san-b1.granicusgovaccess.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:be:36:bb:6b:42:bf:c3:70:23:c0:cd:1d:cf:38:b4:01:93 was issued on by Let's Encrypt.

With 65 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san-b1.granicusgovaccess.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:be:36:bb:6b:42:bf:c3:70:23:c0:cd:1d:cf:38:b4:01:93
Serial Number (int): 326063258957050213691461673025229391397267
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5d:e7:d8:d7:6a:67:62:b0:95:19:b0:12:ab:05:90:5f:7b:ca:da:cf
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a9:f4:88:82:1a:a6:14:d2:5f:a9:53:38:13:9e:ec:ae:72:06:c5:1d
Fingerprint (sha256): cf:ea:8b:c0:f7:68:a3:c3:f2:b0:47:fe:6a:75:09:a5:fb:04:24:34:b7:d5:e3:dd:1b:77:5d:59:7a:d1:c7:d9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate san-b1.granicusgovaccess.net

65

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-b1.granicusgovaccess.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arts.torranceca.gov
business.torranceca.gov
san-b1.granicusgovaccess.net
transit.torranceca.gov
www.arizonamuseumofnaturalhistory.org
www.boonecounty.iowa.gov
www.brentwoodtn.gov
www.bryancountyga.org
www.ccgov.org
www.ci.punta-gorda.fl.us
www.ci.richland.wa.us
www.ci.rolling-hills-estates.ca.us
www.citymb.info
www.cityofalbertville.com
www.cityofclive.com
www.cityoflancasterca.org
www.cityofloveland.org
www.cityofmarion.org
www.cityofmonrovia.org
www.cityofrockhill.com
www.cityofsantacruz.com
www.co.marquette.wi.us
www.coffeycountyks.org
www.danapoint.org
www.dedham-ma.gov
www.dsrsd.com
www.eid.org
www.elkgrove.org
www.enid.org
www.falconfieldairport.com
www.lafourchegov.org
www.lauderhill-fl.gov
www.library.torranceca.gov
www.louisvilleco.gov
www.lowermerion.org
www.lvmwd.com
www.madisoncountyal.gov
www.mankatomn.gov
www.maplevalleywa.gov
www.marioncountyfl.org
www.marylandheights.com
www.mathewscountyva.gov
www.mcdonoughga.org
www.mchenrycountyil.gov
www.melbourneflorida.org
www.mesaaz.gov
www.mesacountsoncollege.org
www.mesalibrary.org
www.mesaparks.com
www.mnairspectacular.com
www.nevadadot.com
www.nixa.com
www.oaklawn-il.gov
www.richfieldmn.gov
www.richland.lib.wa.us
www.richlandhills.com
www.richlandparksandrec.com
www.robbinsdalemn.com
www.rockhillusa.com
www.rosamondcsd.com
www.roswellatwork.com
www.roswellgov.com
www.selectmesa.com
www.torranceca.gov
www.verizoncentermn.com

Other certificates including the domain name granicusgovaccess.net

(limited to 100 certificates)
san-b1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-z1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-d1.granicusgovaccess.net

Certificate

The complete raw certificate details for san-b1.granicusgovaccess.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAve+ls5mSuwbivdisTbk4
OSTYahM2bY8rR3qQwq5Jatb01OlELhA5T9Wz0yO7t2l9naNNW9nNdFhR/+4iA+tO
3LztQ1A+5Eb4Uq1+Yd1ZcCFw6IjfKrMHca9G8L8kK7VnYZPRvt+tnRjDArEH9Vav
H462C5gfVkqyGCozX2CNb6+O+T4XMce8AIFYLNAXHKrmbrav2vDFT1IHD8CjjDU4
4UoG0ZlbLOf5q0H7n2VMmNtYHf9Rptsk9F/HIyiSWYknLaBBn1Vcl714978gOqx0
4meEMIuKXGuCYCzJOjI6DQ1fkaXcduTyi8EzpUJDX387DMF5WhPqGCeqfJTBEfOT
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326063258957050213691461673025229391397267
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-11 15:47:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-09 15:47:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-b1.granicusgovaccess.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23977214112696588854504443186912882224969428468383719958441616584077978702862935713764589094741921771829440418377799067182600580208253301758623656174335466428639837689192323131991335193650258559347266039695157741207967027025036463114525535975254801489663433345646918976424046297527326395376647092191584888977949432532187044015157972228617215873379720026819623490800352104855991447302015063179574850664210303698522775898719443632422486573531680855178922425998434810707914845747519901697152349077175436939379513962485214878615988501579466081503173943176186077807149510078019662098487472573521199416116123449806459999183
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5de7d8d76a6762b09519b012ab05905f7bcadacf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1476 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arts.torranceca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.torranceca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-b1.granicusgovaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transit.torranceca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arizonamuseumofnaturalhistory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boonecounty.iowa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brentwoodtn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bryancountyga.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccgov.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.punta-gorda.fl.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.richland.wa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.rolling-hills-estates.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citymb.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofalbertville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofclive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityoflancasterca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofloveland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofmarion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofmonrovia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofrockhill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofsantacruz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co.marquette.wi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coffeycountyks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.danapoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dedham-ma.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsrsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elkgrove.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.falconfieldairport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lafourchegov.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lauderhill-fl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.library.torranceca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.louisvilleco.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lowermerion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvmwd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madisoncountyal.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mankatomn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maplevalleywa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marioncountyfl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marylandheights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mathewscountyva.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcdonoughga.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mchenrycountyil.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melbourneflorida.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesaaz.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesacountsoncollege.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesalibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesaparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mnairspectacular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nevadadot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nixa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oaklawn-il.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richfieldmn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richland.lib.wa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richlandhills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richlandparksandrec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robbinsdalemn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rockhillusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosamondcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roswellatwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roswellgov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.selectmesa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.torranceca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verizoncentermn.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dbbb802ec0000040300463044022060aa7c7d5534ff1efc09a45e531587212cfc2ad54bade3919ce974204c20ef4b02207b52b895e9a743b39e4bb46f7e7336982447d7e9513128594141431c3f2bdc02007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dbbb802b30000040300473045022063178cf75401cb9454710255f9d5de3dc5d7d3076df986b55eedc7aafcffe3be022100f907beaf8d9308fdca2ad74045676cf55461e020ebaeaada074aec6339e45764
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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