san-a2.granicusgovaccess.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a0:2e:10:83:66:26:a1:52:c8:e1:37:0c:92:c2:50:59:cf was issued on by Let's Encrypt.

With 70 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san-a2.granicusgovaccess.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a0:2e:10:83:66:26:a1:52:c8:e1:37:0c:92:c2:50:59:cf
Serial Number (int): 315843266732275622894600853212594669902287
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 99:82:27:86:f5:30:83:75:ac:af:71:c1:85:3b:ba:56:3b:1f:94:3f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4c:74:26:78:23:98:6c:33:36:e5:93:4a:e6:67:c8:a0:1f:41:49:8f
Fingerprint (sha256): 98:d4:f2:df:4b:f9:63:4e:17:53:ca:7e:51:c7:64:36:eb:9c:da:28:f4:8f:60:43:0b:42:73:27:24:37:58:dd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate san-a2.granicusgovaccess.net

70

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-a2.granicusgovaccess.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

capitalprojects.c3gov.com
intranet.c3gov.com
kids.whittierlibrary.org
localhistory.whittierlibrary.org
recreation.c3gov.com
san-a2.granicusgovaccess.net
www.artsblooming.org
www.bloomingtonparks.org
www.brazoriacountytx.gov
www.c3gov.com
www.ci.hibbing.mn.us
www.cityblm.org
www.cityofelcajon.us
www.cityofgoleta.org
www.cityofgreenwoodsc.com
www.cityofindustry.org
www.cityofkeller.com
www.cityoflamirada.org
www.cityofwhittier.org
www.co.eau-claire.wi.us
www.cypressca.org
www.darenc.com
www.downtownodessatx.com
www.east-wenatchee.com
www.emeraldtriangle.us
www.englewoodco.gov
www.fairfaxva.gov
www.fairhopeal.gov
www.farmington-ct.org
www.fauquiercounty.gov
www.fdlco.wi.gov
www.fdlsheriff.com
www.fillmoreca.com
www.franklintwpnj.org
www.germantown-tn.gov
www.gilbertaz.gov
www.golfgreenwoodsc.com
www.gptx.org
www.grandview.org
www.greenbeltmd.gov
www.guilfordcountync.gov
www.herndon-va.gov
www.hillsboro-oregon.gov
www.homesteadmuseum.org
www.hursttx.gov
www.industryexpocenter.com
www.industryyal.org
www.jacksoncounty-il.gov
www.jaspercountysc.gov
www.keepodessabeautiful.org
www.kentwa.gov
www.localhealthauthority.org
www.odessa-tx.gov
www.odessapd.com
www.odessatxparks.org
www.paramountcity.com
www.pecostx.gov
www.pvestates.org
www.redefiningcommerce.com
www.sao12.org
www.scgov.net
www.soldotna.org
www.southpasadenaca.gov
www.thekellerpointe.com
www.townofdillon.com
www.uptowngreenwood.com
www.visitgrandprairietx.com
www.visitgreenwoodsc.com
www.whittierlibrary.org
www.whittierprcs.org

Other certificates including the domain name granicusgovaccess.net

(limited to 100 certificates)
san-b1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-z1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-g2.granicusgovaccess.net

Certificate

The complete raw certificate details for san-a2.granicusgovaccess.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqt89blhx9q8eP595fS/
vjpS7/zJvx42RPGK/7zQQXp56OagBSYLzVhpfnYKUdd7qF1V+K73QSdlzDdOEIQQ
fhYd+CEzq6Hy1Qg1OYtdOEMMFIeiocOdvOqlzXNaBkyw2WbOaR482rvB/O9V+8tw
SK1yMQ4QiTwsSZ0aI7KLga36kem3tdktucxR72qchrE1GDby0l+e3bK+76oMbZDx
U2ocN1UN7Yzx28uerUetwwbpAZiVLrXDaqwrdKrfYXNTGwyz+/EpmfzkbYrES7HX
gzbJMhAXi3/pxM2gAChKxC+Vgfqdc4ZSINhT1hd/n5HYAiVWwEe5g3ip2cxTKdzX
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315843266732275622894600853212594669902287
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-18 19:01:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-16 19:01:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-a2.granicusgovaccess.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20030216130546435771043691980173028244469733809584377112253280866533823807526409831034156894371434715603552501846342705574748034101372736715971916147392291554526720965285481491349158734182757160223460675135287705770864255063137688116120856071426729756012478324148800231627766116162313337084587497920938274452772158253520154239032160282106949595308047483451334588226817278253332940906255589383069149918800362774537247622463042440490570598391680909998036066210685034499725501852178866090915971330611635823938488415952917275989870250234159866641951267329576450208853092496478797913263535164512197284920630251724736354109
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							99822786f5308375acaf71c1853bba563b1f943f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1581 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalprojects.c3gov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.c3gov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kids.whittierlibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localhistory.whittierlibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recreation.c3gov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-a2.granicusgovaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artsblooming.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bloomingtonparks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brazoriacountytx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.c3gov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.hibbing.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityblm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofelcajon.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofgoleta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofgreenwoodsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofindustry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofkeller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityoflamirada.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofwhittier.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co.eau-claire.wi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cypressca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.darenc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.downtownodessatx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.east-wenatchee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emeraldtriangle.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.englewoodco.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fairfaxva.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fairhopeal.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmington-ct.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fauquiercounty.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fdlco.wi.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fdlsheriff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fillmoreca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.franklintwpnj.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.germantown-tn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gilbertaz.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.golfgreenwoodsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gptx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenbeltmd.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guilfordcountync.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.herndon-va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hillsboro-oregon.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homesteadmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hursttx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.industryexpocenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.industryyal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jacksoncounty-il.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jaspercountysc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepodessabeautiful.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kentwa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.localhealthauthority.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odessa-tx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odessapd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odessatxparks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountcity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pecostx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pvestates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redefiningcommerce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sao12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scgov.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soldotna.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southpasadenaca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thekellerpointe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townofdillon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uptowngreenwood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitgrandprairietx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitgreenwoodsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whittierlibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whittierprcs.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016de075b365000004030047304502203dc8229f7093dba577e2867ada8c675465ef21f329970faf50f9fd561f77ada4022100916653895329eac271040640a9b4964378b8bd9e4e1a889fb9f8af0b72b85672007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016de075b5b20000040300473045022100ca77fc9599347a2c0da213d51a1565db5564bdfaa7f3aa5a820d3453daa7e88e0220697de9c6ffa1f9bd9a1f532309ca4d0efea5d01be48abc410296c741c6e01897
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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