san-b3.granicusgovaccess.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2b:23:88:6c:dd:6d:7d:6a:f4:1c:83:bd:99:6a:49:0c:94 was issued on by Let's Encrypt.

With 58 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san-b3.granicusgovaccess.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2b:23:88:6c:dd:6d:7d:6a:f4:1c:83:bd:99:6a:49:0c:94
Serial Number (int): 276016230913149873257810630289877941947540
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 58:91:f8:f4:66:09:bc:a7:c5:7e:6e:1e:30:c5:ff:00:fd:d0:11:b9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6b:7b:ad:40:ba:57:02:46:9f:cf:c0:ad:2e:df:e1:01:ba:5f:2b:5a
Fingerprint (sha256): d6:d4:7b:98:85:e5:87:1d:45:a9:8d:66:22:6c:e5:4e:a4:1c:9d:19:47:09:7c:70:17:21:68:71:f4:70:9b:8a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate san-b3.granicusgovaccess.net

58

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-b3.granicusgovaccess.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arts.torranceca.gov
business.torranceca.gov
ci.rolling-hills-estates.ca.us
epic.tempeschools.org
san-b3.granicusgovaccess.net
transit.torranceca.gov
www.ci.richland.wa.us
www.ci.staunton.va.us
www.ci.tumwater.wa.us
www.cityofrockhill.com
www.cityofsantacruz.com
www.cityofshelby.com
www.cosatx.us
www.library.torranceca.gov
www.longmontcolorado.gov
www.richfieldmn.gov
www.richland.lib.wa.us
www.richlandhills.com
www.richlandparksandrec.com
www.robbinsdalemn.com
www.rockhillusa.com
www.rosamondcsd.com
www.roswellatwork.com
www.roswellgov.com
www.san-clemente.org
www.san-marcos.net
www.sandpointidaho.gov
www.sandyspringsga.gov
www.sarasotaclerk.com
www.sbvmwd.com
www.seatacwa.gov
www.sgprc.org
www.shakopeemn.gov
www.sheboygancounty.com
www.shorelinewa.gov
www.shoreviewmn.gov
www.simivalley.org
www.sioux-city.org
www.slocity.org
www.smyrnaga.gov
www.southsnofire.org
www.ssf.net
www.stauntonbusiness.com
www.stlouispark.org
www.stlucieco.gov
www.superiorcolorado.gov
www.tdpud.org
www.tempe.gov
www.tempecenterforthearts.com
www.tempepubliclibrary.org
www.tempeschools.org
www.thomasville-nc.gov
www.torranceca.gov
www.townofsmyrna.org
www.townoftruckee.com
www.tredyffrin.org
www.tulare.ca.gov
www.vwd.org

Other certificates including the domain name granicusgovaccess.net

(limited to 100 certificates)
san-b1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-z1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-d1.granicusgovaccess.net

Certificate

The complete raw certificate details for san-b3.granicusgovaccess.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX/czYDqxaohv8gDgwFx
0ubBubJk4REcMY+GwB7A9RUuZfsnUs1SR50qRNbcaJbNdPmFTH9aAvPTENl88+oI
2rU710qb4BisQQiVDBexfcCEImWqYPo16IpA9rcSRWyfU6h19TnVWV6rAriUA4Te
BudRSduWciKHZ47R7FIim5hnDoKOqEn98KkdzGusjvaJrbS1FChLGJdBm2KKNcWQ
thYWTHjBgRji65McHyE7UaT15gvCeGH37Y8OPbYSgbwBwAxgBR9lmgYI+6TbguKK
IZTIq3lUcFpxinV8plyA0JDt5aV3TEOkwj5KthM4/d2WmOda/h+Rtg3vQWRA0Yb4
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 276016230913149873257810630289877941947540
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-13 04:50:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-14 04:50:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-b3.granicusgovaccess.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22407231332992351509255547713457954094361211216005813118516739087237065059886349762561161948804590860668272939363187368803468132568336655879510013440083348427575676979100186547663296796972909491940587357171127522121199607693310779617076455037658182677900990266132862153615005811429335295052495353056707670050606916814712863368694218459383554256704318286731344925669592793361636128379067326203339282266852332299453496139548662792503978226013694198086403977112923024973953370260473463954140105210637393172018991730769510579196669212769829929182338887768301762898028790203655710913086941777392047511787634578170061453321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5891f8f46609bca7c57e6e1e30c5ff00fdd011b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arts.torranceca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.torranceca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci.rolling-hills-estates.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epic.tempeschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-b3.granicusgovaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transit.torranceca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.richland.wa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.staunton.va.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.tumwater.wa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofrockhill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofsantacruz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofshelby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cosatx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.library.torranceca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.longmontcolorado.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richfieldmn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richland.lib.wa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richlandhills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richlandparksandrec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robbinsdalemn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rockhillusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosamondcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roswellatwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roswellgov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.san-clemente.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.san-marcos.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandpointidaho.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandyspringsga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sarasotaclerk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sbvmwd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seatacwa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sgprc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shakopeemn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sheboygancounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shorelinewa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shoreviewmn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simivalley.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sioux-city.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slocity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smyrnaga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southsnofire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ssf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stauntonbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stlouispark.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stlucieco.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.superiorcolorado.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tdpud.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tempe.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tempecenterforthearts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tempepubliclibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tempeschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thomasville-nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.torranceca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townofsmyrna.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townoftruckee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tredyffrin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tulare.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vwd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000168e567b8510000040300473045022100848632c032cb6ba4319725b3309d87b30f856882d4335fe337e5ca93356c152e022045a2745a214cb939ed307bac16eeca2f33e323822e5d7f0aa8d376ffb0b5e814007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168e567b8990000040300473045022100fbe5c9fd1c28320bd41081d8b46a36c003933ee4aa43497ab85785fa7d0b565202206a58ba2a1c51f6fe27a4b852f79b2c9e4a27657febb22d4b3f1fe5c92dc60fa5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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