worcesterma.gov

- City of Worcester -

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number cb:1e:3b:f2:51:a1:65:04 was issued on by GoDaddy.com, Inc..

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

City of Worcester

Company registration number: Worcester Home Rule Charter
Organization: City of Worcester
State / Province: Massachusetts
Locality: Worcester
Country: US

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): cb:1e:3b:f2:51:a1:65:04
Serial Number (int): 14636201750938346756
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: 10:c3:24:e2:cf:22:9a:2d:b5:f3:57:92:86:9f:36:59:61:01:8f:00
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): ba:3b:f1:64:2d:02:47:40:7f:7a:82:57:2f:55:e2:e0:0a:95:3a:f9
Fingerprint (sha256): d4:72:63:5f:d4:c6:7d:7e:d4:3d:22:93:6a:25:86:40:04:76:b8:d0:c7:cf:52:c6:e0:1d:6f:0c:6b:eb:60:14

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s3-19.crl

Check the revocation status for certificate worcesterma.gov

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for worcesterma.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

worcesterwaters.com
www.worcestermass.org
worcestercommonoval.com
www.ci.worcester.ma.us
worcesterma.gov
www.worcesterma.gov
www.worcesterwaters.com
worcesterenergy.com
www.worcesterenergy.com
myworcester.worcesterma.gov
www.worcesterwaters.org
worcester.ma.us
worcesterenergy.org
ci.worcester.ma.us
webstats.worcesterma.gov
worcestermass.org
www.worcestercommonoval.com
lists.worcesterma.gov
www.worcester.ma.us
worcesterwaters.org
www.worcesterenergy.org
bids.worcesterma.gov

Other certificates including the domain name worcesterma.gov

(limited to 100 certificates)
cag.worcesterma.gov
sustainabilitydashboard.cambridgema.gov
opendata.worcesterma.gov
*.worcesterma.gov
*.worcesterma.gov
now-next.worcesterma.gov
opendata.worcesterma.gov
*.worcesterma.gov
worcesterma.gov
gisdata.worcesterma.gov
worcesterma.gov
green.worcesterma.gov
opendata.worcesterma.gov
now-next.worcesterma.gov
gisdata.worcesterma.gov
remote.worcesterma.gov
opendata.worcesterma.gov
remote.worcesterma.gov
*.worcesterma.gov
*.worcesterma.gov
*.worcesterma.gov
sustainabilitydashboard.cambridgema.gov
worcesterwifi.worcesterma.gov
cowcex2.worcesterma.gov
worcesterma.gov
opendata.worcesterma.gov
sustainabilitydashboard.cambridgema.gov
*.worcesterma.gov
*.worcesterma.gov
now-next.worcesterma.gov
cowcex1.worcesterma.gov

Certificate

The complete raw certificate details for worcesterma.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJNzCCCB+gAwIBAgIJAMseO/JRoWUEMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD
VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa
MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0
cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj
dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTIxMTIxNjIyNTkxOVoX
DTIyMTIxMDE5NTY1OFowgeYxEzARBgsrBgEEAYI3PAIBAxMCVVMxHjAcBgsrBgEE
AYI3PAIBAhMNTWFzc2FjaHVzZXR0czEaMBgGA1UEDxMRR292ZXJubWVudCBFbnRp
dHkxJDAiBgNVBAUTG1dvcmNlc3RlciBIb21lIFJ1bGUgQ2hhcnRlcjELMAkGA1UE
BhMCVVMxFjAUBgNVBAgTDU1hc3NhY2h1c2V0dHMxEjAQBgNVBAcTCVdvcmNlc3Rl
cjEaMBgGA1UEChMRQ2l0eSBvZiBXb3JjZXN0ZXIxGDAWBgNVBAMTD3dvcmNlc3Rl
cm1hLmdvdjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPTGQOKrjgVp
7+/zxXNhpKTYZbexdHBB42L04N6D1hXrbopu2Y4Gdgf65mHMPh745DonUvTgwTE7
uwlPbCMpGYwuP8eQ3bxYN4N0Lxzvu8XAyRKbSKC7LSAPPK42r/9j+ePXPJGi6DPA
L35OiFBOCMGSJG5zXx4biILZVwjSrSeRA7VJfjJGY+D4iIP+J/ltTewsH5ylr4oZ
o25aX06C5Drf1uQfbY8ihB2a69rK2mnTxcqxq3Dc6cWJz+360psCHGLxuQdcjS/t
tAqvOq3d+7rMcteco2Qyejhdh0Q+MQ7LmoLye5Ol5OJZS4BsV0VemG0FxsH7AQJv
wQcVcGLVtJcCAwEAAaOCBRYwggUSMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDA2BgNVHR8ELzAtMCug
KaAnhiVodHRwOi8vY3JsLmdvZGFkZHkuY29tL2dkaWcyczMtMTkuY3JsMFwGA1Ud
IARVMFMwSAYLYIZIAYb9bQEHFwMwOTA3BggrBgEFBQcCARYraHR0cDovL2NlcnRp
ZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzAHBgVngQwBATB2BggrBgEF
BQcBAQRqMGgwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmdvZGFkZHkuY29tLzBA
BggrBgEFBQcwAoY0aHR0cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBv
c2l0b3J5L2dkaWcyLmNydDAfBgNVHSMEGDAWgBRAwr0njsw0gzCiM9f7bLPwtCyA
zjCCAgEGA1UdEQSCAfgwggH0ghN3b3JjZXN0ZXJ3YXRlcnMuY29tghV3d3cud29y
Y2VzdGVybWFzcy5vcmeCF3dvcmNlc3RlcmNvbW1vbm92YWwuY29tghZ3d3cuY2ku
d29yY2VzdGVyLm1hLnVzgg93b3JjZXN0ZXJtYS5nb3aCE3d3dy53b3JjZXN0ZXJt
YS5nb3aCF3d3dy53b3JjZXN0ZXJ3YXRlcnMuY29tghN3b3JjZXN0ZXJlbmVyZ3ku
Y29tghd3d3cud29yY2VzdGVyZW5lcmd5LmNvbYIbbXl3b3JjZXN0ZXIud29yY2Vz
dGVybWEuZ292ghd3d3cud29yY2VzdGVyd2F0ZXJzLm9yZ4IPd29yY2VzdGVyLm1h
LnVzghN3b3JjZXN0ZXJlbmVyZ3kub3JnghJjaS53b3JjZXN0ZXIubWEudXOCGHdl
YnN0YXRzLndvcmNlc3Rlcm1hLmdvdoIRd29yY2VzdGVybWFzcy5vcmeCG3d3dy53
b3JjZXN0ZXJjb21tb25vdmFsLmNvbYIVbGlzdHMud29yY2VzdGVybWEuZ292ghN3
d3cud29yY2VzdGVyLm1hLnVzghN3b3JjZXN0ZXJ3YXRlcnMub3Jnghd3d3cud29y
Y2VzdGVyZW5lcmd5Lm9yZ4IUYmlkcy53b3JjZXN0ZXJtYS5nb3YwHQYDVR0OBBYE
FBDDJOLPIpottfNXkoafNllhAY8AMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgA
dgApeb7wnjk5IfBWc59jpXflvld9nGAK+PlNXSZcJV3HhAAAAX3FeOjMAAAEAwBH
MEUCIC7MOkP36Ojh2yNAcl3tzeVwmivGPEorfdXrRPaUDhuzAiEAu5JuSiucyCD1
fVcmSLyonyzYXJhekEwHmYLjLawZviIAdgBByMqx3yJGShDGoToJQodeTjGLGwPr
60vHaPCQYpYG9gAAAX3FeOnHAAAEAwBHMEUCIHWMqZT+ugzN9kyf8ksQlm25tru9
4sntDrcQeOlOpK+FAiEA2xYuzI12aQ+jVlZgylm/27QE36+6MBVRn0p0mgKyMGYA
dgDfpV6raIJPH2yt7rhfTj5a6s2iEqRqXo47EsAgRFwqcwAAAX3FeOq1AAAEAwBH
MEUCIFbwRMGQkbySimKVQbhorsWZZIi2o5ZdSRpUAF9yrjrnAiEA293NVfhK+hX3
N2wTWmCsuLo7XsMaRVXmPFSlr40Ep9IwDQYJKoZIhvcNAQELBQADggEBAAFooiY1
vQckgi1mXYaegukq2TPpRGUJL1+xOa9/vDXl7VBmlp8+ERUBkhKV+dEG2LubFBKF
fKsob1Vj4RCQZ5Ksvg2KTIdEYOdf/TELqkqMr/jkfu7sUjKos1geo0kFB/lMBqMF
C9QZN91ievr2WvtFg0w8lzARUQZh6vgnINTTesY7yH6UWsyEATDvOj/oT9Z5dzIE
elKGR+efhsySbpuz3uGPw8OyY7Ey4Xpp7MUTQg2Ot32AW+mcNyntiP5ynxOSq2wM
k+ZfJBsbXILvwHprTK9/w63kzm1oJl1msuOUP61vGPdcr9iG8Jz/Fj7x1luEPOf2
4CvKpzKxTuf2Wsw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MZA4quOBWnv7/PFc2Gk
pNhlt7F0cEHjYvTg3oPWFetuim7ZjgZ2B/rmYcw+HvjkOidS9ODBMTu7CU9sIykZ
jC4/x5DdvFg3g3QvHO+7xcDJEptIoLstIA88rjav/2P549c8kaLoM8Avfk6IUE4I
wZIkbnNfHhuIgtlXCNKtJ5EDtUl+MkZj4PiIg/4n+W1N7CwfnKWvihmjblpfToLk
Ot/W5B9tjyKEHZrr2sraadPFyrGrcNzpxYnP7frSmwIcYvG5B1yNL+20Cq86rd37
usxy15yjZDJ6OF2HRD4xDsuagvJ7k6Xk4llLgGxXRV6YbQXGwfsBAm/BBxVwYtW0
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14636201750938346756
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-16 22:59:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-10 19:56:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Worcester Home Rule Charter'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Worcester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'City of Worcester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'worcesterma.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30899908835864533379472614071706778982785322578061001419012939789729724599562904932550361304913927110357174583333042988827040744193954741631377700047821687011867890303411883728866674772750617440498844451117440258878991235343852865656574213492957109703737146342025056556522769966400958852214426660009100655154200172824591702987091250985763494263698122259535524986847523180912112730094201986554696398595576612752814726546995358994342406621627670106546626370084715767691654651541462863907781769146295405081171747897923361868871844593602733381697008931722651145116961459308331354092259925194871064385969675606326628430999
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s3-19.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (85 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.3 (GoDaddy EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (504 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worcesterwaters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worcestermass.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worcestercommonoval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.worcester.ma.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worcesterma.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worcesterma.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worcesterwaters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worcesterenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worcesterenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myworcester.worcesterma.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worcesterwaters.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worcester.ma.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worcesterenergy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci.worcester.ma.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webstats.worcesterma.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worcestermass.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worcestercommonoval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.worcesterma.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worcester.ma.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worcesterwaters.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worcesterenergy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bids.worcesterma.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							10c324e2cf229a2db5f35792869f365961018f00
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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