san-a2.granicusgovaccess.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5c:4f:18:e9:21:ce:0c:4a:5f:83:b9:b5:82:66:cd:49:89 was issued on by Let's Encrypt.

With 70 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san-a2.granicusgovaccess.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5c:4f:18:e9:21:ce:0c:4a:5f:83:b9:b5:82:66:cd:49:89
Serial Number (int): 292747973907278427552484664497616100084105
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 95:39:65:a6:da:dc:ff:8e:2c:43:f9:a2:5f:9b:50:ef:05:cc:1e:3c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d1:14:1f:54:96:5c:b8:18:d4:fa:d6:ac:30:83:c7:7b:e3:cf:94:79
Fingerprint (sha256): ad:d2:5b:5e:7f:11:f5:20:b9:9b:3a:66:1d:28:e1:21:f1:fd:c7:b7:af:3a:3d:89:f4:16:d0:75:e2:18:90:34

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate san-a2.granicusgovaccess.net

70

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-a2.granicusgovaccess.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

capitalprojects.c3gov.com
intranet.c3gov.com
kids.whittierlibrary.org
localhistory.whittierlibrary.org
recreation.c3gov.com
san-a2.granicusgovaccess.net
www.artsblooming.org
www.bloomingtonparks.org
www.brazoriacountytx.gov
www.c3gov.com
www.cityblm.org
www.cityofelcajon.us
www.cityofgoleta.org
www.cityofgreenwoodsc.com
www.cityofindustry.org
www.cityofkeller.com
www.cityofwhittier.org
www.co.eau-claire.wi.us
www.cypressca.org
www.darenc.com
www.downtownodessatx.com
www.east-wenatchee.com
www.emeraldtriangle.us
www.englewoodco.gov
www.fairfaxva.gov
www.fairhopeal.gov
www.farmington-ct.org
www.fauquiercounty.gov
www.fdlco.wi.gov
www.fdlsheriff.com
www.fillmoreca.com
www.franklintwpnj.org
www.germantown-tn.gov
www.gilbertaz.gov
www.golfgreenwoodsc.com
www.gptx.org
www.grandview.org
www.greenbeltmd.gov
www.guilfordcountync.gov
www.herndon-va.gov
www.hibbing.mn.us
www.hillsboro-oregon.gov
www.homesteadmuseum.org
www.hursttx.gov
www.industryexpocenter.com
www.industryyal.org
www.jacksoncounty-il.gov
www.jaspercountysc.gov
www.keepodessabeautiful.org
www.kentwa.gov
www.localhealthauthority.org
www.odessa-tx.gov
www.odessacvb.com
www.odessapd.com
www.odessatxparks.org
www.paramountcity.com
www.pecostx.gov
www.pvestates.org
www.redefiningcommerce.com
www.sao12.org
www.scgov.net
www.soldotna.org
www.southpasadenaca.gov
www.thekellerpointe.com
www.townofdillon.com
www.uptowngreenwood.com
www.visitgrandprairietx.com
www.visitgreenwoodsc.com
www.whittierlibrary.org
www.whittierprcs.org

Other certificates including the domain name granicusgovaccess.net

(limited to 100 certificates)
san-b1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-z1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-g2.granicusgovaccess.net

Certificate

The complete raw certificate details for san-a2.granicusgovaccess.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6zXLEna2evfG3Xa4Vip
jfaUMVOmhjeayb9b/XFD5ybzcB5UjJ8l68l2CX/aO+iePzza5MtVikdhdBw8IQYw
or+x5i0lmhvrbBNpFgHBzh+hd5VZI3eMmdBwTOFjE0wdarJT9fO+L7WfzPK4Cxnc
1RMvP3ddiqI8oz36LqrEDWFdbBra2cQoOCVHCcxb1TMxLIhW6ECRavKtAkRz8Z4B
fU0HGjhHeoMKyolfPTQlysJ7vZbGL1jeTpQx8xEHYGn2CnrDvFeXKWsP5eLKO8D6
ZyHtgdlhPLqTuLp0m46TBV0tHUAX77rtVRAkA80zizGN7IwUhxb8NO+SPPx/ZpCv
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292747973907278427552484664497616100084105
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-18 14:46:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-16 14:46:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-a2.granicusgovaccess.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21167027766113167660029596804547138217905954888926967908108789723232284843950270232831145168715756463746012329407846861852145931724789774784674926519502366969061443432749735334452182592942283235254343849116215995071815871620602445606558195178030582441425930208165470373476273904615217621510525326718547658894640449467387120186423962471946580330849498872130628894741758391300632214740344967467996999901898779204805183720441445134626459671714418326520723127298430190718157409851872656834731678070335613637136672214776787179442430921468773450022149066430095732181513381171918290387074708932944173904557583147001697054563
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							953965a6dadcff8e2c43f9a25f9b50ef05cc1e3c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1573 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalprojects.c3gov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.c3gov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kids.whittierlibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localhistory.whittierlibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recreation.c3gov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-a2.granicusgovaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artsblooming.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bloomingtonparks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brazoriacountytx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.c3gov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityblm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofelcajon.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofgoleta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofgreenwoodsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofindustry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofkeller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofwhittier.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co.eau-claire.wi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cypressca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.darenc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.downtownodessatx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.east-wenatchee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emeraldtriangle.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.englewoodco.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fairfaxva.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fairhopeal.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmington-ct.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fauquiercounty.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fdlco.wi.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fdlsheriff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fillmoreca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.franklintwpnj.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.germantown-tn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gilbertaz.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.golfgreenwoodsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gptx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenbeltmd.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guilfordcountync.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.herndon-va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hibbing.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hillsboro-oregon.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homesteadmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hursttx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.industryexpocenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.industryyal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jacksoncounty-il.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jaspercountysc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepodessabeautiful.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kentwa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.localhealthauthority.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odessa-tx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odessacvb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odessapd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odessatxparks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountcity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pecostx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pvestates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redefiningcommerce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sao12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scgov.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soldotna.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southpasadenaca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thekellerpointe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townofdillon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uptowngreenwood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitgrandprairietx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitgreenwoodsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whittierlibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whittierprcs.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c05c39bc100000403004730450221008e669c31bd3d8c546067e5c94b42f5de8ef3f39a031d92b42874d5736b5b11690220264b670dafe9e6280c9c4e780a5aa15c1e1b37562450c36de4ba4d1e90955d4f007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c05c39bd000000403004830460221008d2b0034e3164e73a103b0a50c390ac55c371b8df219139c495f03317d8df6630221008b8120123c053db42767757b0f14a1639caef03bcf4020dee679c6367571ef8a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003c9ce39846e1c70cbf4c02340e2f2888e5e07e43ff010fde62459ac281800ff76c51be964dfd8157708ee95df88c0e0135e399d43b0395fb0e20ea111925e1b39b918e769113587d35c64bb37c85bcaefb2a0d324a89d57f98a409f9c34427508416738e703766834ffb0e3aa0727ab318d46d3f7bc7f4119fde30f68721fdc9ab149414be7936cc63a00de14b7e7b19a29ae23d35b2467d0da76d56fdc74b79b236e956bc69b56e6b676f3b2a877b2c1360d56d034b19c6faf151a231673a1cc9908a3372e60cecc07c37db8e957bb5e37f2d443de195fb0278e0aa6687a7aef8300606423d3ab7eab3df554adbf04177579a69fa21c524107cf837095a8866