpd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flyfxe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fortlauderdale.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gillettewy.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenlightnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leonianj.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.longboatkey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lyonco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.montgomerysheriff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mundelein.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pittsburgtexas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reevescounty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sweetwatertx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tdpud.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townofhertfordnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townofwestspringfield.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trio-us.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.victoriatx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vopnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wallawallapubliclibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wallawallawa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wdm.iowa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.west192.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westcovina.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wilson-co.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wilsonnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wsps.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170d5c8973500000403004730450220143e502b7e3681a5ff67f2284a9346d9ade7067ee5153b7b7a36ff348138471d02210094e6e82b92829fea7564e6ae1323ae14d1d6994a437437d05b4a5001cb62591300760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170d5c897630000040300473045022100f2a733725322ca7151bc842a9fa73069e40ba78f39b08691942b5d375a32028602202ff06b2ff10376c1a89f5814d9c80098c885b1de39bbf853255dd9b40c52a480
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003c4b181d2a41f8f7de3ae0b9565f7bc1864ba24b6c10b4aa2e5fc841abce3d8791fd4469d508fcd54a69450f0bc826803e7bbde8aa851b02f914631bbef0b746d43f7bd5e95f5f55e1b325893b99344ba52d74e3cd3e62d1d72be137d007b723792fb16e1f2947bb052bb9c12fa046b954f02f4ffd45416470ea8091b3fac9ae98fbd6e6f25bf2920715af97f5e4289477a24ef992f57f80128ca88df26d4ccfdb0a12e3b52bd0cb491ffcb19c0f8c7328605788c1473992182a31fd6bcd1c3b1126a73cbd80984c5646355271f679ef837671cd39f17db395fdf13793f7a6e81b72a7d780e67031b81a844717f8537cf29663be2cfab0e963c3d1e4d2ce8127