san-b3.granicusgovaccess.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:59:f9:22:37:99:5b:2c:f6:44:f6:91:02:63:4f:d1:fb:2b was issued on by Let's Encrypt.

With 65 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san-b3.granicusgovaccess.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:59:f9:22:37:99:5b:2c:f6:44:f6:91:02:63:4f:d1:fb:2b
Serial Number (int): 291953143887970551981732879345334533356331
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 22:3d:04:ec:c5:da:d9:3f:16:cb:15:62:29:d8:9b:fe:35:b4:9b:5d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 02:96:20:d2:6f:b6:99:c9:9c:6d:70:13:7f:cb:c1:83:b1:4c:08:a6
Fingerprint (sha256): a8:ef:50:44:d1:51:99:5c:68:4c:49:11:eb:b8:6e:bf:b1:28:46:03:7e:8d:91:0d:fb:f0:5e:42:b1:3f:e2:03

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate san-b3.granicusgovaccess.net

65

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-b3.granicusgovaccess.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arts.torranceca.gov
business.torranceca.gov
epic.tempeschools.org
library.whatcom.edu
san-b3.granicusgovaccess.net
transit.torranceca.gov
www.ci.richland.wa.us
www.ci.staunton.va.us
www.ci.tumwater.wa.us
www.cityofrockhill.com
www.cityofsantacruz.com
www.cityofshelby.com
www.cosatx.us
www.library.torranceca.gov
www.longmontcolorado.gov
www.oaklawn-il.gov
www.richfieldmn.gov
www.richland.lib.wa.us
www.richlandhills.com
www.richlandparksandrec.com
www.robbinsdalemn.com
www.rockhillusa.com
www.rosamondcsd.com
www.roswellatwork.com
www.roswellgov.com
www.san-clemente.org
www.san-marcos.net
www.sandpointidaho.gov
www.sandyspringsga.gov
www.santaclaraca.gov
www.sarasotaclerk.com
www.sbvmwd.com
www.seatacwa.gov
www.sgprc.org
www.shakopeemn.gov
www.sheboygancounty.com
www.shorelinewa.gov
www.shoreviewcommunitycenter.com
www.shoreviewmn.gov
www.siliconvalleypower.com
www.simivalley.org
www.sioux-city.org
www.slocity.org
www.smyrnaga.gov
www.southsnofire.org
www.ssf.net
www.stauntonbusiness.com
www.stlouispark.org
www.stlucieco.gov
www.superiorcolorado.gov
www.svaca.com
www.svpfiber.com
www.tdpud.org
www.tempe.gov
www.tempecenterforthearts.com
www.tempepubliclibrary.org
www.tempeschools.org
www.thomasville-nc.gov
www.torranceca.gov
www.townofsmyrna.org
www.townoftruckee.com
www.tredyffrin.org
www.tulare.ca.gov
www.vwd.org
www.whatcom.edu

Other certificates including the domain name granicusgovaccess.net

(limited to 100 certificates)
san-b1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-z1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-d1.granicusgovaccess.net

Certificate

The complete raw certificate details for san-b3.granicusgovaccess.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm4l8JUJZgpepeUQ9cvG
c5UaDmjnUMjzMsidWfcEXHdpbBFhQzcDQr9i0R8bPtlsWIE4fIdE2jGBfgH+kScr
F9l2MrO9y255XJuVODaMjXmcO11PbePW9zYRp7D1nDG1R5O+bE5+88glII92nw+N
l8tZr4MQ4UV7OvcNXt1CPmpOFr9sWdVfZV91HSSyoCNjluaVcApFJxiCDuxmDJDA
/DHJLegPa7KOja43VdUoXXAtzhGB/HGhPr9saOfdIm0d+U0qnYQQPky2XpJJ+ysv
76y22t+ZANYF65zm4aItJBfJ/SHHPGhvD77uWjPd3YyW+GmwH221FhCCVmaYdjuT
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291953143887970551981732879345334533356331
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-13 22:09:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-12 22:09:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-b3.granicusgovaccess.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22019781167008932417970072691774658322847581024452077398218419954547522606181747438573839357840679142146289042294913398801841703887431232215173422680760547347230187627995824697328995594355911153068496440873662975790893244882972085880420139694701709443446952303012959298664145218322145942487669563147205129173590185514417676041461189392110219211478250728889134391245164879797312570849418924687874899063606014033620449036953123065264813180468065142041492176639125700494045717639617874556819799210622394126470781826486785784883667027607698501714032923192873837608112179632154260953804546750206065385721889661407526097801
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							223d04ecc5dad93f16cb156229d89bfe35b49b5d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1419 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arts.torranceca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.torranceca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epic.tempeschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'library.whatcom.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-b3.granicusgovaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transit.torranceca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.richland.wa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.staunton.va.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.tumwater.wa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofrockhill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofsantacruz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofshelby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cosatx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.library.torranceca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.longmontcolorado.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oaklawn-il.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richfieldmn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richland.lib.wa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richlandhills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richlandparksandrec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robbinsdalemn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rockhillusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosamondcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roswellatwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roswellgov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.san-clemente.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.san-marcos.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandpointidaho.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandyspringsga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santaclaraca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sarasotaclerk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sbvmwd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seatacwa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sgprc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shakopeemn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sheboygancounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shorelinewa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shoreviewcommunitycenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shoreviewmn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.siliconvalleypower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simivalley.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sioux-city.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slocity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smyrnaga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southsnofire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ssf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stauntonbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stlouispark.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stlucieco.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.superiorcolorado.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.svaca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.svpfiber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tdpud.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tempe.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tempecenterforthearts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tempepubliclibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tempeschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thomasville-nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.torranceca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townofsmyrna.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townoftruckee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tredyffrin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tulare.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vwd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whatcom.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d2ce3840100000403004730450220070a9d269d9d19efd7a7820d2166415a5d7d31c35f887c164912a546299da918022100c4ea44c8a8d1c4fe0aaf7c33432775bc0746d8b8a8526428c1c00f9c9945e945007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d2ce3860300000403004830460221009a37a5ee987367528f476f7fc5f61fff76ff0269a612d6deaf0dc59c40d59529022100f16b87e2e3ed48e30094aaa65408546061366a6c90f42349f1c24097d91734ad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001c177c46ebf6a6d66883e0d21222d844c49234554fa8dce0a899a733235cd7578214099115d40706e684957bbf8600f1dca93acb764b45b950bca32aadd612d3f2c4d06ea153fa200f0e0ab9af8e6a0ca4b6b71038577ed12dd2377f5771399045e09e237065a1e58eed588c24458a9886fbeac5b07284b299a8c8174a33747965fbf7ee11056e54e45b0226df63c16155a4d301304a7ccce500cdc3587b82637701d15fb518e294eb478abe56c81ee0e75c2db403df8e9c153bee2186c67af4ce43f2b543c4e7848144a273e17444f1160bebc8e296278059fc62139b331f41960da3d83a193c63588f0af8e53cc470bd74c048739df7eb6d389c3f9271f60c